Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: xikH+yIO8e/y97yMXOG3TvcDe5J8bV14z7BY4DedLLw=
Subject key identifier: 3D:22:FD:2B:5A:B8:B2:30:45:9C:84:43:B9:73:7F:64:41:C9:46:3D
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0198499C6F229EC3DD89D1F6DE3474F5A894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 14C6
Signing time: Sun 27 Jul 2025 02:00:45 +0000
Manifest this update: Sun 27 Jul 2025 02:00:45 +0000
Manifest next update: Mon 28 Jul 2025 02:00:45 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: b4roTvUI9trstTR1DIYthB+rt9aNfzYR+Q/oOSRIyp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6f:22:9e:c3:dd:89:d1:f6:de:34:74:f5:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Jul 27 02:00:45 2025 GMT
Not After : Jul 28 02:00:45 2025 GMT
Subject: CN=3d22fd2b5ab8b230459c8443b9737f6441c9463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:ff:80:26:f2:93:ad:c3:7c:8e:de:af:27:
bd:d8:2d:f7:e5:b5:d2:6a:00:b3:00:43:b1:45:72:
97:bb:56:63:e9:df:10:a0:cc:e1:c2:f4:c0:0e:48:
f1:db:ac:5e:1c:6e:cb:94:f8:54:16:56:7a:36:aa:
20:93:75:5c:3d:01:4d:7d:54:42:81:0d:3d:10:6f:
e0:b7:ca:97:29:c6:1d:86:b8:d1:fc:15:06:a6:51:
8d:1a:c8:b3:36:65:4b:07:a4:ce:bc:97:98:5c:c3:
60:40:77:b3:72:c0:6f:f5:7e:48:bf:85:49:7b:3c:
94:e4:ef:0a:fd:0c:cc:a5:64:d5:a9:bb:0f:0d:44:
78:42:aa:44:27:fb:e6:8d:2f:7c:b5:e8:f8:1a:61:
d6:13:09:42:16:3e:b6:57:1c:3f:6a:fb:e0:44:31:
bd:61:22:76:cd:67:f2:f5:9f:a6:57:f4:b2:94:c9:
ef:0e:73:ec:2f:81:f8:1e:b7:6a:51:5e:bc:f8:f3:
39:98:89:c8:bf:fa:f9:10:55:f3:74:d6:5c:c3:17:
e8:d7:0f:44:43:8a:c3:b5:d1:c1:4e:ed:fb:8c:f4:
f1:be:78:af:2d:34:1b:dc:72:3e:74:7a:99:ab:69:
51:8a:b2:d3:82:b8:8a:69:fd:fe:6f:75:ac:72:e6:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:FD:2B:5A:B8:B2:30:45:9C:84:43:B9:73:7F:64:41:C9:46:3D
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:58:c3:26:d6:43:45:c2:08:a3:3d:04:85:7b:55:74:65:d1:
47:d5:87:c6:0b:cf:40:f0:88:18:5f:36:78:30:68:4f:fd:30:
f5:a2:cb:86:bf:5d:de:d6:4e:5b:aa:a1:77:71:0f:cf:17:9a:
7a:88:fd:50:b6:92:0f:88:97:16:da:12:7f:f8:71:b8:c1:64:
c1:26:a5:d1:50:d6:6d:55:3f:8e:8f:ac:29:7d:95:8d:89:5e:
a7:c4:7b:d4:83:18:47:24:3f:78:62:20:10:fe:3f:91:cf:9f:
f5:e2:18:44:e9:ce:09:9a:72:44:bb:0a:bf:19:5f:e2:6f:d2:
b7:21:73:c2:a7:46:23:cf:68:40:22:7e:20:12:7c:6e:d7:63:
ad:70:ab:55:37:96:6b:6f:a3:0f:74:d4:c9:82:6e:96:97:cf:
15:c8:5b:6e:43:64:05:40:f1:83:8b:68:9d:f0:d3:6a:15:7b:
f9:3a:fe:c0:aa:20:3e:9a:2b:d8:fb:b8:6d:6d:16:d6:3c:74:
98:8d:b1:da:fa:b1:43:5d:af:a7:df:db:cb:1e:46:fd:bc:c9:
fd:e3:23:f7:3d:cd:02:42:c5:5e:e2:75:52:34:cd:8d:1e:b4:
df:3d:2f:e1:f8:3d:ac:da:1e:70:92:c6:7e:39:49:83:ac:4c:
95:6e:73:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnG8insPdidH23jR09aiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNmVhZGI4NjU5YmM3MzRkY2NiMjlmNjM4NDIxMDM2YmI5
MjJlMzYwHhcNMjUwNzI3MDIwMDQ1WhcNMjUwNzI4MDIwMDQ1WjAzMTEwLwYDVQQD
EygzZDIyZmQyYjVhYjhiMjMwNDU5Yzg0NDNiOTczN2Y2NDQxYzk0NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VT/gCbyk63DfI7erye92C335bXS
agCzAEOxRXKXu1Zj6d8QoMzhwvTADkjx26xeHG7LlPhUFlZ6Nqogk3VcPQFNfVRC
gQ09EG/gt8qXKcYdhrjR/BUGplGNGsizNmVLB6TOvJeYXMNgQHezcsBv9X5Iv4VJ
ezyU5O8K/QzMpWTVqbsPDUR4QqpEJ/vmjS98tej4GmHWEwlCFj62Vxw/avvgRDG9
YSJ2zWfy9Z+mV/SylMnvDnPsL4H4HrdqUV68+PM5mInIv/r5EFXzdNZcwxfo1w9E
Q4rDtdHBTu37jPTxvnivLTQb3HI+dHqZq2lRirLTgriKaf3+b3WscubrPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0i/StauLIwRZyEQ7lzf2RByUY9MB8GA1UdIwQY
MBaAFIxurbhlm8c03Msp9jhCEDa7ki42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQt
NjY0NWRkM2Q2MjRiLzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQtNjY0NWRkM2Q2MjRi
LzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFjDJtZD
RcIIoz0EhXtVdGXRR9WHxgvPQPCIGF82eDBoT/0w9aLLhr9d3tZOW6qhd3EPzxea
eoj9ULaSD4iXFtoSf/hxuMFkwSal0VDWbVU/jo+sKX2VjYlep8R71IMYRyQ/eGIg
EP4/kc+f9eIYROnOCZpyRLsKvxlf4m/StyFzwqdGI89oQCJ+IBJ8btdjrXCrVTeW
a2+jD3TUyYJulpfPFchbbkNkBUDxg4tonfDTahV7+Tr+wKogPpor2Pu4bW0W1jx0
mI2x2vqxQ12vp9/byx5G/bzJ/eMj9z3NAkLFXuJ1UjTNjR603z0v4fg9rNoecJLG
fjlJg6xMlW5z9w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:15 2025 by rpki-client