Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
File: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json)
Hash identifier: ZeiY4wpIaxOgKdWCMmc25YNKyukiP5v+g+wndEHgmtI=
Subject key identifier: A0:FA:F4:A4:55:C2:4B:1E:78:A0:FB:C3:4B:3A:60:51:D9:B4:92:B5
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Certificate issuer: /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial: 0198A08416EED57A70CB83D5B5C162040C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
Manifest number: 1331
Signing time: Tue 12 Aug 2025 23:01:07 +0000
Manifest this update: Tue 12 Aug 2025 23:01:07 +0000
Manifest next update: Wed 13 Aug 2025 23:01:07 +0000
Files and hashes: 1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: +ZumT03HCIMmTTpltmGhxbWf6cBpozf4L+qg8YHAvGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:16:ee:d5:7a:70:cb:83:d5:b5:c1:62:04:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Validity
Not Before: Aug 12 23:01:07 2025 GMT
Not After : Aug 13 23:01:07 2025 GMT
Subject: CN=a0faf4a455c24b1e78a0fbc34b3a6051d9b492b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:ca:37:e1:65:f1:05:69:15:49:78:e8:4d:
22:ff:23:30:1b:a1:bc:dd:a9:94:ad:a7:5f:5c:8e:
76:76:bc:28:59:e2:54:e6:d4:05:19:8d:22:a8:6e:
f4:f7:07:85:df:f1:cd:23:a0:d3:f7:12:20:54:61:
e1:e3:6e:15:a2:01:de:90:b3:e9:00:92:4d:80:19:
f7:19:70:4c:7d:6e:78:a0:b5:bc:7f:69:91:0a:bb:
ba:bb:39:07:0c:82:28:36:5e:1c:f5:3a:03:aa:6f:
bf:8b:6f:6a:37:e4:78:ec:07:ed:ca:3d:3f:60:6c:
1a:8e:99:63:e0:f9:82:56:2c:a8:e1:72:71:6b:8b:
34:85:9a:f1:db:fa:e8:7b:c7:47:65:f9:06:31:ce:
57:35:46:80:07:da:4c:4b:0a:9e:d8:ea:3b:f6:ac:
57:d2:a7:ab:84:51:30:5a:5a:9a:42:bd:ae:ea:6d:
b3:fd:3e:dc:24:5b:47:a4:c1:b3:fb:19:24:40:53:
bc:68:b7:fa:c4:ac:dd:67:b1:8f:ce:33:3d:09:c1:
73:42:49:83:7d:49:df:70:56:28:0f:56:e0:3e:d0:
38:5d:8c:71:6d:ee:5d:60:d8:93:a1:66:c4:2a:48:
23:7f:98:f8:fd:a9:80:fb:6a:33:65:79:b5:2e:f7:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FA:F4:A4:55:C2:4B:1E:78:A0:FB:C3:4B:3A:60:51:D9:B4:92:B5
X509v3 Authority Key Identifier:
keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:08:38:57:52:22:0c:6e:0d:cd:63:c0:cc:d6:02:03:7a:b0:
70:fb:16:37:b1:a1:5d:4c:11:0c:59:23:6e:56:29:22:f1:4c:
93:e7:b8:71:45:40:e8:10:cc:1c:a3:d7:ce:46:0e:b9:bd:58:
c0:c3:79:0a:7a:62:7d:53:d6:80:95:da:6e:b8:ae:82:85:6b:
25:4d:ce:32:d9:a0:bc:2e:57:56:93:80:a3:86:06:79:10:63:
dd:14:ca:97:4b:06:7c:ed:f6:7f:21:1d:d1:4a:e1:55:e8:66:
7d:a9:e4:bf:04:48:26:9c:82:06:d1:b5:cc:0f:75:3d:2f:71:
50:e6:ae:4e:9b:df:85:6a:e9:bc:0d:ce:ba:2b:9f:91:1d:c3:
d4:e0:d7:51:ba:96:ba:52:27:1a:0c:5a:ef:6e:5a:68:61:00:
78:f6:e8:97:63:ab:84:21:56:aa:65:c7:96:bb:0c:c0:d4:cf:
8e:98:58:ef:6c:f3:2b:b4:ab:b0:14:b4:69:b5:86:44:5b:44:
09:bf:89:8f:5e:d4:60:c3:2e:ed:62:71:04:c5:6e:7c:a8:1f:
ae:ef:f1:78:f5:1e:c5:82:77:89:c0:0c:71:f9:23:9a:de:60:
5c:06:77:d5:39:94:7b:4a:6f:c7:0d:28:ac:ca:45:dd:43:b0:
9c:8f:90:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighBbu1Xpwy4PVtcFiBAyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMmZhNjg2ZDE4YzgwMjBhZmM2YWRmNTVhZmRiZTY2MGRi
YWFjMTUwHhcNMjUwODEyMjMwMTA3WhcNMjUwODEzMjMwMTA3WjAzMTEwLwYDVQQD
EyhhMGZhZjRhNDU1YzI0YjFlNzhhMGZiYzM0YjNhNjA1MWQ5YjQ5MmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdjKN+Fl8QVpFUl46E0i/yMwG6G8
3amUradfXI52drwoWeJU5tQFGY0iqG709weF3/HNI6DT9xIgVGHh424VogHekLPp
AJJNgBn3GXBMfW54oLW8f2mRCru6uzkHDIIoNl4c9ToDqm+/i29qN+R47Aftyj0/
YGwajplj4PmCViyo4XJxa4s0hZrx2/roe8dHZfkGMc5XNUaAB9pMSwqe2Oo79qxX
0qerhFEwWlqaQr2u6m2z/T7cJFtHpMGz+xkkQFO8aLf6xKzdZ7GPzjM9CcFzQkmD
fUnfcFYoD1bgPtA4XYxxbe5dYNiToWbEKkgjf5j4/amA+2ozZXm1LvdiBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD69KRVwkseeKD7w0s6YFHZtJK1MB8GA1UdIwQY
MBaAFO0vpobRjIAgr8at9Vr9vmYNuqwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNzhmYzUtYmYzZS00Njg2LThkODUt
YzMzZjhhMjExMjJjLzEvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kNzhmYzUtYmYzZS00Njg2LThkODUtYzMzZjhhMjExMjJj
LzEvN1MtbWh0R01nQ0N2eHEzMVd2Mi1aZzI2ckJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgg4V1Ii
DG4NzWPAzNYCA3qwcPsWN7GhXUwRDFkjblYpIvFMk+e4cUVA6BDMHKPXzkYOub1Y
wMN5CnpifVPWgJXabriugoVrJU3OMtmgvC5XVpOAo4YGeRBj3RTKl0sGfO32fyEd
0UrhVehmfankvwRIJpyCBtG1zA91PS9xUOauTpvfhWrpvA3OuiufkR3D1ODXUbqW
ulInGgxa725aaGEAePbol2OrhCFWqmXHlrsMwNTPjphY72zzK7SrsBS0abWGRFtE
Cb+Jj17UYMMu7WJxBMVufKgfru/xePUexYJ3icAMcfkjmt5gXAZ31TmUe0pvxw0o
rMpF3UOwnI+Q8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:37 2025 by rpki-client