Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: 6bMn4HBIHt/EihVaWA3iBuMK4/fqpzKldeAu6433cGw=
Subject key identifier: 3D:9A:B7:37:80:8D:61:5A:E9:2B:28:E6:CF:17:68:D8:18:56:78:7C
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 019A01EC15A8C613249D8B38FC0C0CB87C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 14:00:40 +0000
Manifest this update: Mon 20 Oct 2025 14:00:40 +0000
Manifest next update: Tue 21 Oct 2025 14:00:40 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: Mi37ciVWh+fsj4lgxUKJHKS/BvZApd2vUJI+IvP1eHQ=)
2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:15:a8:c6:13:24:9d:8b:38:fc:0c:0c:b8:7c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Oct 20 14:00:40 2025 GMT
Not After : Oct 21 14:00:40 2025 GMT
Subject: CN=3d9ab737808d615ae92b28e6cf1768d81856787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:0e:1b:79:90:0c:52:45:23:65:16:fc:98:
66:6e:ad:dd:62:71:0d:9b:ee:ab:0e:c6:ea:34:f2:
f2:8e:2b:00:bf:36:a8:2d:b6:d2:a6:90:b3:d9:e9:
f2:c9:3f:48:9b:c6:97:e5:3f:3a:a5:71:f4:71:b8:
70:78:fa:a7:a2:c1:6a:ab:0a:1d:40:9f:06:db:46:
f0:53:8e:4f:9e:7f:bf:6b:ee:ee:c9:61:42:a5:5d:
50:3a:50:ea:fa:ff:b5:69:c7:d1:eb:28:15:9e:d3:
2b:e5:d5:3e:db:70:bd:37:5e:d5:26:83:b3:27:5d:
6a:d4:57:1e:bc:6e:bd:1e:d9:81:19:b5:ff:54:7f:
97:82:3e:7e:50:ab:54:32:c9:1d:b6:a9:5d:9e:35:
ab:99:7a:d2:81:4d:f7:c8:c4:82:27:ef:aa:1c:b8:
6b:56:01:0e:de:00:82:04:ff:a9:85:06:c0:cf:66:
e7:d6:52:8a:0a:75:90:99:43:f8:59:e7:0e:df:a7:
8c:75:c1:d9:0e:fc:23:a5:0d:7c:92:cc:f0:b6:90:
b8:7b:8b:96:e2:0e:22:66:21:11:ca:35:45:83:2b:
f1:58:c1:f6:e4:3a:a0:3d:de:ca:e6:b5:30:ad:b0:
4a:de:e1:f9:8e:85:23:f4:71:45:9d:1a:39:75:91:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9A:B7:37:80:8D:61:5A:E9:2B:28:E6:CF:17:68:D8:18:56:78:7C
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d3:f1:d9:e6:d7:dd:19:24:da:5e:d4:11:80:c1:3a:1d:28:
3d:98:83:45:c2:4b:fc:46:f9:fb:64:a1:9c:78:a5:83:17:e1:
ff:09:1c:33:ba:88:ae:89:1c:1c:bb:6b:5f:40:91:07:4c:cb:
b5:76:fc:72:5b:b8:1d:e5:d8:d9:12:a5:f9:c6:42:37:7d:e3:
67:94:23:92:1a:0a:d8:ca:0a:06:82:25:52:88:bf:0f:f1:ff:
f1:61:be:a8:c6:38:31:a8:89:51:f7:f0:84:cf:b8:01:0d:fd:
7f:f4:db:97:4c:57:9c:c1:d0:e8:dc:c9:0a:ac:83:12:ed:cf:
34:e8:5d:2a:c3:6b:23:67:d6:ce:9f:7e:2a:63:ed:e9:64:98:
d0:a4:90:32:b2:61:47:72:06:cd:be:16:01:af:c6:c5:97:6e:
1f:21:ba:52:4c:27:60:7d:cc:70:8d:2f:a5:d5:ee:79:e0:81:
f2:51:03:2b:d7:54:ae:3c:bc:e4:68:58:37:e4:48:77:28:a1:
30:a1:11:7e:97:e3:14:23:6b:b9:fa:25:03:e5:8b:49:a7:d1:
07:ea:55:fa:92:b5:5c:60:95:4b:70:39:7c:50:22:9f:94:b5:
e3:47:40:b4:70:37:77:a4:ca:e5:d6:7d:fd:27:cd:14:b8:83:
ca:30:1a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB7BWoxhMknYs4/AwMuHwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi
N2MyNGQwHhcNMjUxMDIwMTQwMDQwWhcNMjUxMDIxMTQwMDQwWjAzMTEwLwYDVQQD
EygzZDlhYjczNzgwOGQ2MTVhZTkyYjI4ZTZjZjE3NjhkODE4NTY3ODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JUOG3mQDFJFI2UW/Jhmbq3dYnEN
m+6rDsbqNPLyjisAvzaoLbbSppCz2enyyT9Im8aX5T86pXH0cbhwePqnosFqqwod
QJ8G20bwU45Pnn+/a+7uyWFCpV1QOlDq+v+1acfR6ygVntMr5dU+23C9N17VJoOz
J11q1FcevG69HtmBGbX/VH+Xgj5+UKtUMskdtqldnjWrmXrSgU33yMSCJ++qHLhr
VgEO3gCCBP+phQbAz2bn1lKKCnWQmUP4WecO36eMdcHZDvwjpQ18kszwtpC4e4uW
4g4iZiERyjVFgyvxWMH25DqgPd7K5rUwrbBK3uH5joUj9HFFnRo5dZGigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2atzeAjWFa6Sso5s8XaNgYVnh8MB8GA1UdIwQY
MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut
ZTFmZDBiMWYwZWZkLzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk
LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9Px2ebX
3Rkk2l7UEYDBOh0oPZiDRcJL/Eb5+2ShnHilgxfh/wkcM7qIrokcHLtrX0CRB0zL
tXb8clu4HeXY2RKl+cZCN33jZ5QjkhoK2MoKBoIlUoi/D/H/8WG+qMY4MaiJUffw
hM+4AQ39f/Tbl0xXnMHQ6NzJCqyDEu3PNOhdKsNrI2fWzp9+KmPt6WSY0KSQMrJh
R3IGzb4WAa/GxZduHyG6UkwnYH3McI0vpdXueeCB8lEDK9dUrjy85GhYN+RIdyih
MKERfpfjFCNrufolA+WLSafRB+pV+pK1XGCVS3A5fFAin5S140dAtHA3d6TK5dZ9
/SfNFLiDyjAauA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:05 2025 by rpki-client