Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: gYFrRJ7MoLISfLjA7/jz2gOGHicCi/ophIsiPnJ9BIU=
Subject key identifier: D5:CE:02:AA:7C:0D:E8:78:94:AF:DD:29:D3:35:ED:03:60:F7:E8:9D
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 0198729875E3A0B26BF0AAF499DBC267EE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 04FF
Signing time: Mon 04 Aug 2025 01:00:50 +0000
Manifest this update: Mon 04 Aug 2025 01:00:50 +0000
Manifest next update: Tue 05 Aug 2025 01:00:50 +0000
Files and hashes: 1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: 9YzU2enOYGYoqqC2/JMkRfNX/dnx0oyg7/6pcaaFbS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:75:e3:a0:b2:6b:f0:aa:f4:99:db:c2:67:ee:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Aug 4 01:00:50 2025 GMT
Not After : Aug 5 01:00:50 2025 GMT
Subject: CN=d5ce02aa7c0de87894afdd29d335ed0360f7e89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:e5:ec:37:3b:9a:f5:65:37:4e:df:4b:21:
b1:41:a0:8d:7f:f6:72:be:d6:c2:e1:d8:7d:8f:41:
a8:a3:e9:66:53:c6:af:9a:8a:da:d1:39:4e:22:65:
55:32:7c:e4:9b:30:20:97:01:40:f8:44:34:fa:84:
a4:64:d1:8f:68:aa:83:ba:bf:92:d6:84:91:10:20:
0a:3b:d7:49:2b:7a:ba:31:a4:a6:ec:75:58:89:60:
f4:41:99:8c:73:f0:c7:05:40:d1:a8:86:e7:2b:ba:
33:5f:21:17:fa:f6:0c:71:9c:e6:03:51:62:52:00:
b6:8c:b7:60:87:98:d7:32:2a:6b:28:a1:75:6a:5a:
f5:38:a4:32:39:2c:3b:58:5d:55:6c:fd:1a:d7:c7:
0d:f6:2f:b9:ee:68:f9:fd:a5:68:09:bf:bf:4a:36:
54:74:82:73:01:2d:52:be:70:7d:23:d4:dd:19:74:
0c:1b:64:ae:cf:b4:34:33:dc:d2:b0:15:bc:62:dd:
b6:06:69:b8:44:d6:39:78:30:63:4d:ce:dd:48:b1:
d9:de:75:ac:5d:9c:92:84:08:f9:66:49:7f:35:b6:
cb:d7:f7:f3:b9:ea:3d:d6:92:a8:37:8d:cb:1f:c8:
f6:84:75:7f:b3:9f:83:ff:da:f5:d2:5c:22:5c:24:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CE:02:AA:7C:0D:E8:78:94:AF:DD:29:D3:35:ED:03:60:F7:E8:9D
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:34:a0:d1:da:bc:40:43:d3:08:ae:c7:ba:fe:24:c4:bc:52:
a8:1e:c5:b9:1b:16:8a:f7:d9:a4:0b:4c:a6:ea:5b:89:5c:25:
b4:bd:21:8f:28:6e:07:ce:91:f1:d3:4f:37:03:ac:f3:49:15:
ad:04:c5:f0:78:d0:f9:49:07:18:f8:d6:dc:46:50:82:c2:d3:
f6:f9:31:02:59:89:bd:97:92:41:17:58:7d:b8:b2:3f:aa:c4:
2b:86:53:b1:bd:82:89:4e:ad:57:7e:ee:6b:07:e0:34:21:34:
32:0b:54:b7:3b:be:cb:07:d1:2a:93:04:55:ad:a7:78:d4:c3:
89:bd:d9:e1:bf:bd:30:ca:a3:e7:5d:dc:a8:bb:c9:13:51:c6:
fc:36:c9:7f:89:d3:c2:21:da:9e:86:ce:81:43:10:18:10:ec:
a2:e7:56:85:6f:ca:5b:63:81:db:e9:2f:1a:8b:ff:39:10:f1:
23:ab:b3:63:56:fd:c2:22:f3:25:8f:b7:5a:be:ed:d4:81:ec:
50:82:5f:6c:9d:7a:ec:93:98:b6:c2:ea:78:ed:a1:64:b4:a2:
f2:08:83:a0:32:2e:56:62:7d:7a:e2:50:9d:cd:9f:86:1e:78:
a3:ec:31:c6:49:c5:2c:52:b7:92:bf:6c:72:6c:85:f9:88:7c:
9f:0a:92:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymHXjoLJr8Kr0mdvCZ+4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjUwODA0MDEwMDUwWhcNMjUwODA1MDEwMDUwWjAzMTEwLwYDVQQD
EyhkNWNlMDJhYTdjMGRlODc4OTRhZmRkMjlkMzM1ZWQwMzYwZjdlODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29rl7Dc7mvVlN07fSyGxQaCNf/Zy
vtbC4dh9j0Goo+lmU8avmora0TlOImVVMnzkmzAglwFA+EQ0+oSkZNGPaKqDur+S
1oSRECAKO9dJK3q6MaSm7HVYiWD0QZmMc/DHBUDRqIbnK7ozXyEX+vYMcZzmA1Fi
UgC2jLdgh5jXMiprKKF1alr1OKQyOSw7WF1VbP0a18cN9i+57mj5/aVoCb+/SjZU
dIJzAS1SvnB9I9TdGXQMG2Suz7Q0M9zSsBW8Yt22Bmm4RNY5eDBjTc7dSLHZ3nWs
XZyShAj5Zkl/NbbL1/fzueo91pKoN43LH8j2hHV/s5+D/9r10lwiXCQZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXOAqp8Deh4lK/dKdM17QNg9+idMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTSg0dq8
QEPTCK7Huv4kxLxSqB7FuRsWivfZpAtMpupbiVwltL0hjyhuB86R8dNPNwOs80kV
rQTF8HjQ+UkHGPjW3EZQgsLT9vkxAlmJvZeSQRdYfbiyP6rEK4ZTsb2CiU6tV37u
awfgNCE0MgtUtzu+ywfRKpMEVa2neNTDib3Z4b+9MMqj513cqLvJE1HG/DbJf4nT
wiHanobOgUMQGBDsoudWhW/KW2OB2+kvGov/ORDxI6uzY1b9wiLzJY+3Wr7t1IHs
UIJfbJ167JOYtsLqeO2hZLSi8giDoDIuVmJ9euJQnc2fhh54o+wxxknFLFK3kr9s
cmyF+Yh8nwqSug==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:38 2025 by rpki-client