Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: iocV0Jg8Ic4Ijf/OeKTLgHSwathMC9hn/whkCIa7pps=
Subject key identifier: 07:CB:DA:0B:FE:B0:D3:3F:9C:48:8D:5C:F0:F6:63:58:04:8D:08:3A
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 0199239F230414CB75B8B1D4560207D2D6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:00:55 +0000
Manifest this update: Sun 07 Sep 2025 10:00:55 +0000
Manifest next update: Mon 08 Sep 2025 10:00:55 +0000
Files and hashes: 1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: e5KB4xywuXHbr6779+VTOw1lQNh924nwOcXbqFw+mBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:23:04:14:cb:75:b8:b1:d4:56:02:07:d2:d6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Sep 7 10:00:55 2025 GMT
Not After : Sep 8 10:00:55 2025 GMT
Subject: CN=07cbda0bfeb0d33f9c488d5cf0f66358048d083a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:3a:89:50:74:53:c2:3a:a6:f4:d3:09:42:
46:ce:fc:f1:16:c1:a0:42:d5:22:90:af:9c:9f:89:
45:6e:38:b6:c0:9f:2a:cd:bb:cb:56:b1:78:84:ad:
80:3a:b0:dd:58:68:12:20:80:54:09:33:fe:b7:d0:
27:19:2f:77:58:74:a2:c2:84:38:9a:28:d6:28:75:
6b:b6:c5:85:74:1c:59:c2:6e:56:e5:35:13:86:91:
38:67:5e:87:f4:52:ca:8f:1f:dc:93:bf:f2:45:f1:
ad:fe:c0:47:87:39:49:1f:bf:eb:d0:e9:4a:f4:db:
b2:e8:df:b0:07:12:17:27:b2:70:c0:fb:33:e3:37:
ea:12:26:fa:ab:85:ed:15:06:9e:c3:f3:11:4a:3a:
85:ab:84:71:ba:b1:41:e4:f0:d3:b5:66:60:c0:3b:
4d:df:29:ac:16:2c:be:61:12:11:ac:dd:5f:b1:0a:
36:c5:97:53:90:22:13:56:25:74:9b:31:d2:1d:d5:
09:31:46:1b:dd:96:59:e6:10:45:a3:4e:5c:9d:75:
49:05:e0:65:e7:63:fb:bd:e3:8b:57:75:5f:f3:0e:
35:ca:9c:4a:d4:0b:bb:88:eb:1c:da:66:c8:35:db:
da:83:00:17:eb:b4:39:c2:73:e6:d0:17:87:71:32:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CB:DA:0B:FE:B0:D3:3F:9C:48:8D:5C:F0:F6:63:58:04:8D:08:3A
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a9:e8:c2:7b:bb:86:6e:ef:3e:83:59:b7:75:81:e5:33:a6:
37:52:e0:36:5e:ba:ff:29:1c:ee:ac:2e:49:bb:c9:4a:f5:0d:
e6:ad:2d:96:ab:0a:dd:71:cc:13:47:92:b3:a5:45:96:12:ad:
d6:62:c8:4e:90:7d:65:0c:29:34:d8:03:4b:e5:47:23:ad:09:
59:38:9f:6d:4f:85:9d:9d:01:8f:c3:45:8a:fd:a0:77:a6:e9:
4a:d0:c1:b0:45:dd:bf:6b:ff:e6:92:a7:c4:64:6b:75:c5:6c:
9a:61:69:de:f0:f5:21:3e:03:2a:72:52:6e:cb:db:1e:35:90:
be:af:c2:5b:04:1b:80:53:cf:3d:cd:aa:03:09:93:35:4f:d0:
ec:89:14:0a:f6:c6:37:1f:8d:57:b1:6c:d9:82:09:8c:43:74:
31:ae:02:d2:6f:7a:e9:2e:9a:f2:f9:eb:0a:e6:51:89:2d:60:
ea:f8:f1:22:99:81:7c:15:5c:36:6d:96:b6:1b:a2:d1:ce:83:
f4:65:2e:67:d6:72:de:2b:a1:04:4c:d5:ec:6c:86:46:c6:b3:
76:54:41:f6:5f:b6:d7:7b:46:ce:d5:a0:b8:45:16:9b:aa:42:
94:92:b7:88:f9:e4:f8:a8:1b:a7:a6:06:2d:28:b7:f2:87:1f:
1d:9f:75:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnyMEFMt1uLHUVgIH0tbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1
ZDA1MzkwHhcNMjUwOTA3MTAwMDU1WhcNMjUwOTA4MTAwMDU1WjAzMTEwLwYDVQQD
EygwN2NiZGEwYmZlYjBkMzNmOWM0ODhkNWNmMGY2NjM1ODA0OGQwODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsE6iVB0U8I6pvTTCUJGzvzxFsGg
QtUikK+cn4lFbji2wJ8qzbvLVrF4hK2AOrDdWGgSIIBUCTP+t9AnGS93WHSiwoQ4
mijWKHVrtsWFdBxZwm5W5TUThpE4Z16H9FLKjx/ck7/yRfGt/sBHhzlJH7/r0OlK
9Nuy6N+wBxIXJ7JwwPsz4zfqEib6q4XtFQaew/MRSjqFq4RxurFB5PDTtWZgwDtN
3ymsFiy+YRIRrN1fsQo2xZdTkCITViV0mzHSHdUJMUYb3ZZZ5hBFo05cnXVJBeBl
52P7veOLV3Vf8w41ypxK1Au7iOsc2mbINdvagwAX67Q5wnPm0BeHcTJUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfL2gv+sNM/nEiNXPD2Y1gEjQg6MB8GA1UdIwQY
MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct
YTI0M2NiZmFhZWYzLzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz
LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHanownu7
hm7vPoNZt3WB5TOmN1LgNl66/ykc7qwuSbvJSvUN5q0tlqsK3XHME0eSs6VFlhKt
1mLITpB9ZQwpNNgDS+VHI60JWTifbU+FnZ0Bj8NFiv2gd6bpStDBsEXdv2v/5pKn
xGRrdcVsmmFp3vD1IT4DKnJSbsvbHjWQvq/CWwQbgFPPPc2qAwmTNU/Q7IkUCvbG
Nx+NV7Fs2YIJjEN0Ma4C0m966S6a8vnrCuZRiS1g6vjxIpmBfBVcNm2Wthui0c6D
9GUuZ9Zy3iuhBEzV7GyGRsazdlRB9l+213tGztWguEUWm6pClJK3iPnk+Kgbp6YG
LSi38ocfHZ91vg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:20 2025 by rpki-client