Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: wc3hltmoMCtoc3pVCIJmM1Q8PqgKgGYTe0z/E05CJ3Q=
Subject key identifier: AD:23:5E:6F:6F:13:AF:E1:75:1B:10:B9:9A:D3:2D:21:09:32:19:00
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 019849D38EDFA6FB91F9511856BAF35C7A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:58 +0000
Manifest this update: Sun 27 Jul 2025 03:00:58 +0000
Manifest next update: Mon 28 Jul 2025 03:00:58 +0000
Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: gQHi8+dlArdp+G+coOoDCzusgpv6b+1cdu42voZL/ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8e:df:a6:fb:91:f9:51:18:56:ba:f3:5c:7a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Jul 27 03:00:58 2025 GMT
Not After : Jul 28 03:00:58 2025 GMT
Subject: CN=ad235e6f6f13afe1751b10b99ad32d2109321900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:49:25:36:22:cd:b2:a2:61:e3:58:10:44:
7f:ad:0f:1c:7a:fe:ff:30:59:62:2b:15:16:aa:cd:
d9:d5:ac:c8:e5:38:74:21:ec:0e:a5:7e:90:94:a1:
94:a9:e5:e5:f9:79:1e:0a:df:66:ac:6a:c2:e0:c5:
50:d0:b1:1a:bc:ac:3a:bb:79:46:9c:ed:98:7f:90:
92:86:04:93:bc:41:b2:70:54:bf:5e:78:54:1a:31:
29:9c:54:60:7d:90:29:8d:0b:23:2e:e5:f9:67:53:
86:da:e6:e4:83:d4:61:87:ca:b8:3a:e0:ba:6b:c1:
5d:6f:4d:e2:de:c4:00:95:82:42:43:b6:7f:2e:47:
6d:23:a1:4a:da:b7:a8:d8:ab:b9:06:eb:bf:0a:6c:
49:db:24:4b:22:14:28:8f:e8:8d:4f:a2:04:89:d7:
dc:60:f6:3a:b8:65:95:f1:53:91:a8:0f:a2:9c:ec:
0d:cc:4a:b2:13:ef:41:e8:8e:7a:11:60:16:5c:0e:
52:de:36:f7:72:00:6a:9d:c5:14:96:24:e7:71:a9:
ee:4c:b4:d7:35:f8:67:6b:df:d7:4b:11:02:85:ef:
db:d4:27:e3:43:28:c7:b1:ca:a5:26:8c:b8:62:19:
38:a7:b5:47:41:70:fb:11:f6:44:6c:c1:55:5a:59:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:5E:6F:6F:13:AF:E1:75:1B:10:B9:9A:D3:2D:21:09:32:19:00
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:41:bc:59:ab:1e:5e:63:a9:a9:54:d4:eb:dc:ca:8b:21:38:
8b:4e:14:98:1a:83:25:eb:f9:f3:58:ed:76:50:c5:d2:86:52:
da:59:69:58:34:0f:d5:2b:88:8b:a1:41:5d:53:6c:7a:0f:7f:
03:c8:fb:0d:a1:cb:e9:81:63:1e:97:49:16:53:0f:df:89:5f:
f4:de:f6:8e:08:13:67:5c:2f:43:e9:a3:fe:87:0e:9c:2c:de:
b1:c7:ce:cc:af:59:0a:ca:b4:71:c5:3b:5c:41:e9:2d:64:cf:
91:fd:ad:0d:23:9d:d6:b6:16:64:76:6a:91:db:36:2c:1d:5e:
f3:b4:3d:51:d3:d9:46:e3:46:43:8c:86:76:8f:06:de:b3:9a:
64:10:ed:1b:8a:76:40:fa:30:53:af:7a:34:e1:d2:0a:6d:97:
f9:0c:88:4a:c8:69:4a:a3:7e:25:16:51:7b:63:15:8c:91:39:
ac:c6:45:9c:7d:18:c5:5c:af:ce:d8:79:d2:61:a4:24:bd:b4:
eb:39:f6:aa:ec:56:f0:ae:6f:c9:61:6b:a2:f3:be:6a:66:a6:
1d:1c:75:d3:7d:d4:94:e5:d2:b3:d1:5e:6c:70:22:83:8c:90:
70:47:97:aa:14:4c:dc:17:13:2b:12:ba:dd:ab:bc:0b:cb:42:
76:86:47:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ047fpvuR+VEYVrrzXHpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTBjZGQwYjhiNzMzMDRjOTg1ZmRlMWIxMGU0MDE4MmJm
MTM5MDIwHhcNMjUwNzI3MDMwMDU4WhcNMjUwNzI4MDMwMDU4WjAzMTEwLwYDVQQD
EyhhZDIzNWU2ZjZmMTNhZmUxNzUxYjEwYjk5YWQzMmQyMTA5MzIxOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XpJJTYizbKiYeNYEER/rQ8cev7/
MFliKxUWqs3Z1azI5Th0IewOpX6QlKGUqeXl+XkeCt9mrGrC4MVQ0LEavKw6u3lG
nO2Yf5CShgSTvEGycFS/XnhUGjEpnFRgfZApjQsjLuX5Z1OG2ubkg9Rhh8q4OuC6
a8Fdb03i3sQAlYJCQ7Z/LkdtI6FK2reo2Ku5Buu/CmxJ2yRLIhQoj+iNT6IEidfc
YPY6uGWV8VORqA+inOwNzEqyE+9B6I56EWAWXA5S3jb3cgBqncUUliTncanuTLTX
Nfhna9/XSxEChe/b1CfjQyjHscqlJoy4Yhk4p7VHQXD7EfZEbMFVWlmHuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0jXm9vE6/hdRsQuZrTLSEJMhkAMB8GA1UdIwQY
MBaAFK0QzdC4tzMEyYX94bEOQBgr8TkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDIt
NDdiYmYyMWVhYzlmLzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDItNDdiYmYyMWVhYzlm
LzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUG8Wase
XmOpqVTU69zKiyE4i04UmBqDJev581jtdlDF0oZS2llpWDQP1SuIi6FBXVNseg9/
A8j7DaHL6YFjHpdJFlMP34lf9N72jggTZ1wvQ+mj/ocOnCzescfOzK9ZCsq0ccU7
XEHpLWTPkf2tDSOd1rYWZHZqkds2LB1e87Q9UdPZRuNGQ4yGdo8G3rOaZBDtG4p2
QPowU696NOHSCm2X+QyISshpSqN+JRZRe2MVjJE5rMZFnH0YxVyvzth50mGkJL20
6zn2quxW8K5vyWFrovO+amamHRx1033UlOXSs9FebHAig4yQcEeXqhRM3BcTKxK6
3au8C8tCdoZHNA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:23 2025 by rpki-client