Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: ZYZi4SigKkk8O1wtdu0usZ8hJEN5Zg6gYEIZbE2xbGE=
Subject key identifier: 3A:FA:1B:6C:85:97:4E:AD:09:93:7B:9E:91:4B:FA:CD:67:6C:C5:8F
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 0198D698587447F6D47FE7D8B3AC0CC9EE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:44 +0000
Manifest this update: Sat 23 Aug 2025 11:02:44 +0000
Manifest next update: Sun 24 Aug 2025 11:02:44 +0000
Files and hashes: 1: CqEll3qj27nC3RPq0fziUJlBCNs.roa (hash: ne9W9a5q+GjzbaXSyhc66nMcJYTTVJvwji8w4P/0Sl4=)
2: dPc9m_TH3I35OVg96ErdD-dIFxE.roa (hash: 6rEh+8XVtIQuMK//Hp1XM75izAZwXIaq6ISFlV91ktM=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: SQGjUPQ74XHWORujtv28u/aM0J05qWk3hD3z4YTu92g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:58:74:47:f6:d4:7f:e7:d8:b3:ac:0c:c9:ee:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Aug 23 11:02:44 2025 GMT
Not After : Aug 24 11:02:44 2025 GMT
Subject: CN=3afa1b6c85974ead09937b9e914bfacd676cc58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:ae:bf:6f:1f:e2:b3:c2:b5:9d:b5:ff:e6:
2e:27:f8:a5:38:3a:98:63:29:db:f9:8b:42:21:fb:
ac:c8:ac:6a:0a:fe:50:95:16:53:3d:4b:32:bc:5c:
c7:10:45:90:87:71:32:00:70:81:34:82:08:15:be:
6b:15:9f:4a:42:de:c5:bf:56:18:69:86:45:5c:67:
b7:66:78:f7:06:54:77:ed:00:59:bd:db:7c:26:be:
0f:94:91:cf:ae:e9:75:72:81:e8:ec:43:1f:93:ac:
34:56:00:22:54:3d:f0:60:47:d5:78:f3:25:5e:b5:
fa:08:94:e2:b9:79:35:8e:8e:bd:4f:ab:ca:30:12:
26:69:26:2e:37:f9:03:dd:8b:77:73:12:f0:02:cf:
c6:4b:37:a5:ca:18:56:c4:28:ea:6a:24:89:5a:f9:
84:a0:e5:2c:65:d8:cd:6c:58:d7:77:7f:eb:ba:45:
7c:91:a2:fc:82:38:34:b7:6f:69:3f:a8:3d:11:2d:
5b:c3:a0:3c:a6:64:75:0a:e2:81:0f:c0:e6:5f:32:
70:c7:6f:7a:4d:72:2e:37:d0:61:0a:e8:69:4f:11:
c0:86:c9:2f:4f:45:4d:e2:26:59:38:e9:45:cc:a5:
d2:e6:e5:a4:b0:13:5d:2d:78:36:0c:9b:8c:56:76:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FA:1B:6C:85:97:4E:AD:09:93:7B:9E:91:4B:FA:CD:67:6C:C5:8F
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:00:39:cd:11:e4:63:f0:3d:6b:ab:fc:2e:b0:86:36:5a:00:
ba:41:67:22:2a:11:30:9c:62:06:ed:0a:77:ab:1f:2c:a4:24:
41:50:4c:4e:9f:90:64:7d:73:af:b4:d0:75:8d:d1:ea:4b:0b:
a8:92:2f:f2:0e:7a:f0:7b:73:c7:b5:da:fb:7e:ca:b6:59:53:
eb:a5:32:ec:2a:1a:ee:4c:c6:f7:8d:57:20:4c:0d:23:29:d7:
db:35:be:79:20:51:d3:35:a3:ea:e8:c7:6a:ae:6e:82:56:7a:
b8:47:20:ad:e3:b9:68:d3:02:e7:5b:28:cf:53:21:91:7b:35:
de:ef:d9:7d:74:68:db:1a:46:5c:2c:89:47:e9:31:ec:6c:3e:
4e:e8:5b:77:62:31:7a:32:e6:7a:db:cc:d0:4f:4a:f1:d6:c5:
10:96:17:fd:a5:06:38:01:d6:3a:7d:31:3f:e4:3f:8e:9d:4b:
b8:dd:5f:e1:6d:f8:4d:5b:24:b4:2a:33:dc:80:37:86:ff:92:
e3:2e:49:2f:3c:0d:4a:47:a3:be:ce:a9:1f:b4:ab:36:e1:be:
62:8f:1b:18:b4:5d:6a:e6:6e:03:d6:ac:a0:24:b8:f4:fc:5c:
1e:d4:8e:b7:84:46:44:e0:bb:e9:04:c8:91:dd:8e:a5:42:07:
31:b5:c6:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmFh0R/bUf+fYs6wMye5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjk2NzgyZmYxMjFhZTVhNmQ5ZDVjZmEzODQ3OTc2OGI2
YmYwYmQwHhcNMjUwODIzMTEwMjQ0WhcNMjUwODI0MTEwMjQ0WjAzMTEwLwYDVQQD
EygzYWZhMWI2Yzg1OTc0ZWFkMDk5MzdiOWU5MTRiZmFjZDY3NmNjNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgauv28f4rPCtZ21/+YuJ/ilODqY
Yynb+YtCIfusyKxqCv5QlRZTPUsyvFzHEEWQh3EyAHCBNIIIFb5rFZ9KQt7Fv1YY
aYZFXGe3Znj3BlR37QBZvdt8Jr4PlJHPrul1coHo7EMfk6w0VgAiVD3wYEfVePMl
XrX6CJTiuXk1jo69T6vKMBImaSYuN/kD3Yt3cxLwAs/GSzelyhhWxCjqaiSJWvmE
oOUsZdjNbFjXd3/rukV8kaL8gjg0t29pP6g9ES1bw6A8pmR1CuKBD8DmXzJwx296
TXIuN9BhCuhpTxHAhskvT0VN4iZZOOlFzKXS5uWksBNdLXg2DJuMVnaOMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr6G2yFl06tCZN7npFL+s1nbMWPMB8GA1UdIwQY
MBaAFHxpZ4L/EhrlptnVz6OEeXaLa/C9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEt
NmY4MzZmMzVmNTk0LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEtNmY4MzZmMzVmNTk0
LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawA5zRHk
Y/A9a6v8LrCGNloAukFnIioRMJxiBu0Kd6sfLKQkQVBMTp+QZH1zr7TQdY3R6ksL
qJIv8g568Htzx7Xa+37KtllT66Uy7Coa7kzG941XIEwNIynX2zW+eSBR0zWj6ujH
aq5uglZ6uEcgreO5aNMC51soz1MhkXs13u/ZfXRo2xpGXCyJR+kx7Gw+Tuhbd2Ix
ejLmetvM0E9K8dbFEJYX/aUGOAHWOn0xP+Q/jp1LuN1f4W34TVsktCoz3IA3hv+S
4y5JLzwNSkejvs6pH7SrNuG+Yo8bGLRdauZuA9asoCS49PxcHtSOt4RGROC76QTI
kd2OpUIHMbXGuw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:44 2025 by rpki-client