Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: Wpa9Tc2LUrutdgDOUXXsWXtIaBXkd+3BIaE/VggmOVI=
Subject key identifier: C8:F8:C3:CB:0B:8F:4D:49:C7:FB:E0:2D:68:67:9B:14:04:95:73:C0
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 0198D4735C6A474E74EF1796F2FE9147D539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:06 +0000
Manifest this update: Sat 23 Aug 2025 01:03:06 +0000
Manifest next update: Sun 24 Aug 2025 01:03:06 +0000
Files and hashes: 1: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (hash: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=)
2: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: cCcua7XLPdYE/id1itUgIoVgLFTpk5+Lfe8R5gjWpMg=)
3: l5yAXyPGwA9Y5lyLs2yb1MceJsY.roa (hash: AJ6lbq1xzcp35bTjVgiXhAuT5kBSyVNhwmMHHhgVeKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:5c:6a:47:4e:74:ef:17:96:f2:fe:91:47:d5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Aug 23 01:03:06 2025 GMT
Not After : Aug 24 01:03:06 2025 GMT
Subject: CN=c8f8c3cb0b8f4d49c7fbe02d68679b14049573c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:ab:ab:0d:02:1b:f1:08:c7:31:2b:52:23:
c6:ea:6e:b9:41:f8:64:81:28:29:64:3a:da:86:0e:
92:1a:2d:da:6a:7c:97:92:dc:6c:84:61:72:46:ea:
13:5f:c7:c6:3a:41:78:93:9f:88:33:2a:5e:a0:60:
fa:43:1a:56:c4:e5:6a:ac:61:de:f1:87:12:09:65:
44:e2:fb:5c:f9:3f:ff:e6:b8:84:da:ad:3b:07:52:
62:32:5d:83:73:6d:e8:11:65:e5:db:92:6e:d4:a6:
8d:de:dd:be:83:1d:88:5f:99:1a:86:58:29:6c:a3:
fa:5c:08:e9:9c:38:a5:7b:57:c3:a1:cd:0f:1e:19:
ea:1a:ee:da:9c:b3:bd:e4:ed:e8:06:cb:f5:0c:fd:
9e:af:be:13:d8:6d:8d:c6:99:c4:17:a8:10:d6:dc:
eb:71:de:12:86:f3:7f:b7:24:5e:78:7d:8d:dd:f8:
d3:43:98:4b:0a:00:de:bb:3b:6a:18:77:24:63:9b:
56:5f:0b:df:b5:14:6f:4c:14:c3:4e:fd:55:1a:2e:
5f:67:e1:ad:b2:b2:f1:69:aa:a8:d8:f3:9c:c8:4e:
52:29:40:f2:be:e6:bf:92:25:99:9e:61:52:68:84:
8c:e2:ec:d3:19:8c:e6:ca:40:ad:1e:cd:30:00:4f:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F8:C3:CB:0B:8F:4D:49:C7:FB:E0:2D:68:67:9B:14:04:95:73:C0
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a6:7c:b4:25:48:7f:50:52:a1:67:0c:e9:05:28:f2:d0:7d:
08:18:9e:01:db:c6:2f:d5:43:d9:32:52:58:e9:c7:94:12:ed:
ad:a8:1e:78:08:8e:01:54:00:8b:92:54:f5:9a:61:d9:39:42:
99:55:b6:95:cb:17:f6:31:0b:f7:9b:35:cf:4c:20:78:21:f5:
5d:ed:e7:3e:5e:19:a0:09:f3:5e:3a:df:ba:f6:f0:c6:a4:f0:
65:b5:6f:95:90:34:18:29:79:6e:46:be:20:f7:06:95:cf:ec:
d2:a3:a3:d0:82:24:4d:2f:c1:ea:20:a7:fc:95:69:55:1e:0d:
c9:f8:e4:05:20:e0:16:bd:0f:7d:b4:ff:ac:a3:4c:4a:e3:22:
00:f7:b3:26:4f:1f:15:45:c7:b6:b4:12:d1:bd:36:b4:8c:93:
81:2f:a7:74:8d:09:dd:8b:5e:c5:ea:b6:68:8f:05:28:65:6e:
b5:dd:e0:a1:e9:62:99:4d:2e:e7:ef:bf:e2:73:f9:1a:49:ff:
97:0f:dd:42:58:6c:17:52:b7:df:97:c6:ef:60:8a:0a:f8:39:
31:f3:5d:7f:03:cf:88:b4:32:e6:78:64:14:26:c0:e4:df:45:
d9:54:e4:39:1a:3b:c6:2e:cb:2f:01:9e:7f:b0:9a:7f:2b:58:
6b:66:6b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc1xqR0507xeW8v6RR9U5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmU2YjlhMGU2ODk4YTdhMmU5ZDg0ZDNkYmY2MzI3YjQ1
M2U2NjIwHhcNMjUwODIzMDEwMzA2WhcNMjUwODI0MDEwMzA2WjAzMTEwLwYDVQQD
EyhjOGY4YzNjYjBiOGY0ZDQ5YzdmYmUwMmQ2ODY3OWIxNDA0OTU3M2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nKrqw0CG/EIxzErUiPG6m65Qfhk
gSgpZDrahg6SGi3aanyXktxshGFyRuoTX8fGOkF4k5+IMypeoGD6QxpWxOVqrGHe
8YcSCWVE4vtc+T//5riE2q07B1JiMl2Dc23oEWXl25Ju1KaN3t2+gx2IX5kahlgp
bKP6XAjpnDile1fDoc0PHhnqGu7anLO95O3oBsv1DP2er74T2G2NxpnEF6gQ1tzr
cd4ShvN/tyReeH2N3fjTQ5hLCgDeuztqGHckY5tWXwvftRRvTBTDTv1VGi5fZ+Gt
srLxaaqo2POcyE5SKUDyvua/kiWZnmFSaISM4uzTGYzmykCtHs0wAE9XSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj4w8sLj01Jx/vgLWhnmxQElXPAMB8GA1UdIwQY
MBaAFBv+a5oOaJinounYTT2/Yye0U+ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEt
NmUyMmJmNDM2MzA0LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEtNmUyMmJmNDM2MzA0
LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaZ8tCVI
f1BSoWcM6QUo8tB9CBieAdvGL9VD2TJSWOnHlBLtrageeAiOAVQAi5JU9Zph2TlC
mVW2lcsX9jEL95s1z0wgeCH1Xe3nPl4ZoAnzXjrfuvbwxqTwZbVvlZA0GCl5bka+
IPcGlc/s0qOj0IIkTS/B6iCn/JVpVR4NyfjkBSDgFr0PfbT/rKNMSuMiAPezJk8f
FUXHtrQS0b02tIyTgS+ndI0J3Ytexeq2aI8FKGVutd3goelimU0u5++/4nP5Gkn/
lw/dQlhsF1K335fG72CKCvg5MfNdfwPPiLQy5nhkFCbA5N9F2VTkORo7xi7LLwGe
f7CafytYa2ZrSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:31 2025 by rpki-client