Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File: rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier: IQM8nbAOv2+aL8N0sB6aZ7WUt9GDM4XkXRzhUMX8DMo=
Subject key identifier: C6:6B:1E:AB:3A:83:6F:EB:E3:84:95:67:47:7C:FE:D7:0B:AC:47:63
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 019A52D1E9843AF3F70D07477C2D65B971D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 07:01:19 +0000
Manifest this update: Wed 05 Nov 2025 07:01:19 +0000
Manifest next update: Thu 06 Nov 2025 07:01:19 +0000
Files and hashes: 1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=)
2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=)
3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=)
4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: 4GCbV4viRm4JKKsiTS4I6VJtAHh3FthwPV9pM68fx40=)
5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:e9:84:3a:f3:f7:0d:07:47:7c:2d:65:b9:71:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Nov 5 07:01:19 2025 GMT
Not After : Nov 6 07:01:19 2025 GMT
Subject: CN=c66b1eab3a836febe3849567477cfed70bac4763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:5c:9c:aa:28:73:f1:68:c2:20:14:4f:e2:
06:10:c9:e7:e2:c2:77:6d:fb:f6:da:6d:1b:8c:cc:
e7:b8:40:c0:49:5c:6e:f9:89:97:ff:8e:9c:c9:32:
59:9a:81:a8:48:de:50:e6:27:2b:a2:6d:6b:a3:e0:
e8:98:95:bb:7d:48:1c:6e:e1:5a:3b:8b:da:13:88:
65:62:73:23:77:79:76:23:54:a5:b5:e3:02:0d:39:
88:a0:1f:1d:2c:fd:4f:e3:20:8d:18:12:b9:fc:84:
2c:dc:2d:22:d5:7a:86:fb:38:e3:b6:63:69:2b:33:
9d:72:a7:45:42:4d:0b:eb:ca:27:b8:6b:45:23:12:
ef:6d:47:9e:f6:0e:e5:6a:3f:b1:9e:b9:95:45:8e:
1f:f4:6a:e9:8f:69:b7:c5:0f:3f:e4:d3:3a:80:32:
2b:38:69:a4:a5:63:ed:ed:e1:0e:cf:aa:c8:04:57:
31:2e:25:c6:60:88:9a:d3:33:60:54:14:6a:eb:55:
40:e6:7f:d5:4d:c4:c3:30:b1:d1:97:b5:a6:cd:aa:
95:d1:09:df:f8:60:8f:d6:2d:5f:fd:e0:da:e9:42:
c0:97:77:96:2a:d9:3d:37:76:54:88:82:fa:fd:f9:
53:8a:84:26:1c:3f:d3:a1:f2:e5:ec:20:c2:63:13:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:1E:AB:3A:83:6F:EB:E3:84:95:67:47:7C:FE:D7:0B:AC:47:63
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:6c:dc:9c:67:05:7d:b7:38:60:0e:42:30:ed:f1:d0:e8:
11:f4:11:0a:84:f2:8c:5b:f2:ad:ae:bb:28:82:c1:dd:a1:0d:
b1:26:4e:22:67:f3:36:a4:b0:a7:df:0c:fd:75:d6:e9:34:d0:
85:04:da:fd:3c:4f:f7:be:06:9b:ef:f0:86:23:59:25:92:1d:
2f:a0:72:5a:32:14:c9:0f:f5:d9:23:4a:65:bf:b1:81:80:5e:
5c:2f:17:e2:32:ff:6a:71:f3:57:d1:56:21:56:b6:a5:16:e6:
fb:90:22:26:0f:c0:cb:ca:b4:3d:73:ac:e2:32:f3:e3:59:d1:
22:f7:1d:73:27:7b:32:72:06:4a:55:23:e7:a5:8f:28:90:ed:
80:89:2f:2f:4e:78:2b:1e:ab:11:7a:d6:21:0c:dc:d3:66:91:
02:53:a8:6c:a8:ef:ae:de:8a:7c:1c:19:7e:92:b8:ad:03:4c:
f8:c9:db:34:31:9c:f0:17:45:ff:0b:cc:d5:ca:3a:6c:a6:35:
e1:5b:85:48:b7:61:b4:10:97:51:30:2a:22:3b:ff:76:28:48:
38:fd:5f:85:e2:61:1b:fc:04:99:f4:c7:5e:25:f4:94:f5:db:
1b:39:ef:4d:03:be:04:0a:59:a9:e7:77:4a:4c:24:7a:9f:5b:
2f:96:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:12 2025 by rpki-client