Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: D8luxPyQGWWBUFU5RUgFG1Ct+8X3bJa29BJAyDC2JTY=
Subject key identifier: 13:DC:B8:5B:5B:74:EB:AA:76:4B:25:9F:46:9C:39:FB:94:CC:AB:FF
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0198D6298450DC1BE74FBA48B274F75A6138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 02A5
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: kIgDZb1mJNxoy-31G2UkNHRwWx0.roa (hash: zPGGaXstMh703tXkFi/JyzFhGqACNCTHmmN1tjIc6M0=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: Q0EjIyCk6cidIhai0xOlssFqys//kx+nlpn5YmKK0yk=)
4: yDLDs_9-xCJNS7Lq59X6rTIHpaM.roa (hash: mZAephRDHWr1NJfSrOQS8hE88/V7vwaKpzI1ny1rx80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:84:50:dc:1b:e7:4f:ba:48:b2:74:f7:5a:61:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=13dcb85b5b74ebaa764b259f469c39fb94ccabff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:02:c8:7c:e2:fb:2b:e8:62:26:b8:58:85:
01:88:5b:9c:cf:cb:80:58:aa:7e:07:b6:8e:dd:2a:
95:77:b9:a2:df:5f:c9:d1:eb:16:9e:78:56:52:16:
76:51:70:3e:a7:70:36:ce:8f:83:77:d1:ab:9d:33:
85:38:ca:ff:95:f8:8b:4c:2b:ae:e2:db:b3:78:46:
b3:fd:06:78:0a:c0:70:c4:0f:19:34:1e:c0:8b:17:
17:68:ae:d7:8f:c0:bb:97:ff:bf:47:0e:5d:49:0c:
2a:87:55:dc:ba:36:1f:56:54:fb:63:8c:85:16:c2:
b8:34:5b:ca:13:cb:ef:27:b1:6d:51:88:ce:4d:cb:
1c:67:7e:ac:9b:db:3b:90:85:51:a4:64:52:b7:16:
35:9f:14:41:ac:b4:c5:ef:35:53:52:02:33:1c:4b:
e7:1b:5d:14:8a:1d:68:a6:f3:d0:dc:38:cb:d7:fd:
69:33:84:b6:2c:39:fc:3c:a6:7c:66:b7:54:a8:af:
1d:18:0f:8f:54:7a:7f:f2:7d:0d:b1:c4:0c:a6:3a:
19:c5:e9:78:14:76:2c:60:e3:f0:43:94:0e:cc:c2:
16:11:27:66:1a:a7:8f:a0:f4:d4:75:12:86:36:6b:
ac:7c:60:da:65:00:b5:7e:3e:9c:1c:de:fc:de:1b:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:B8:5B:5B:74:EB:AA:76:4B:25:9F:46:9C:39:FB:94:CC:AB:FF
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a2:67:6d:01:ad:86:03:c7:e2:07:05:e4:02:7c:9c:40:d2:
e8:47:11:54:83:75:c0:80:10:d8:73:ef:46:35:8a:14:58:a4:
da:56:32:60:7c:99:b2:82:e1:ce:c2:ff:1a:bd:ab:36:c7:59:
03:a5:d3:5a:36:13:29:d0:e7:bc:84:4c:3b:9e:11:d8:9d:06:
c6:7f:a3:2c:ff:9a:60:1e:99:ff:1d:e0:7f:bd:6c:01:5e:58:
74:b7:b5:29:6a:5b:e4:48:f0:d8:bc:13:00:d0:93:ce:dc:a5:
d0:87:eb:33:94:06:e2:62:30:18:97:fc:21:ac:c9:7a:67:0d:
87:e3:f7:16:5a:a3:76:7a:41:bf:29:c2:5c:2c:4f:08:8d:a2:
50:cd:27:b1:f8:d1:2f:cf:5d:b8:b8:47:78:1a:8a:d7:6c:c3:
e3:c9:96:b2:e2:e6:22:25:29:17:12:bd:39:67:05:2e:2b:82:
55:01:d3:ff:dd:5b:d8:b9:5b:4d:dc:d8:63:55:f8:19:92:cf:
21:5a:92:11:ce:d4:09:f7:3f:35:94:e9:97:89:2a:d3:b8:d3:
fe:f2:88:2c:39:b2:b6:51:66:16:38:61:83:20:53:dd:40:a2:
38:2e:3c:cd:c5:28:fe:c4:50:d8:44:ea:41:7d:35:39:09:d4:
26:68:9e:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKYRQ3BvnT7pIsnT3WmE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZGQyYTgxNTA2MGFhN2U2MjFhMjA5NDM0OTc1OGIyMDM2
ODk2ZjAwHhcNMjUwODIzMDkwMTQxWhcNMjUwODI0MDkwMTQxWjAzMTEwLwYDVQQD
EygxM2RjYjg1YjViNzRlYmFhNzY0YjI1OWY0NjljMzlmYjk0Y2NhYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgQCyHzi+yvoYia4WIUBiFucz8uA
WKp+B7aO3SqVd7mi31/J0esWnnhWUhZ2UXA+p3A2zo+Dd9GrnTOFOMr/lfiLTCuu
4tuzeEaz/QZ4CsBwxA8ZNB7AixcXaK7Xj8C7l/+/Rw5dSQwqh1XcujYfVlT7Y4yF
FsK4NFvKE8vvJ7FtUYjOTcscZ36sm9s7kIVRpGRStxY1nxRBrLTF7zVTUgIzHEvn
G10Uih1opvPQ3DjL1/1pM4S2LDn8PKZ8ZrdUqK8dGA+PVHp/8n0NscQMpjoZxel4
FHYsYOPwQ5QOzMIWESdmGqePoPTUdRKGNmusfGDaZQC1fj6cHN783hsAcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPcuFtbdOuqdksln0acOfuUzKv/MB8GA1UdIwQY
MBaAFK3dKoFQYKp+YhoglDSXWLIDaJbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYt
OGEwZDBiZjBiNTc3LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYtOGEwZDBiZjBiNTc3
LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKJnbQGt
hgPH4gcF5AJ8nEDS6EcRVIN1wIAQ2HPvRjWKFFik2lYyYHyZsoLhzsL/Gr2rNsdZ
A6XTWjYTKdDnvIRMO54R2J0Gxn+jLP+aYB6Z/x3gf71sAV5YdLe1KWpb5Ejw2LwT
ANCTztyl0IfrM5QG4mIwGJf8IazJemcNh+P3FlqjdnpBvynCXCxPCI2iUM0nsfjR
L89duLhHeBqK12zD48mWsuLmIiUpFxK9OWcFLiuCVQHT/91b2LlbTdzYY1X4GZLP
IVqSEc7UCfc/NZTpl4kq07jT/vKILDmytlFmFjhhgyBT3UCiOC48zcUo/sRQ2ETq
QX01OQnUJmiekg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:53 2025 by rpki-client