Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: zNkObnqd7vmr1A83a1YGWJGCzrxWNpdQFuxHwKuNqbM=
Subject key identifier: 1D:A9:A8:92:66:4D:F6:2A:A2:05:05:C9:73:DD:16:8E:0E:D1:F0:00
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 019A4D3D31D1C2E81371CB7C4C7CD47623AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:47 +0000
Manifest this update: Tue 04 Nov 2025 05:00:47 +0000
Manifest next update: Wed 05 Nov 2025 05:00:47 +0000
Files and hashes: 1: CqEll3qj27nC3RPq0fziUJlBCNs.roa (hash: ne9W9a5q+GjzbaXSyhc66nMcJYTTVJvwji8w4P/0Sl4=)
2: dPc9m_TH3I35OVg96ErdD-dIFxE.roa (hash: 6rEh+8XVtIQuMK//Hp1XM75izAZwXIaq6ISFlV91ktM=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: hlfsKg9LztY2HU+2lHZtsY+fMPFdGgi73o4J3Vn4LF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:31:d1:c2:e8:13:71:cb:7c:4c:7c:d4:76:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Nov 4 05:00:47 2025 GMT
Not After : Nov 5 05:00:47 2025 GMT
Subject: CN=1da9a892664df62aa20505c973dd168e0ed1f000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:b9:12:a2:72:89:34:1c:01:f2:92:29:17:
ce:cf:f5:b5:36:7e:87:3e:22:ba:a1:55:58:82:ca:
e3:6a:41:90:6f:2e:64:59:ed:e3:58:e5:29:2c:e1:
54:8c:2c:78:25:5c:3c:d3:07:ae:b8:78:ae:64:7a:
7f:b2:89:e0:42:a7:f5:90:e4:7d:6e:b7:f0:2e:c9:
a5:9d:cf:1b:26:be:af:1b:15:bc:2b:93:0e:9e:7d:
f1:e4:de:17:a1:e2:b9:4f:3e:8e:cc:d2:7a:74:d4:
23:68:42:34:48:bd:3b:44:db:26:91:76:05:6b:39:
2a:6e:c5:30:64:69:65:87:2b:40:50:6d:96:18:b0:
bd:78:fe:e8:df:39:b5:4d:76:0c:18:15:6a:d3:59:
80:ac:4f:90:b7:e3:cd:4c:79:71:00:8b:53:1a:71:
4f:69:d4:37:6e:9b:33:3b:3d:4c:7a:0c:ea:9d:f3:
24:3e:e6:b8:63:e9:d6:21:96:62:14:73:bc:20:37:
a7:26:fb:c6:95:a7:55:ae:e5:8f:3f:85:cc:00:32:
e2:7d:77:f6:ed:4a:3f:40:92:43:4c:06:1e:97:17:
d3:53:82:04:8f:73:fd:9a:d9:ed:9b:ae:b1:f8:99:
52:f1:03:22:ff:0f:03:4f:01:c2:f8:d5:68:b3:6b:
7e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:A8:92:66:4D:F6:2A:A2:05:05:C9:73:DD:16:8E:0E:D1:F0:00
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0c:7f:71:fb:37:0e:5c:10:92:ba:a2:83:95:d3:88:1e:7c:
38:aa:cc:fc:eb:bf:ba:09:9b:2a:bd:05:b3:66:85:a3:8e:8d:
73:c2:60:5f:5f:04:08:c0:f8:2d:dc:f9:82:0a:77:8a:de:06:
09:7c:1d:df:91:24:a8:20:8d:e6:f5:0d:5e:c7:07:cf:b0:61:
e4:bf:c4:2e:f6:f2:ee:64:79:28:c3:4c:61:58:8c:b8:89:33:
42:d4:04:bb:5d:4b:fa:02:54:91:29:c9:7c:76:e2:03:10:9f:
d8:04:34:fa:ef:08:98:1d:1c:9c:48:d9:1c:40:22:a7:e4:81:
3b:d8:aa:c7:61:68:9e:14:94:6d:2d:aa:4f:d6:f2:c5:23:65:
df:67:5d:5f:c4:57:7b:ff:37:d3:28:81:8f:e5:84:5d:b7:19:
ee:82:a9:fd:1f:c3:f1:2a:52:52:16:5b:e3:61:70:1f:bb:1a:
cb:c3:12:31:1e:10:d3:b5:24:13:c1:a8:7b:83:10:d1:23:28:
d7:92:48:19:bf:c5:e4:41:3d:7b:0b:95:c5:f5:86:8d:a7:77:
bb:32:56:17:77:fc:29:91:0c:e0:d6:25:af:82:9c:bb:7a:4f:
95:14:91:d4:39:2b:63:79:11:bb:6a:4f:f4:2f:ff:3d:bd:cd:
7a:76:ce:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPTHRwugTcct8THzUdiOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjk2NzgyZmYxMjFhZTVhNmQ5ZDVjZmEzODQ3OTc2OGI2
YmYwYmQwHhcNMjUxMTA0MDUwMDQ3WhcNMjUxMTA1MDUwMDQ3WjAzMTEwLwYDVQQD
EygxZGE5YTg5MjY2NGRmNjJhYTIwNTA1Yzk3M2RkMTY4ZTBlZDFmMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wW5EqJyiTQcAfKSKRfOz/W1Nn6H
PiK6oVVYgsrjakGQby5kWe3jWOUpLOFUjCx4JVw80weuuHiuZHp/songQqf1kOR9
brfwLsmlnc8bJr6vGxW8K5MOnn3x5N4XoeK5Tz6OzNJ6dNQjaEI0SL07RNsmkXYF
azkqbsUwZGllhytAUG2WGLC9eP7o3zm1TXYMGBVq01mArE+Qt+PNTHlxAItTGnFP
adQ3bpszOz1MegzqnfMkPua4Y+nWIZZiFHO8IDenJvvGladVruWPP4XMADLifXf2
7Uo/QJJDTAYelxfTU4IEj3P9mtntm66x+JlS8QMi/w8DTwHC+NVos2t+zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2pqJJmTfYqogUFyXPdFo4O0fAAMB8GA1UdIwQY
MBaAFHxpZ4L/EhrlptnVz6OEeXaLa/C9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEt
NmY4MzZmMzVmNTk0LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEtNmY4MzZmMzVmNTk0
LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogx/cfs3
DlwQkrqig5XTiB58OKrM/Ou/ugmbKr0Fs2aFo46Nc8JgX18ECMD4Ldz5ggp3it4G
CXwd35EkqCCN5vUNXscHz7Bh5L/ELvby7mR5KMNMYViMuIkzQtQEu11L+gJUkSnJ
fHbiAxCf2AQ0+u8ImB0cnEjZHEAip+SBO9iqx2FonhSUbS2qT9byxSNl32ddX8RX
e/830yiBj+WEXbcZ7oKp/R/D8SpSUhZb42FwH7say8MSMR4Q07UkE8Goe4MQ0SMo
15JIGb/F5EE9ewuVxfWGjad3uzJWF3f8KZEM4NYlr4Kcu3pPlRSR1DkrY3kRu2pP
9C//Pb3NenbOnA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:28 2025 by rpki-client