Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: Quo0WAoTOa5erF/TkuaMpcPXAI5AzGo20JrEGadc58Y=
Subject key identifier: DD:32:F1:A3:FC:AF:34:7A:8F:74:EF:C8:1C:CB:05:C9:B7:CC:D6:1C
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 019A1729EFF811A1A8964937C5B6544DF436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 16EF
Signing time: Fri 24 Oct 2025 17:00:15 +0000
Manifest this update: Fri 24 Oct 2025 17:00:15 +0000
Manifest next update: Sat 25 Oct 2025 17:00:15 +0000
Files and hashes: 1: CqEll3qj27nC3RPq0fziUJlBCNs.roa (hash: ne9W9a5q+GjzbaXSyhc66nMcJYTTVJvwji8w4P/0Sl4=)
2: dPc9m_TH3I35OVg96ErdD-dIFxE.roa (hash: 6rEh+8XVtIQuMK//Hp1XM75izAZwXIaq6ISFlV91ktM=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: 37W7KS45AgJotvhIdbWgfle0vLJJRSVeOLIbes+r9gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:29:ef:f8:11:a1:a8:96:49:37:c5:b6:54:4d:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Oct 24 17:00:15 2025 GMT
Not After : Oct 25 17:00:15 2025 GMT
Subject: CN=dd32f1a3fcaf347a8f74efc81ccb05c9b7ccd61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:a7:a2:a3:7e:9f:4e:b1:59:0c:4f:7d:ed:
2c:f6:b5:9b:4f:61:1b:e5:67:bd:e1:f7:b6:b9:84:
d3:c2:ce:bb:0f:b4:19:ba:01:8a:55:e9:9c:50:fe:
33:48:2c:0a:57:6d:87:56:55:03:0d:93:9e:8f:31:
01:56:f7:fe:22:b6:2f:fa:e6:31:33:61:61:ff:45:
f8:fe:0e:2b:ed:e5:a9:44:8a:4f:41:c8:22:ab:bf:
86:17:3e:3a:5a:57:e7:f3:56:5c:9d:c1:d7:8e:28:
f5:fa:af:56:50:f7:58:8c:a3:ad:9e:d2:eb:f5:ff:
d7:2b:ff:2a:06:c0:13:26:6e:8d:e1:75:6f:b9:3a:
b8:70:03:1a:34:c3:93:fc:df:02:1e:18:14:91:05:
0a:f2:dc:25:e6:8f:81:48:35:e2:18:38:a6:05:34:
24:5f:13:83:bb:e1:7c:cb:03:e0:13:86:73:01:cb:
e4:4c:eb:46:61:70:ef:4b:ea:f8:a1:51:92:e9:f6:
3c:b6:d4:66:1b:41:86:b9:7d:b7:fb:27:e9:30:66:
11:1a:7e:06:5f:7f:db:a9:ea:92:a5:c0:90:f1:1e:
43:0b:0e:84:ef:35:87:b2:60:d4:ab:14:69:f5:fe:
8f:8f:c9:51:ab:0c:7d:ba:bc:37:5d:0f:25:59:8a:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:F1:A3:FC:AF:34:7A:8F:74:EF:C8:1C:CB:05:C9:B7:CC:D6:1C
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:5a:21:a4:37:18:1a:72:19:c1:60:ae:fd:42:ba:3a:d4:
92:d6:f6:d4:98:93:39:62:ec:1f:f7:32:1f:49:5a:db:8a:7a:
39:a6:6e:10:11:af:6c:73:0f:53:85:8b:5f:81:05:95:e1:72:
59:ca:54:03:65:c2:e0:c1:c3:db:05:19:32:bb:8d:79:96:95:
7a:4d:a6:cd:ba:12:8b:02:d5:d9:d5:cd:54:5c:1b:41:6c:62:
c4:1a:36:0b:15:9c:a2:20:66:28:e6:d8:ab:71:de:4f:c1:d1:
99:36:c4:a2:d2:71:9c:f0:4a:0d:b6:cb:b4:5c:0b:a1:00:f4:
80:e6:c3:07:4c:35:7c:c2:74:44:50:96:a3:39:3e:fc:b5:16:
5a:d2:7c:0a:ca:0b:96:6e:65:56:c1:e4:40:fd:ef:35:de:a0:
cc:6d:1f:df:5d:09:90:d3:74:45:36:a7:f1:33:94:5c:79:23:
11:87:0a:73:be:5a:f4:62:97:f5:c3:4a:8b:17:29:c3:68:9a:
b2:c6:3f:e3:8d:8b:f4:5d:cb:ce:38:9f:f4:82:fc:cc:5e:86:
8e:d7:e9:2f:75:0c:0f:ee:ca:3e:ba:2b:f1:14:ab:25:2d:4d:
ec:aa:a9:2e:ea:ab:34:a2:58:46:a2:ba:64:85:77:c4:38:e3:
9c:98:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:35:58 2025 by rpki-client