Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: ua8NXwqPngMkp3ooSUmpmcBikReHZpu1Mzda94qdxVw=
Subject key identifier: C5:7F:BE:5B:D1:0A:56:84:18:B7:9B:56:B4:B8:67:EA:75:EE:EF:A2
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 01985344315B0CC443D48DA8C71BDB5A3C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 1598
Signing time: Mon 28 Jul 2025 23:00:34 +0000
Manifest this update: Mon 28 Jul 2025 23:00:34 +0000
Manifest next update: Tue 29 Jul 2025 23:00:34 +0000
Files and hashes: 1: UkqG3VMYAz9uABWF42sKAydGWoA.roa (hash: /dg3EZ5BvktCoE6vyv9z5Q4gql01gT6XeimrmuNAS5k=)
2: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: wSaKSsLgWE1vT8fsjcKvkiievO4KbNE+aSzMJsqTHh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:31:5b:0c:c4:43:d4:8d:a8:c7:1b:db:5a:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Jul 28 23:00:34 2025 GMT
Not After : Jul 29 23:00:34 2025 GMT
Subject: CN=c57fbe5bd10a568418b79b56b4b867ea75eeefa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:a8:79:98:07:82:be:f4:7b:77:86:b6:ee:
22:a1:82:d3:0c:68:62:2a:9d:f9:74:25:c2:65:d1:
53:49:3c:48:5e:ea:d3:9f:fb:56:f5:61:b7:f7:de:
39:16:76:f9:7e:e5:73:6f:23:92:2c:d9:8f:7c:8b:
26:ca:78:7f:d8:68:4d:d2:cc:a6:b2:a8:ec:d3:b8:
b6:a0:18:9c:19:39:86:4b:97:38:69:4d:ac:2c:be:
b1:05:58:5e:7b:46:73:8d:ef:c5:dc:e7:01:ae:79:
46:a7:28:4e:04:d4:bd:cb:4d:03:c7:35:1c:30:1b:
99:40:99:22:0f:42:ee:c2:d1:d1:0a:a9:4b:7a:25:
74:35:e9:f6:f5:aa:22:fd:15:66:0b:35:ba:53:b2:
3f:bd:a3:d0:78:29:f9:e5:97:95:19:11:e1:2d:d2:
60:ab:89:33:2a:aa:07:94:90:7d:53:6f:37:2f:ec:
30:b2:15:55:f0:ab:b5:a3:da:87:a1:77:4a:69:c3:
42:19:13:fb:02:4c:4d:8f:a3:3f:ad:fe:e5:cf:36:
ca:9c:38:bf:ef:09:4d:09:97:f7:df:46:8f:d2:1a:
5a:3b:56:9a:9e:f8:d4:ea:ad:2e:f5:6b:86:2d:fc:
8f:d8:59:7e:cc:ef:c9:7d:2c:7f:7a:b1:55:bb:45:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:BE:5B:D1:0A:56:84:18:B7:9B:56:B4:B8:67:EA:75:EE:EF:A2
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:25:0c:f5:40:0d:cd:4c:9e:b1:a3:ce:98:f9:16:31:48:1f:
90:00:46:0a:33:eb:4b:b2:d6:15:8d:45:ec:4c:d3:a0:55:32:
cd:8e:be:61:62:2c:98:f8:a4:b2:f9:3d:56:f7:c0:17:26:83:
d4:9d:58:ee:87:09:42:e3:50:96:b6:32:05:e3:bd:43:14:24:
12:63:dd:7c:56:d5:f2:13:ec:ef:fd:b6:de:57:c7:39:59:4a:
e5:1a:65:ea:8d:b9:5b:7b:bc:a8:fd:02:ac:6b:95:8d:07:03:
e9:f5:c3:45:43:d9:a3:85:41:c6:69:c1:40:2f:f7:d6:71:35:
46:97:3e:42:97:21:fe:a3:85:07:24:cc:0a:fc:ee:1d:07:13:
d1:fd:17:c9:29:b9:b7:e7:63:29:de:05:0b:e6:14:7b:38:eb:
7b:5c:d3:a5:51:c7:85:f4:ce:81:58:bd:1b:a6:d8:de:8b:3a:
da:ba:eb:42:fc:ca:a6:19:ed:0d:ab:ce:b1:65:cb:8a:5c:37:
7a:e5:54:b3:7b:63:84:60:ad:2e:0e:47:18:e9:4c:86:92:9e:
c8:38:7f:9e:26:bc:1f:dc:97:2c:21:b2:dc:22:50:55:67:cb:
47:7c:0f:ea:ce:7d:69:14:38:5b:4c:a2:ea:93:53:da:08:71:
0c:1a:c6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRDFbDMRD1I2oxxvbWjyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDFhNWQ5MGRjM2E4MzZjZWI2MzgxZWZjNzUzNGUxMjlm
NDNhNGMwHhcNMjUwNzI4MjMwMDM0WhcNMjUwNzI5MjMwMDM0WjAzMTEwLwYDVQQD
EyhjNTdmYmU1YmQxMGE1Njg0MThiNzliNTZiNGI4NjdlYTc1ZWVlZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCSoeZgHgr70e3eGtu4ioYLTDGhi
Kp35dCXCZdFTSTxIXurTn/tW9WG39945Fnb5fuVzbyOSLNmPfIsmynh/2GhN0sym
sqjs07i2oBicGTmGS5c4aU2sLL6xBVhee0Zzje/F3OcBrnlGpyhOBNS9y00DxzUc
MBuZQJkiD0LuwtHRCqlLeiV0Nen29aoi/RVmCzW6U7I/vaPQeCn55ZeVGRHhLdJg
q4kzKqoHlJB9U283L+wwshVV8Ku1o9qHoXdKacNCGRP7AkxNj6M/rf7lzzbKnDi/
7wlNCZf330aP0hpaO1aanvjU6q0u9WuGLfyP2Fl+zO/JfSx/erFVu0UPmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV/vlvRClaEGLebVrS4Z+p17u+iMB8GA1UdIwQY
MBaAFH0BpdkNw6g2zrY4Hvx1NOEp9DpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMt
NjJmNjY2NDczYjIxLzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMtNjJmNjY2NDczYjIx
LzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyUM9UAN
zUyesaPOmPkWMUgfkABGCjPrS7LWFY1F7EzToFUyzY6+YWIsmPiksvk9VvfAFyaD
1J1Y7ocJQuNQlrYyBeO9QxQkEmPdfFbV8hPs7/223lfHOVlK5Rpl6o25W3u8qP0C
rGuVjQcD6fXDRUPZo4VBxmnBQC/31nE1Rpc+Qpch/qOFByTMCvzuHQcT0f0XySm5
t+djKd4FC+YUezjre1zTpVHHhfTOgVi9G6bY3os62rrrQvzKphntDavOsWXLilw3
euVUs3tjhGCtLg5HGOlMhpKeyDh/nia8H9yXLCGy3CJQVWfLR3wP6s59aRQ4W0yi
6pNT2ghxDBrGKw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:06:31 2025 by rpki-client