Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier: y1WeGTqWrCwrFjDk0ZseIBDhoBuXbgP3/JeZY6aUoUo=
Subject key identifier: 5E:A0:51:03:2F:E6:E1:E2:11:A7:75:55:A6:B6:32:A4:43:F8:AD:72
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 01984A780AA5476F371C30FDE39AAFC2E42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number: 0C26
Signing time: Sun 27 Jul 2025 06:00:37 +0000
Manifest this update: Sun 27 Jul 2025 06:00:37 +0000
Manifest next update: Mon 28 Jul 2025 06:00:37 +0000
Files and hashes: 1: 9-PXmxWchg8g5OgsfYgYmWKFumw.roa (hash: eNSHI9SJ5/kKtvd8JJrC72SBUIAaYNTK8wZ5odVwcZA=)
2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: 9pxsp46kynIjQEM1lPKDN1b3MU7QpJUhcJCE2fzpPV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:0a:a5:47:6f:37:1c:30:fd:e3:9a:af:c2:e4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Jul 27 06:00:37 2025 GMT
Not After : Jul 28 06:00:37 2025 GMT
Subject: CN=5ea051032fe6e1e211a77555a6b632a443f8ad72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:08:93:ab:7d:67:e4:2d:47:5a:4a:82:66:
33:68:0f:5b:17:90:c8:d1:80:df:11:b1:ad:ce:b8:
b1:f3:a6:45:df:0c:82:1e:d8:d8:43:ee:02:6d:84:
33:38:6c:0a:29:a6:75:bf:fe:c3:8b:55:87:c9:e6:
5f:94:0f:22:9d:8e:90:89:af:72:3b:ce:af:5b:73:
a8:a7:fc:a8:ec:38:bb:1d:b2:97:ab:fb:69:b7:97:
ac:67:03:f9:9a:4d:14:16:73:bb:a8:cf:30:9f:56:
5b:65:da:ae:d9:08:b0:54:10:07:63:76:2d:3e:fe:
65:c8:b7:f6:4c:0a:7e:8f:6f:36:1e:95:2e:72:4b:
98:56:26:78:b8:4b:6b:b8:9e:c5:23:b5:e3:ab:9d:
00:0f:0a:29:bf:ef:27:75:24:28:e5:da:3d:2c:31:
52:20:93:69:dc:ee:97:00:89:18:77:9a:84:e4:b5:
1a:9e:f9:5f:35:af:e4:0c:2c:3a:6d:dd:37:b7:7b:
0d:0a:65:9a:e0:ad:9b:d0:92:f5:5b:1b:18:a8:c9:
b4:bb:8b:23:b4:e2:ad:8f:cb:96:4d:6c:85:66:e1:
ad:b3:35:77:68:9a:b4:d8:8e:1c:fb:d9:b7:2b:8c:
ec:1b:02:89:69:f8:3c:8b:d0:8b:eb:c7:60:f5:31:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:51:03:2F:E6:E1:E2:11:A7:75:55:A6:B6:32:A4:43:F8:AD:72
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:1e:95:b0:ae:ce:5b:cd:7c:cf:df:44:bd:ba:5f:fb:02:
46:65:a5:69:cd:e8:ad:8c:5d:69:a0:a3:e4:66:a4:98:b7:d4:
9d:4d:83:13:02:8a:5d:79:0d:8e:b6:1e:e4:4b:25:75:4d:5e:
59:01:5f:76:7b:75:1d:84:9a:c7:4a:95:10:f9:3b:e4:f2:9b:
32:07:f4:bd:f3:dd:ab:dd:0b:72:fd:4c:68:d0:20:78:c7:45:
9d:88:47:20:63:0a:22:20:08:ef:41:c5:db:83:84:ba:91:91:
d4:43:b9:1d:9c:fd:51:81:a0:94:6a:b7:6d:2a:d8:73:45:a2:
79:80:fa:99:27:03:3a:d0:c7:60:63:6c:67:4f:f4:e8:3f:ae:
f0:91:7a:e8:48:8d:6d:02:e7:97:dd:fb:cb:3d:66:40:49:82:
51:3f:0e:2a:fe:9e:4c:c4:b6:82:81:0f:a2:ff:6e:19:69:3b:
19:4e:b8:c5:54:9a:87:9b:27:49:65:99:ff:2e:89:1b:e6:62:
71:94:a0:06:af:38:a2:e9:67:8f:73:c1:02:2f:b8:53:c7:09:
31:89:4d:46:4b:71:2f:47:ab:f3:d6:5e:89:48:fd:40:b8:7c:
40:b2:e4:7a:24:a3:df:1a:2b:b8:70:b3:c4:a9:14:a9:f6:a6:
11:51:d5:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeAqlR283HDD945qvwuQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjFlM2Q4MWYwNWFjYjU2YmRmNzk4ZWQ0YWUyYWY2Mzc3
OTQyMDEwHhcNMjUwNzI3MDYwMDM3WhcNMjUwNzI4MDYwMDM3WjAzMTEwLwYDVQQD
Eyg1ZWEwNTEwMzJmZTZlMWUyMTFhNzc1NTVhNmI2MzJhNDQzZjhhZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBIIk6t9Z+QtR1pKgmYzaA9bF5DI
0YDfEbGtzrix86ZF3wyCHtjYQ+4CbYQzOGwKKaZ1v/7Di1WHyeZflA8inY6Qia9y
O86vW3Oop/yo7Di7HbKXq/tpt5esZwP5mk0UFnO7qM8wn1ZbZdqu2QiwVBAHY3Yt
Pv5lyLf2TAp+j282HpUuckuYViZ4uEtruJ7FI7Xjq50ADwopv+8ndSQo5do9LDFS
IJNp3O6XAIkYd5qE5LUanvlfNa/kDCw6bd03t3sNCmWa4K2b0JL1WxsYqMm0u4sj
tOKtj8uWTWyFZuGtszV3aJq02I4c+9m3K4zsGwKJafg8i9CL68dg9TEWhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6gUQMv5uHiEad1Vaa2MqRD+K1yMB8GA1UdIwQY
MBaAFHxh49gfBay1a995jtSuKvY3eUIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iMDIxMmEtZWFiZS00NWFiLWJmZDUt
OWRmYmU2ZGRhODhhLzEvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iMDIxMmEtZWFiZS00NWFiLWJmZDUtOWRmYmU2ZGRhODhh
LzEvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZgelbCu
zlvNfM/fRL26X/sCRmWlac3orYxdaaCj5GakmLfUnU2DEwKKXXkNjrYe5EsldU1e
WQFfdnt1HYSax0qVEPk75PKbMgf0vfPdq90Lcv1MaNAgeMdFnYhHIGMKIiAI70HF
24OEupGR1EO5HZz9UYGglGq3bSrYc0WieYD6mScDOtDHYGNsZ0/06D+u8JF66EiN
bQLnl937yz1mQEmCUT8OKv6eTMS2goEPov9uGWk7GU64xVSah5snSWWZ/y6JG+Zi
cZSgBq84oulnj3PBAi+4U8cJMYlNRktxL0er89ZeiUj9QLh8QLLkeiSj3xoruHCz
xKkUqfamEVHVbg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:01 2025 by rpki-client