Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File: rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier: 2kRuDqChhinCKqY6hGopjRiKgwD7axKTriLmDCYRl9Y=
Subject key identifier: 03:B7:AE:09:F3:CF:F9:E0:4E:53:D5:2C:63:E1:57:29:5C:71:FC:D9
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 0197D5876F31FC694989F618DAE6FA38B23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number: 15CA
Signing time: Fri 04 Jul 2025 13:01:52 +0000
Manifest this update: Fri 04 Jul 2025 13:01:52 +0000
Manifest next update: Sat 05 Jul 2025 13:01:52 +0000
Files and hashes: 1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=)
2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=)
3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=)
4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: uAP4yDOiVCx/B6n/Vq+HTlRQAlb0M0YB38tqPxJk9Vs=)
5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:87:6f:31:fc:69:49:89:f6:18:da:e6:fa:38:b2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jul 4 13:01:52 2025 GMT
Not After : Jul 5 13:01:52 2025 GMT
Subject: CN=03b7ae09f3cff9e04e53d52c63e157295c71fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:da:17:91:06:52:f2:8e:c7:78:2c:20:1d:
83:42:cd:3c:a3:45:11:10:49:24:56:1d:ad:90:ef:
3b:c0:d1:2f:16:2e:f7:63:d8:cd:fe:23:e0:b7:c4:
25:1a:f9:64:5a:e3:67:8a:47:bc:27:eb:63:60:c0:
11:3e:3e:55:fc:55:44:d9:38:ee:de:3f:eb:5c:1d:
3a:82:b1:86:39:1a:73:8a:ee:10:51:aa:71:7c:97:
da:ae:df:9c:d0:21:ee:e1:63:aa:b9:d0:77:83:a4:
14:2b:fe:01:65:94:51:3a:51:43:4a:64:2a:ac:d4:
94:8a:61:48:43:35:6b:e1:f9:88:88:29:ae:ca:60:
89:88:bb:e5:1a:c4:17:63:79:b5:b7:2f:f4:e5:3f:
5e:68:2b:7e:f7:e8:fa:55:a6:43:6a:ab:0d:11:6a:
c4:03:5f:67:dd:3b:0f:1a:85:2f:ca:b2:bc:52:03:
f4:8f:37:13:11:b7:d2:18:a9:c7:4e:c0:80:64:10:
65:06:fc:6f:2b:6c:d6:d6:dd:e0:51:06:10:c5:0b:
9b:ab:01:f9:69:04:0a:e6:6b:d4:cd:61:03:1d:f5:
b9:fb:e8:db:2f:f7:c9:6e:32:fb:79:4a:63:7a:15:
cd:43:11:c4:93:f9:49:23:0f:4f:8b:82:78:c2:99:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B7:AE:09:F3:CF:F9:E0:4E:53:D5:2C:63:E1:57:29:5C:71:FC:D9
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:10:75:ee:a7:6a:6f:b7:cd:45:e5:88:b4:1c:1d:36:fd:22:
29:7e:14:9f:01:a9:8e:52:0a:a0:e4:b1:06:a4:9d:58:d2:f1:
04:f9:6d:a7:7a:e0:fe:b8:3f:43:36:9d:85:f2:36:b0:ab:70:
9f:06:23:01:2d:05:32:9c:ae:77:e6:e7:9c:a5:58:93:0c:01:
0f:50:34:c6:be:74:b7:28:9e:d2:f0:7f:89:c6:b0:ab:9f:03:
37:54:f3:a4:2d:fa:47:8b:e2:1c:59:0c:ad:39:aa:39:05:65:
f8:8d:89:71:9d:59:d7:4b:c7:2d:01:df:05:65:d4:f6:2b:8a:
2d:ca:26:8f:3a:4a:33:f0:bc:2a:80:7e:d3:a4:e8:74:5b:fc:
32:86:5e:81:b4:f9:54:e2:39:5f:be:80:cb:76:0f:68:46:a8:
f5:b4:33:5c:43:f4:a2:9f:30:d4:e9:f9:b5:b2:fe:26:ac:88:
8d:1e:f2:e5:10:6a:b2:52:00:a6:b9:5a:0b:33:77:5b:16:32:
b3:db:75:7b:cd:2a:f7:5d:7a:88:4d:e8:32:74:1e:ab:b7:3b:
b8:aa:46:8d:56:b9:4d:2c:ba:2d:1b:fc:a3:06:48:43:fa:d2:
89:11:0b:d8:bd:27:90:f9:d5:f8:c8:30:18:9e:8c:8b:44:23:
7a:b9:09:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfVh28x/GlJifYY2ub6OLI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh
OGZmOGIwHhcNMjUwNzA0MTMwMTUyWhcNMjUwNzA1MTMwMTUyWjAzMTEwLwYDVQQD
EygwM2I3YWUwOWYzY2ZmOWUwNGU1M2Q1MmM2M2UxNTcyOTVjNzFmY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg7aF5EGUvKOx3gsIB2DQs08o0UR
EEkkVh2tkO87wNEvFi73Y9jN/iPgt8QlGvlkWuNnike8J+tjYMARPj5V/FVE2Tju
3j/rXB06grGGORpziu4QUapxfJfart+c0CHu4WOqudB3g6QUK/4BZZRROlFDSmQq
rNSUimFIQzVr4fmIiCmuymCJiLvlGsQXY3m1ty/05T9eaCt+9+j6VaZDaqsNEWrE
A19n3TsPGoUvyrK8UgP0jzcTEbfSGKnHTsCAZBBlBvxvK2zW1t3gUQYQxQubqwH5
aQQK5mvUzWEDHfW5++jbL/fJbjL7eUpjehXNQxHEk/lJIw9Pi4J4wpnmIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAO3rgnzz/ngTlPVLGPhVylccfzZMB8GA1UdIwQY
MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt
ZjY2MjZiNjMzODNlLzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl
LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRB17qdq
b7fNReWItBwdNv0iKX4UnwGpjlIKoOSxBqSdWNLxBPltp3rg/rg/QzadhfI2sKtw
nwYjAS0FMpyud+bnnKVYkwwBD1A0xr50tyie0vB/icawq58DN1TzpC36R4viHFkM
rTmqOQVl+I2JcZ1Z10vHLQHfBWXU9iuKLcomjzpKM/C8KoB+06TodFv8MoZegbT5
VOI5X76Ay3YPaEao9bQzXEP0op8w1On5tbL+JqyIjR7y5RBqslIAprlaCzN3WxYy
s9t1e80q9116iE3oMnQeq7c7uKpGjVa5TSy6LRv8owZIQ/rSiREL2L0nkPnV+Mgw
GJ6Mi0QjerkJQA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:04:51 2025 by rpki-client