Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File: Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier: ebUWLlM79X+66AFWbF3gipedqAVnra1HY5VL7vZJLoM=
Subject key identifier: A8:1D:54:65:D2:AE:D9:00:69:24:70:AB:4F:E3:E6:C2:5A:BC:D6:7D
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 0197B5FC1070131BC114774EB07702E2503B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number: 147B
Signing time: Sat 28 Jun 2025 10:01:24 +0000
Manifest this update: Sat 28 Jun 2025 10:01:24 +0000
Manifest next update: Sun 29 Jun 2025 10:01:24 +0000
Files and hashes: 1: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: E2z7bl7+oP0hSxlwlEU943SnVPSHolFYwwgY4D6RRt0=)
2: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (hash: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=)
3: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (hash: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:10:70:13:1b:c1:14:77:4e:b0:77:02:e2:50:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jun 28 10:01:24 2025 GMT
Not After : Jun 29 10:01:24 2025 GMT
Subject: CN=a81d5465d2aed900692470ab4fe3e6c25abcd67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9c:64:bf:a3:10:55:ae:df:dd:e4:d0:97:28:
9f:e4:e0:b3:ac:12:c9:09:3a:5e:de:96:3e:43:4e:
51:eb:66:71:5c:20:b5:84:6d:82:91:44:ec:1b:b3:
c8:d7:e8:c3:bc:32:1e:b3:cb:91:44:ba:20:d7:3f:
0d:3b:cb:ad:3c:8b:28:8f:49:58:15:f8:c4:5b:bc:
19:b4:74:3d:c5:4d:b7:f8:d6:db:63:e2:91:af:61:
fc:29:32:92:ae:9b:04:d3:e9:fa:2f:3d:5e:5c:87:
ad:54:a9:83:7b:d7:44:d3:43:33:f7:70:9c:63:8c:
a0:6a:6b:25:31:3e:e8:50:c3:2b:90:f0:2b:88:3f:
ac:df:65:62:2b:3a:40:ce:05:36:91:9b:8d:98:82:
19:a0:b4:a1:7b:3c:e5:44:2d:a8:ad:bd:48:11:3c:
6a:fe:06:1a:4c:6f:91:d2:11:9c:a1:da:f7:90:83:
06:35:b4:a4:13:e8:19:bf:0f:91:8a:9a:bb:de:86:
80:11:0f:64:a0:09:4a:12:13:b7:18:bb:89:44:37:
1d:9b:2e:9f:17:19:49:d4:37:bb:ee:23:7e:0d:d8:
7c:4c:80:b7:67:7b:74:a1:2f:ca:cf:7e:8e:31:0a:
a2:a1:02:db:a6:bd:55:41:16:b6:d2:8f:ea:3d:cc:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:54:65:D2:AE:D9:00:69:24:70:AB:4F:E3:E6:C2:5A:BC:D6:7D
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:71:b2:d2:65:71:92:0f:8e:75:53:5c:a1:95:ea:ef:e5:28:
0f:26:ff:d2:b8:c3:71:34:0e:dc:5c:b8:5c:98:47:3d:30:10:
f4:02:fb:92:06:95:e1:b3:bc:39:47:d5:26:91:02:ff:c1:83:
56:14:b8:c7:56:6d:d0:2d:11:fd:52:78:4c:81:21:96:ab:e0:
8e:40:f2:c0:52:50:5f:0e:fa:2f:12:fa:b9:9f:95:c2:91:39:
1f:77:b1:9a:a8:18:85:93:81:32:b6:39:c9:3e:a6:45:a6:dc:
bc:98:90:5f:55:0b:e0:1d:ba:59:e8:c3:fd:4c:46:11:a2:84:
cc:99:d6:83:42:c5:f5:7b:90:d9:32:a5:c7:f4:2f:14:9d:77:
ec:ef:5d:32:47:78:b9:fc:fb:c3:a0:a8:40:0a:ee:cb:54:67:
cf:6f:c9:a0:fa:2c:f1:23:48:2a:21:6d:9c:67:87:d1:e7:ea:
c3:71:82:fc:73:77:a7:19:2a:2d:a7:67:29:b8:f6:dc:76:b2:
5b:26:b7:2f:11:79:53:e6:b9:e1:5f:96:1f:f7:5b:d8:34:ff:
50:cb:73:35:5b:8a:4d:71:7b:b3:cb:ce:4a:2c:ce:10:9d:60:
51:50:97:84:03:97:dd:ff:65:f7:db:4e:cc:f5:2b:38:8f:71:
31:c4:17:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/BBwExvBFHdOsHcC4lA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0
YzUwMTkwHhcNMjUwNjI4MTAwMTI0WhcNMjUwNjI5MTAwMTI0WjAzMTEwLwYDVQQD
EyhhODFkNTQ2NWQyYWVkOTAwNjkyNDcwYWI0ZmUzZTZjMjVhYmNkNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZxkv6MQVa7f3eTQlyif5OCzrBLJ
CTpe3pY+Q05R62ZxXCC1hG2CkUTsG7PI1+jDvDIes8uRRLog1z8NO8utPIsoj0lY
FfjEW7wZtHQ9xU23+NbbY+KRr2H8KTKSrpsE0+n6Lz1eXIetVKmDe9dE00Mz93Cc
Y4ygamslMT7oUMMrkPAriD+s32ViKzpAzgU2kZuNmIIZoLShezzlRC2orb1IETxq
/gYaTG+R0hGcodr3kIMGNbSkE+gZvw+Ripq73oaAEQ9koAlKEhO3GLuJRDcdmy6f
FxlJ1De77iN+Ddh8TIC3Z3t0oS/Kz36OMQqioQLbpr1VQRa20o/qPcyJ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgdVGXSrtkAaSRwq0/j5sJavNZ9MB8GA1UdIwQY
MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt
NzViZDk0NmE3MzU1LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1
LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHGy0mVx
kg+OdVNcoZXq7+UoDyb/0rjDcTQO3Fy4XJhHPTAQ9AL7kgaV4bO8OUfVJpEC/8GD
VhS4x1Zt0C0R/VJ4TIEhlqvgjkDywFJQXw76LxL6uZ+VwpE5H3exmqgYhZOBMrY5
yT6mRabcvJiQX1UL4B26WejD/UxGEaKEzJnWg0LF9XuQ2TKlx/QvFJ137O9dMkd4
ufz7w6CoQAruy1Rnz2/JoPos8SNIKiFtnGeH0efqw3GC/HN3pxkqLadnKbj23Hay
Wya3LxF5U+a54V+WH/db2DT/UMtzNVuKTXF7s8vOSizOEJ1gUVCXhAOX3f9l99tO
zPUrOI9xMcQXsw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:34 2025 by rpki-client