Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: zOORF5Ec8qt4tpbRb1Wyf4lgzEKgmC01OdpbTURgqic=
Subject key identifier: 1C:A5:F6:AE:0D:8A:73:C1:82:2B:56:6F:46:26:8B:18:02:0E:BB:11
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 01992E239E0B2A7209CA75E5CC0F89E219E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 060B
Signing time: Tue 09 Sep 2025 11:01:50 +0000
Manifest this update: Tue 09 Sep 2025 11:01:50 +0000
Manifest next update: Wed 10 Sep 2025 11:01:50 +0000
Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: DDc83iBPzRFd5cYS+n6aKxgpZ/BNVDjk1NjaJrdkDrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:9e:0b:2a:72:09:ca:75:e5:cc:0f:89:e2:19:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Sep 9 11:01:50 2025 GMT
Not After : Sep 10 11:01:50 2025 GMT
Subject: CN=1ca5f6ae0d8a73c1822b566f46268b18020ebb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:bf:95:04:93:a3:8e:64:42:21:7d:d1:41:
d2:7e:c4:79:5c:34:ed:9f:2d:ef:c9:13:b6:85:20:
7a:c0:08:71:e8:1e:a0:31:58:b3:9f:49:6b:12:f2:
76:db:bd:47:60:02:cf:d8:ce:2c:56:40:6c:92:12:
95:22:90:88:05:7c:7b:74:60:15:c4:2a:c3:69:2e:
77:cb:96:4f:2a:06:85:fe:a5:dd:2f:a4:04:1b:7b:
d5:10:22:f1:7a:e0:ee:02:25:63:9d:fb:d8:5f:a7:
54:11:1e:3e:2c:18:05:18:8c:e9:d2:86:11:f9:d6:
c1:e7:c2:64:4b:df:d6:bd:95:8a:00:0f:bc:ce:b9:
58:61:53:df:f9:1d:a7:d5:7f:a9:e6:75:4f:74:d1:
51:0f:75:ba:45:cc:4b:6a:7b:fc:60:4f:bd:41:69:
bb:43:8f:ac:15:30:5c:70:34:c3:84:83:ea:7d:23:
27:92:bb:9f:fa:e4:b7:f4:a6:59:93:d1:46:59:11:
8f:02:06:dc:30:ca:b6:75:b0:b6:6f:f5:2e:f3:65:
c5:29:ec:55:9d:53:eb:9b:15:06:3f:4b:f9:57:dc:
00:bb:27:f7:ab:ee:fd:1d:d4:7e:30:77:bf:44:f9:
da:21:68:72:76:38:2e:cf:d3:94:2e:4d:61:7f:fd:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:F6:AE:0D:8A:73:C1:82:2B:56:6F:46:26:8B:18:02:0E:BB:11
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:59:bd:3d:d3:02:9e:28:6e:1f:cd:96:e3:a5:f6:d5:a1:9c:
57:58:86:6a:c9:8e:8f:6c:fb:2b:26:bb:e6:8d:2e:42:e2:9a:
63:71:14:16:3f:42:de:f0:3a:17:0d:62:4b:f1:ef:23:22:19:
b4:f2:85:ce:cc:67:d7:4e:71:9d:d7:e2:ef:ce:3f:7f:94:8b:
c2:4c:3a:e4:00:4f:ab:ed:31:f0:18:8c:7e:b1:a9:88:3d:84:
b5:c7:5b:d5:34:ba:3f:16:3d:3c:02:f0:e2:b6:99:5e:a4:fb:
00:9b:d7:a8:53:f4:40:0e:6b:52:9f:59:b2:2e:ee:92:9b:11:
07:f6:81:5c:e0:1f:f7:76:45:1d:4e:76:fa:74:65:5f:0b:37:
5f:50:a8:95:63:8c:e5:d7:28:cc:9d:b1:b6:61:22:45:c1:76:
6f:c6:5a:b3:a1:24:03:12:c6:79:ab:1e:63:0f:ff:df:3d:4c:
de:45:df:d2:20:ae:f1:d7:75:0a:33:ff:7f:7f:1c:80:6a:43:
91:15:34:83:40:f1:9b:43:f8:b4:0c:b0:0d:59:ef:77:5a:f7:
43:0d:f3:ed:00:d2:e7:81:e1:5d:9f:47:c2:11:da:2a:a2:cc:
67:57:16:56:18:dd:1a:74:b5:50:30:60:c9:ad:f5:bf:54:f5:
84:e3:3c:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkuI54LKnIJynXlzA+J4hnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ0OTc1YTVkYmRiZjgyM2I0YTBhNmI3ZWViOTliMTQ4
NDM2N2UwHhcNMjUwOTA5MTEwMTUwWhcNMjUwOTEwMTEwMTUwWjAzMTEwLwYDVQQD
EygxY2E1ZjZhZTBkOGE3M2MxODIyYjU2NmY0NjI2OGIxODAyMGViYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb2/lQSTo45kQiF90UHSfsR5XDTt
ny3vyRO2hSB6wAhx6B6gMVizn0lrEvJ2271HYALP2M4sVkBskhKVIpCIBXx7dGAV
xCrDaS53y5ZPKgaF/qXdL6QEG3vVECLxeuDuAiVjnfvYX6dUER4+LBgFGIzp0oYR
+dbB58JkS9/WvZWKAA+8zrlYYVPf+R2n1X+p5nVPdNFRD3W6RcxLanv8YE+9QWm7
Q4+sFTBccDTDhIPqfSMnkruf+uS39KZZk9FGWRGPAgbcMMq2dbC2b/Uu82XFKexV
nVPrmxUGP0v5V9wAuyf3q+79HdR+MHe/RPnaIWhydjguz9OULk1hf/07iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByl9q4NinPBgitWb0YmixgCDrsRMB8GA1UdIwQY
MBaAFK30SXWl29v4I7SgprfuuZsUhDZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDkt
YmJiMGM4MDI4ZTJiLzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDktYmJiMGM4MDI4ZTJi
LzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1m9PdMC
nihuH82W46X21aGcV1iGasmOj2z7Kya75o0uQuKaY3EUFj9C3vA6Fw1iS/HvIyIZ
tPKFzsxn105xndfi784/f5SLwkw65ABPq+0x8BiMfrGpiD2Etcdb1TS6PxY9PALw
4raZXqT7AJvXqFP0QA5rUp9Zsi7ukpsRB/aBXOAf93ZFHU52+nRlXws3X1ColWOM
5dcozJ2xtmEiRcF2b8Zas6EkAxLGeaseYw//3z1M3kXf0iCu8dd1CjP/f38cgGpD
kRU0g0Dxm0P4tAywDVnvd1r3Qw3z7QDS54HhXZ9HwhHaKqLMZ1cWVhjdGnS1UDBg
ya31v1T1hOM8OQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:31:25 2025 by rpki-client