Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: tVO1T24Ni0Eq3bw3GKIZFZ2aV5gzVtjQ9gJ/lNq7M5I=
Subject key identifier: 18:68:B5:93:5B:27:59:60:10:6C:F6:34:06:5A:56:59:DD:52:A9:20
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 0198D4A7E971A7EBD3F0A65CBA1EE8C6ED8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:30 +0000
Manifest this update: Sat 23 Aug 2025 02:00:30 +0000
Manifest next update: Sun 24 Aug 2025 02:00:30 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: wa5bqw5gPXg7/luSjDjxX4dOb3ks9wNOAueKo8FtjxQ=)
2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e9:71:a7:eb:d3:f0:a6:5c:ba:1e:e8:c6:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Aug 23 02:00:30 2025 GMT
Not After : Aug 24 02:00:30 2025 GMT
Subject: CN=1868b5935b275960106cf634065a5659dd52a920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:e7:57:29:5d:9a:81:4a:90:d6:09:3d:99:
dd:d6:b2:bd:81:0e:0a:85:e9:0b:a8:8f:80:7d:7d:
b7:e9:91:8f:38:8a:eb:33:11:46:2f:56:d4:71:ce:
86:53:53:38:66:e6:c8:42:e7:04:e3:e6:14:ec:a9:
95:f3:70:8d:46:5b:f3:a6:e7:14:4d:33:bd:6c:46:
bf:e1:86:07:53:21:86:8c:28:f9:e6:74:00:40:09:
70:20:35:ef:56:5c:da:fc:64:8e:b9:b6:ec:21:8c:
41:92:1a:f5:7e:9a:9f:aa:1b:d2:3b:d9:32:f9:76:
67:73:32:8b:cc:b5:a0:59:9b:dc:dd:e8:cd:72:ee:
cf:7b:fa:e3:2e:c2:bc:56:c5:1e:77:90:32:74:19:
e7:f7:e8:49:d2:2e:12:7c:6a:ff:07:1c:72:f0:a8:
ae:37:c7:7b:31:51:c0:e6:58:1c:97:0f:c9:43:d7:
96:72:38:02:14:5f:18:48:31:ad:a1:da:e2:92:8e:
1a:b2:5a:b7:89:90:83:81:e4:70:37:c3:06:a7:09:
36:cb:21:b6:79:f4:57:70:c0:aa:c7:c0:72:27:9a:
30:46:94:47:13:18:3a:e2:5d:01:fe:30:19:f3:29:
ab:bf:3f:b4:cc:9b:c5:3c:b4:0d:4c:30:ea:a4:00:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:B5:93:5B:27:59:60:10:6C:F6:34:06:5A:56:59:DD:52:A9:20
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:b4:95:69:8e:49:92:60:64:80:4e:18:cd:06:a8:c2:a0:
1f:c2:13:c0:2f:6b:9a:2c:46:5a:c5:28:ad:f8:04:0f:0a:62:
54:a2:80:26:2d:8c:b8:9a:48:e7:d4:f7:ee:83:ac:a6:12:56:
9b:d5:fb:78:84:4e:18:e9:1f:5a:85:8e:97:28:9d:9a:5f:1d:
e1:1f:bc:4d:82:00:ec:2b:37:63:7f:01:da:64:55:52:92:8f:
2f:aa:a5:41:7a:98:9e:8f:b0:88:70:78:b3:27:90:64:7c:31:
ac:83:01:69:89:4b:8b:ba:ac:03:4b:f7:48:fd:0a:98:cd:c4:
30:2c:61:fa:9a:f8:83:10:a7:94:8f:96:92:38:ce:81:6a:7f:
1e:96:2b:f1:5c:b8:21:9a:6d:79:ae:74:fb:c5:20:d1:24:18:
29:cb:ef:be:36:bb:c6:b9:82:f8:35:69:0f:9d:86:90:ca:14:
4a:aa:1f:e0:27:d6:63:68:24:2a:b7:ab:31:71:fb:ee:db:6c:
ec:e5:da:fb:b9:03:fa:66:47:02:ca:44:b7:a1:97:3d:c4:8e:
43:8f:47:c6:e4:f0:f1:5a:bf:e6:b4:6f:41:c3:37:4f:2a:f4:
a4:29:2b:2f:de:cb:a0:bf:4d:39:db:3d:e8:4a:f3:f1:74:b2:
bf:25:33:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp+lxp+vT8KZcuh7oxu2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi
N2MyNGQwHhcNMjUwODIzMDIwMDMwWhcNMjUwODI0MDIwMDMwWjAzMTEwLwYDVQQD
EygxODY4YjU5MzViMjc1OTYwMTA2Y2Y2MzQwNjVhNTY1OWRkNTJhOTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL/nVyldmoFKkNYJPZnd1rK9gQ4K
hekLqI+AfX236ZGPOIrrMxFGL1bUcc6GU1M4ZubIQucE4+YU7KmV83CNRlvzpucU
TTO9bEa/4YYHUyGGjCj55nQAQAlwIDXvVlza/GSOubbsIYxBkhr1fpqfqhvSO9ky
+XZnczKLzLWgWZvc3ejNcu7Pe/rjLsK8VsUed5AydBnn9+hJ0i4SfGr/Bxxy8Kiu
N8d7MVHA5lgclw/JQ9eWcjgCFF8YSDGtodriko4aslq3iZCDgeRwN8MGpwk2yyG2
efRXcMCqx8ByJ5owRpRHExg64l0B/jAZ8ymrvz+0zJvFPLQNTDDqpABBpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhotZNbJ1lgEGz2NAZaVlndUqkgMB8GA1UdIwQY
MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut
ZTFmZDBiMWYwZWZkLzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk
LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB320lWmO
SZJgZIBOGM0GqMKgH8ITwC9rmixGWsUorfgEDwpiVKKAJi2MuJpI59T37oOsphJW
m9X7eIROGOkfWoWOlyidml8d4R+8TYIA7Cs3Y38B2mRVUpKPL6qlQXqYno+wiHB4
syeQZHwxrIMBaYlLi7qsA0v3SP0KmM3EMCxh+pr4gxCnlI+WkjjOgWp/HpYr8Vy4
IZptea50+8Ug0SQYKcvvvja7xrmC+DVpD52GkMoUSqof4CfWY2gkKrerMXH77tts
7OXa+7kD+mZHAspEt6GXPcSOQ49HxuTw8Vq/5rRvQcM3Tyr0pCkrL97LoL9NOds9
6Erz8XSyvyUzJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:44 2025 by rpki-client