Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: zuzOxVxCJkO0mtMLlDXyzRdd2YF42ZEYTQZWF9W2/xg=
Subject key identifier: FC:9A:7C:5E:17:E2:C0:C8:89:A5:45:8B:FA:1D:75:2F:CE:2C:5F:48
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 0198D705A9486F8DB99374D04E2B28220698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 15A1
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: wNfmyGFdX7WP+BG7obMlMftLvqnyLe8Vs69YiWljtM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a9:48:6f:8d:b9:93:74:d0:4e:2b:28:22:06:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=fc9a7c5e17e2c0c889a5458bfa1d752fce2c5f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:a4:18:ab:ee:ce:92:8d:7b:5f:1f:94:db:
50:38:5e:06:51:b2:e0:d9:2b:de:12:8d:9a:08:98:
77:a9:f3:29:01:f9:05:94:07:84:3a:bf:25:fd:ee:
73:a9:2e:1a:82:7b:11:14:4f:19:44:82:7b:4e:3d:
a8:2d:ec:12:2f:12:28:67:b1:f2:60:72:57:60:0b:
b2:4a:b7:c6:a4:79:8f:3c:44:60:fc:fb:ae:78:28:
da:a6:c0:a8:af:82:f5:56:6d:ac:71:47:0d:dc:f9:
74:45:85:43:15:f9:90:43:23:28:da:e7:d6:a3:08:
78:80:01:b3:d1:2e:93:d4:0a:19:99:4f:da:b5:38:
87:1b:22:7b:68:b3:c5:d9:58:1b:42:c5:54:7c:0e:
57:2a:be:35:ed:8f:1b:88:bc:3b:bd:18:c7:5a:e8:
07:d9:59:ba:3e:db:cc:ee:5b:59:c4:40:63:69:5e:
51:8a:b9:51:5b:7c:56:46:4d:43:dc:36:6e:b9:65:
94:f1:19:b4:11:7a:97:9a:23:b7:b1:a8:9c:71:a8:
06:fe:66:e4:9f:1a:6e:c8:40:f3:0a:c6:a0:99:a6:
e7:d4:21:9a:f0:ca:8f:e6:19:f6:bd:f3:d3:db:66:
14:ac:9e:57:67:1f:32:ca:22:8a:42:d6:a9:26:26:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9A:7C:5E:17:E2:C0:C8:89:A5:45:8B:FA:1D:75:2F:CE:2C:5F:48
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:ed:48:80:e3:12:cb:c7:bd:2b:1a:55:f8:29:80:ff:26:
c8:ee:1e:6a:9f:72:45:ad:f2:ed:20:8a:70:69:4f:2a:89:37:
b3:e1:97:2d:33:88:df:c5:63:42:03:fd:11:88:dc:ed:be:e7:
6e:8c:56:76:94:b2:0e:9b:88:8a:12:7b:42:6b:32:67:a2:06:
e2:10:3e:c7:c0:81:67:3f:23:85:a9:5d:9c:17:93:24:7a:8d:
4b:a1:80:8c:47:cf:34:2f:99:bd:8c:d9:63:5e:a7:77:ce:9f:
99:0d:a6:42:1f:08:e3:75:26:8d:97:5e:34:04:30:29:3a:0f:
f6:23:c6:05:e5:d9:18:f8:20:fa:25:a0:43:9d:f8:0f:a4:1a:
58:7b:0b:8f:95:e7:e2:de:12:8a:d7:70:0b:7e:d6:9d:59:80:
20:69:3b:bd:15:2a:7a:ec:64:b3:33:c8:98:9f:9c:25:87:bc:
e4:db:b9:34:d0:1b:d8:ad:9d:fa:1f:b2:eb:df:7b:87:02:3e:
44:f5:6f:12:45:66:e0:ed:50:bb:08:3a:16:57:c0:53:cf:ad:
4a:14:dd:9b:30:70:3d:11:fc:b7:fa:73:5e:eb:24:3d:e6:9e:
fc:1f:b5:ac:84:a0:39:28:24:2c:37:82:4f:6a:6e:fa:cb:f5:
f1:7d:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:27 2025 by rpki-client