Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: HJV+UuHC0zGCLN+GvbfsU3SuNerMP5EXo6q5doBVnzE=
Subject key identifier: 99:62:51:87:69:77:B3:AD:68:B9:B6:3A:47:AE:7C:FA:00:E3:F4:17
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 0197B77C8A481A2E106C55599A469D6AABB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 148C
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: 5XAxSNK1S/Sl4GUUftLI9TZIoyVGhg895gejcGkf3TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8a:48:1a:2e:10:6c:55:59:9a:46:9d:6a:ab:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=996251876977b3ad68b9b63a47ae7cfa00e3f417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:03:76:d9:23:04:8e:f5:cf:73:b7:bc:97:
14:41:ac:06:b4:57:54:0b:69:42:03:0f:52:5b:e6:
88:47:b1:42:03:c1:86:54:89:4d:d0:8c:52:d8:11:
33:34:3f:ec:0a:60:d5:b9:18:70:ee:ff:97:01:df:
4d:a7:64:a0:16:44:4d:99:81:ae:f8:69:34:dd:cb:
ec:2a:e8:c8:bd:d3:d8:a4:9e:36:6b:14:46:20:37:
fe:76:75:3e:38:9f:2c:51:cb:73:be:b6:a7:c1:2a:
5d:9a:8a:fa:e5:1d:40:df:03:0a:0f:ba:c2:69:5a:
2c:4d:29:3f:1c:78:9e:9d:20:3d:1a:5f:86:bc:f9:
9d:af:c3:bc:8a:a2:20:78:26:aa:2c:86:3f:82:77:
40:61:1e:37:96:77:9d:5f:b1:41:be:0f:a0:a9:cc:
04:c3:e0:77:45:5e:8a:38:2c:f4:f8:a5:88:de:51:
17:c4:11:c1:e9:2a:08:77:40:aa:83:81:56:df:4f:
dc:65:dc:b8:b7:e8:f4:4f:19:31:82:35:67:93:92:
ff:54:fd:85:fd:41:56:fc:45:e2:cc:dd:4c:3c:a1:
4d:db:bf:81:5a:72:e3:53:fb:29:ab:fc:57:6d:3b:
8d:ab:5f:42:10:49:1a:81:67:bf:5d:08:65:66:ee:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:51:87:69:77:B3:AD:68:B9:B6:3A:47:AE:7C:FA:00:E3:F4:17
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:38:ae:7e:ae:48:37:08:27:50:4c:50:49:39:6a:63:9a:02:
e7:40:09:0f:fc:5a:0d:8e:c9:ca:10:e1:3e:60:4b:1c:3c:27:
41:b9:0f:88:4e:f3:c3:40:7a:2a:7b:98:f2:9a:3d:8a:f8:36:
1c:3f:4e:ed:a5:40:79:04:38:b4:64:9a:d1:e6:d4:bb:d7:7e:
7d:eb:77:9f:52:43:c2:65:0f:c3:e5:c2:f4:f1:ce:bd:db:7b:
73:fa:c8:a3:50:19:87:1b:83:b4:ff:e2:3d:a9:fe:cf:35:df:
74:52:a7:2b:be:66:e0:b6:83:88:f7:2e:57:ce:dd:4e:5d:bf:
e9:20:2c:d7:00:98:5e:16:c2:47:2d:e3:26:61:ad:4c:12:d5:
32:2b:05:66:70:70:4b:74:db:5d:83:94:6f:c9:5c:3c:2e:67:
fe:55:e8:75:b6:8c:bf:7b:78:9c:05:ef:6f:bb:60:ab:b7:56:
10:5d:f4:88:e4:a6:06:80:eb:21:a5:5d:0c:53:c8:a7:3a:08:
2c:02:b3:41:bd:2c:c5:fe:d1:06:2e:0f:33:aa:47:b0:55:a2:
e8:85:54:b1:4e:f3:4e:c3:49:57:c6:ad:5f:c4:8d:b7:0f:4c:
f1:47:90:03:00:70:4c:25:1a:64:87:ba:f4:10:da:bb:5a:a4:
0b:41:52:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIpIGi4QbFVZmkadaqu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw
MGVmNTgwHhcNMjUwNjI4MTcwMTIxWhcNMjUwNjI5MTcwMTIxWjAzMTEwLwYDVQQD
Eyg5OTYyNTE4NzY5NzdiM2FkNjhiOWI2M2E0N2FlN2NmYTAwZTNmNDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiADdtkjBI71z3O3vJcUQawGtFdU
C2lCAw9SW+aIR7FCA8GGVIlN0IxS2BEzND/sCmDVuRhw7v+XAd9Np2SgFkRNmYGu
+Gk03cvsKujIvdPYpJ42axRGIDf+dnU+OJ8sUctzvranwSpdmor65R1A3wMKD7rC
aVosTSk/HHienSA9Gl+GvPmdr8O8iqIgeCaqLIY/gndAYR43lnedX7FBvg+gqcwE
w+B3RV6KOCz0+KWI3lEXxBHB6SoId0Cqg4FW30/cZdy4t+j0TxkxgjVnk5L/VP2F
/UFW/EXizN1MPKFN27+BWnLjU/spq/xXbTuNq19CEEkagWe/XQhlZu5U6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJliUYdpd7OtaLm2OkeufPoA4/QXMB8GA1UdIwQY
MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt
YmY0Yjc1ZTIwMGE3LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3
LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDiufq5I
NwgnUExQSTlqY5oC50AJD/xaDY7JyhDhPmBLHDwnQbkPiE7zw0B6KnuY8po9ivg2
HD9O7aVAeQQ4tGSa0ebUu9d+fet3n1JDwmUPw+XC9PHOvdt7c/rIo1AZhxuDtP/i
Pan+zzXfdFKnK75m4LaDiPcuV87dTl2/6SAs1wCYXhbCRy3jJmGtTBLVMisFZnBw
S3TbXYOUb8lcPC5n/lXodbaMv3t4nAXvb7tgq7dWEF30iOSmBoDrIaVdDFPIpzoI
LAKzQb0sxf7RBi4PM6pHsFWi6IVUsU7zTsNJV8atX8SNtw9M8UeQAwBwTCUaZIe6
9BDau1qkC0FSOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:44 2025 by rpki-client