Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: ltmFb2cwDWLyTGA2WdQem9FLlYkiFMZDYbtdlZcGI30=
Subject key identifier: 42:2E:20:E7:7D:FD:21:86:56:9D:B2:92:70:27:EE:ED:E3:46:1A:47
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 01988F904F4A26265BF6F752A8C22DA91AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 16:00:55 +0000
Manifest this update: Sat 09 Aug 2025 16:00:55 +0000
Manifest next update: Sun 10 Aug 2025 16:00:55 +0000
Files and hashes: 1: 4_25V1XttJ1qw5vFtRBIGOQ28e4.roa (hash: jrFE5OHsnZSV8YIte/QlrxAa0XpS7lb+A+yiq4ZHdDE=)
2: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: 5aA+AVXr+bQzmhOO4NoaeUTe1XUlgJfVG+6sDd1b1Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:4f:4a:26:26:5b:f6:f7:52:a8:c2:2d:a9:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Aug 9 16:00:55 2025 GMT
Not After : Aug 10 16:00:55 2025 GMT
Subject: CN=422e20e77dfd2186569db2927027eeede3461a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:97:ca:a8:6b:c4:97:aa:66:8e:f0:55:75:
4e:92:fd:11:9f:b5:28:1b:76:1d:d4:84:bf:ef:5e:
ce:b5:d3:14:f8:84:ec:d0:7e:60:79:8f:e3:65:21:
f5:0d:d9:a2:a0:cb:e4:29:69:d1:e7:26:cc:b5:50:
0c:30:a2:a1:53:6b:bd:09:a8:9e:d8:4c:ab:cc:c8:
4a:44:30:5f:c2:81:48:a8:36:7c:79:38:d9:72:a4:
83:08:27:00:43:10:1e:45:72:07:27:1c:19:97:a6:
e3:94:92:5a:14:30:83:2c:77:5f:01:a1:92:9a:ff:
56:9e:93:5d:2f:3c:5f:e1:ca:c0:86:85:e5:eb:96:
04:b3:89:88:1b:ef:f8:0f:26:4b:7f:8b:7b:67:45:
97:6d:aa:cb:47:ad:80:5b:a8:66:8f:4d:33:a1:84:
72:3c:ff:1e:7a:d7:3b:a9:2f:f0:f5:8f:7e:e2:3f:
f6:02:cb:f9:9e:4b:5a:42:32:e5:38:f1:e6:a4:43:
b0:c3:1d:f7:cb:d3:db:0e:7c:03:26:9e:56:bc:cb:
cf:6e:0f:ca:60:71:f8:a2:9a:9b:ed:13:55:66:ce:
ba:38:37:6d:62:32:0b:7f:88:60:47:1e:04:5f:b6:
6a:91:d1:b9:38:34:af:44:bc:79:df:79:e5:51:43:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2E:20:E7:7D:FD:21:86:56:9D:B2:92:70:27:EE:ED:E3:46:1A:47
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b0:e5:2e:ab:eb:52:d5:2f:92:2e:8a:c1:a1:e3:f4:bf:62:
24:5a:fd:36:e4:c6:d2:c4:88:13:79:68:a5:86:fd:5d:e7:60:
ae:61:5e:aa:f6:ac:f6:de:a2:e3:29:ee:10:4a:65:af:c8:17:
9a:11:0c:a7:72:3d:56:5a:de:2a:d7:f7:61:8e:f5:26:50:bf:
cf:04:8a:4b:e0:90:fd:c7:b8:23:7a:20:a0:8b:9f:ad:a5:2b:
8f:cb:ee:21:0f:93:72:92:cb:9b:48:ea:e0:ce:16:ac:03:f7:
44:db:62:4d:57:76:f5:15:38:0b:1b:98:7e:e0:45:84:f6:a3:
8c:88:77:4a:12:62:05:b2:a0:81:57:93:99:28:bc:fc:54:2d:
97:39:68:6a:34:ec:60:dc:e8:bd:e3:a8:dd:5d:9f:b8:82:c2:
c9:ea:e6:23:a3:81:84:47:7a:7e:9c:65:5e:3f:11:e1:3d:2e:
77:b0:ca:82:f3:54:6b:5d:8f:ba:fe:b6:88:3a:06:91:3a:8e:
58:e7:29:0d:1b:ca:31:c7:50:fc:06:1a:83:62:b2:d6:1d:7e:
7e:8d:9e:43:2f:12:5c:64:36:b8:cb:14:49:82:b2:4f:48:25:
0d:6f:d6:68:fc:7f:af:82:c3:77:03:06:f8:8f:c6:1c:0b:90:
1d:96:bf:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkE9KJiZb9vdSqMItqRrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2
NTYzN2IwHhcNMjUwODA5MTYwMDU1WhcNMjUwODEwMTYwMDU1WjAzMTEwLwYDVQQD
Eyg0MjJlMjBlNzdkZmQyMTg2NTY5ZGIyOTI3MDI3ZWVlZGUzNDYxYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrOXyqhrxJeqZo7wVXVOkv0Rn7Uo
G3Yd1IS/717OtdMU+ITs0H5geY/jZSH1DdmioMvkKWnR5ybMtVAMMKKhU2u9Caie
2EyrzMhKRDBfwoFIqDZ8eTjZcqSDCCcAQxAeRXIHJxwZl6bjlJJaFDCDLHdfAaGS
mv9WnpNdLzxf4crAhoXl65YEs4mIG+/4DyZLf4t7Z0WXbarLR62AW6hmj00zoYRy
PP8eetc7qS/w9Y9+4j/2Asv5nktaQjLlOPHmpEOwwx33y9PbDnwDJp5WvMvPbg/K
YHH4opqb7RNVZs66ODdtYjILf4hgRx4EX7ZqkdG5ODSvRLx533nlUUOBHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIuIOd9/SGGVp2yknAn7u3jRhpHMB8GA1UdIwQY
MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt
MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2
LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerDlLqvr
UtUvki6KwaHj9L9iJFr9NuTG0sSIE3lopYb9XedgrmFeqvas9t6i4ynuEEplr8gX
mhEMp3I9VlreKtf3YY71JlC/zwSKS+CQ/ce4I3ogoIufraUrj8vuIQ+TcpLLm0jq
4M4WrAP3RNtiTVd29RU4CxuYfuBFhPajjIh3ShJiBbKggVeTmSi8/FQtlzloajTs
YNzoveOo3V2fuILCyermI6OBhEd6fpxlXj8R4T0ud7DKgvNUa12Puv62iDoGkTqO
WOcpDRvKMcdQ/AYag2Ky1h1+fo2eQy8SXGQ2uMsUSYKyT0glDW/WaPx/r4LDdwMG
+I/GHAuQHZa/YA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:44:17 2025 by rpki-client