Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: TL221ni1iKBxhpP6RA2CYTrwQ5FoYDthjay9b0ZLTj0=
Subject key identifier: 68:F2:55:58:E8:DF:FE:D9:38:7D:63:0D:6E:9A:AA:6E:74:38:05:A4
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 01987419056A64B420028D7A33012B2ED0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:53 +0000
Manifest this update: Mon 04 Aug 2025 08:00:53 +0000
Manifest next update: Tue 05 Aug 2025 08:00:53 +0000
Files and hashes: 1: CqEll3qj27nC3RPq0fziUJlBCNs.roa (hash: ne9W9a5q+GjzbaXSyhc66nMcJYTTVJvwji8w4P/0Sl4=)
2: dPc9m_TH3I35OVg96ErdD-dIFxE.roa (hash: 6rEh+8XVtIQuMK//Hp1XM75izAZwXIaq6ISFlV91ktM=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: Yp6XiabgRPqlv8Eo7GHPWmDu0DskfdDHBWjuDE2CXhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:05:6a:64:b4:20:02:8d:7a:33:01:2b:2e:d0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Aug 4 08:00:53 2025 GMT
Not After : Aug 5 08:00:53 2025 GMT
Subject: CN=68f25558e8dffed9387d630d6e9aaa6e743805a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:92:ca:31:70:54:13:e3:db:36:e9:bc:a5:
87:26:81:1e:ad:67:6d:c2:f0:12:c5:60:d9:c2:03:
a6:15:3f:52:78:4f:b4:14:2f:31:c8:99:4b:4e:8c:
2c:69:c3:ca:d5:28:bd:4b:63:da:89:a1:25:ff:52:
55:d7:0d:d7:07:36:c3:4e:6d:1c:9c:bd:2c:70:c8:
22:2e:c0:3e:fd:57:98:96:8d:bb:04:aa:ce:8e:72:
fe:e9:52:04:53:c4:19:10:d5:77:8f:60:77:7f:0f:
64:c2:61:85:c4:d7:7f:2d:ca:cf:f6:66:a6:7f:d9:
65:27:ad:02:02:be:52:93:fe:a8:4a:ce:eb:5b:a5:
ef:b0:d8:63:63:c8:c5:f4:10:e6:06:c3:e0:c6:c5:
01:b7:d0:01:2c:2c:47:7d:c7:07:73:05:ec:f1:85:
f0:cb:53:1c:df:1c:e1:96:ab:45:37:40:d4:92:15:
4a:33:2b:d3:db:c2:0f:b9:bb:7a:e1:05:35:99:ce:
86:8b:b4:26:bb:0e:24:6d:6e:e0:d6:92:0b:39:4c:
eb:30:6a:06:94:87:92:11:d1:d0:4f:50:78:68:2a:
ef:9b:b6:53:61:b7:76:35:14:10:ee:9c:00:38:cc:
e4:b3:1c:a9:5b:f1:31:3c:79:d2:2d:9c:81:f0:63:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:55:58:E8:DF:FE:D9:38:7D:63:0D:6E:9A:AA:6E:74:38:05:A4
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:56:78:b2:61:8d:9e:43:b1:dc:66:7b:d9:8e:0e:13:3e:51:
b8:5d:da:b8:aa:e6:9a:4c:bd:26:ef:25:7f:9e:36:37:e7:84:
3b:c3:bc:8c:62:da:69:9d:56:2f:2b:d6:84:8c:4d:df:12:11:
28:2a:b2:03:74:16:1d:38:b4:96:0b:fa:34:5a:f1:98:24:b5:
17:ea:a1:7a:a8:91:f5:12:a9:94:50:c0:96:17:e0:79:4a:ba:
47:ac:f2:a3:9d:01:95:01:2a:58:27:92:72:69:f9:ab:dc:b8:
96:98:66:9d:70:da:23:d4:24:8d:d9:d1:8d:5f:3a:df:c6:40:
fd:c1:f4:27:28:60:a2:a3:43:27:2c:f5:77:92:b7:bb:88:63:
ce:f0:ec:55:2d:cc:e7:e8:36:0b:25:27:42:c7:e5:28:eb:78:
4b:b0:53:19:ee:d3:a0:a8:8a:f6:78:92:88:5a:fd:b0:93:65:
36:24:ad:5a:c6:db:aa:83:0c:f8:a2:bf:d7:ab:79:ce:a5:48:
5a:c4:4f:ef:5c:3e:d8:af:8d:5b:89:e2:cb:a4:33:7a:e7:ae:
cf:c5:f7:a6:36:33:46:57:f2:65:61:af:81:74:9b:1e:8a:bb:
06:46:57:3a:8b:7c:64:1c:40:c3:f8:56:d9:63:fa:32:ec:e9:
94:42:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:17 2025 by rpki-client