Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: H1HrgtlKcVIZeOgdZQYVX10xIYHu0xXqUV7+jJFm38Y=
Subject key identifier: 84:C2:20:92:A3:52:B9:07:63:62:AE:57:9E:EC:F6:EF:41:6A:B6:AB
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 0198A04CB54DA6ACC256EE14D5BBCCE06361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 03A3
Signing time: Tue 12 Aug 2025 22:00:38 +0000
Manifest this update: Tue 12 Aug 2025 22:00:38 +0000
Manifest next update: Wed 13 Aug 2025 22:00:38 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: 7RKvWQBaT9l387VIpPcuV9Mk8gGcP/WJO9A9mRgir4k=)
2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:b5:4d:a6:ac:c2:56:ee:14:d5:bb:cc:e0:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Aug 12 22:00:38 2025 GMT
Not After : Aug 13 22:00:38 2025 GMT
Subject: CN=84c22092a352b9076362ae579eecf6ef416ab6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:3f:d4:fe:3d:ba:5c:5f:c9:ca:50:8f:37:
f1:ef:db:af:c3:87:1c:13:f0:3d:d9:83:6a:eb:4e:
af:31:bc:9c:3c:f6:4e:7a:85:c6:69:0c:12:3f:fc:
54:94:4a:6b:ee:19:29:eb:82:e3:e6:96:52:09:ec:
cd:7e:c9:1d:22:e6:4f:0e:84:57:89:6c:2a:37:36:
f4:1f:df:3e:5e:3f:d0:e7:37:f9:fd:e9:ad:ae:04:
0f:64:73:91:2f:a3:58:38:6f:e1:bf:f0:85:21:5c:
f7:2f:fa:3e:12:54:5c:5d:c6:55:90:78:44:d8:88:
f5:9b:c1:ba:fa:72:ba:b0:d2:d9:78:cb:0e:70:88:
8c:45:02:3c:4f:6e:cd:d9:35:4c:d8:52:25:6b:36:
e2:44:7b:85:18:a6:e4:ec:f9:26:03:c7:7c:ed:0d:
63:cc:8e:94:6d:aa:45:c3:73:ff:4e:3f:5e:04:66:
25:8c:f9:51:18:61:c4:ed:22:4a:6a:90:21:52:62:
55:f2:8c:ff:43:54:45:9c:92:a1:9f:27:71:77:70:
62:71:42:97:f4:ee:23:42:fa:88:89:9d:75:fc:38:
6c:45:7a:cd:4a:f0:72:bb:83:39:4e:35:1c:8e:f9:
38:d8:07:c1:04:d5:0d:6b:65:65:57:df:e9:3e:1d:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C2:20:92:A3:52:B9:07:63:62:AE:57:9E:EC:F6:EF:41:6A:B6:AB
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0b:30:af:9e:d4:d3:13:90:8d:22:6b:1f:9e:9b:c6:0b:09:
f2:07:05:e6:2f:81:e2:01:3a:da:a8:1a:4a:0d:4a:5c:47:40:
0e:37:c0:4a:b8:b9:d2:86:7e:ce:a6:8e:1e:66:24:e6:48:71:
b3:22:d1:90:e9:5f:c7:bc:ad:ab:d9:17:40:fa:50:01:74:c8:
6a:ed:24:2e:60:38:2b:08:82:59:c0:6a:1e:da:1f:fb:cb:0c:
d5:63:b3:a4:e3:66:58:a5:35:2b:2b:13:04:03:69:47:90:f3:
48:cf:15:91:b3:5a:3b:c0:5c:20:b1:5f:c7:f6:61:78:dd:7e:
2d:8b:dd:3e:5a:86:f5:ac:35:9e:f0:fc:74:cb:0d:a4:45:39:
fa:14:f8:5b:d8:75:c4:4d:fd:f5:d9:81:31:ce:25:4a:f9:c6:
e2:f9:fa:c8:6f:77:2a:cb:8a:b2:d9:3e:2b:2f:b8:f8:4e:25:
45:38:7b:2b:60:37:b8:3e:66:97:7d:26:af:d8:a1:b2:8f:d3:
09:52:0f:58:f7:66:ec:91:d7:a3:30:55:14:ee:01:5c:30:8c:
45:d7:08:88:5f:24:2b:3f:3b:54:e8:17:71:75:b3:24:0a:c4:
4c:01:a1:3e:95:ff:72:54:22:32:8d:28:50:a3:8c:22:e4:b2:
e3:6b:39:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTLVNpqzCVu4U1bvM4GNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDE1NGY5NmFkY2ViOWJjZWUwYmRjMGI4MzVhZmJlMDUw
OTc1MWEwHhcNMjUwODEyMjIwMDM4WhcNMjUwODEzMjIwMDM4WjAzMTEwLwYDVQQD
Eyg4NGMyMjA5MmEzNTJiOTA3NjM2MmFlNTc5ZWVjZjZlZjQxNmFiNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xw/1P49ulxfycpQjzfx79uvw4cc
E/A92YNq606vMbycPPZOeoXGaQwSP/xUlEpr7hkp64Lj5pZSCezNfskdIuZPDoRX
iWwqNzb0H98+Xj/Q5zf5/emtrgQPZHORL6NYOG/hv/CFIVz3L/o+ElRcXcZVkHhE
2Ij1m8G6+nK6sNLZeMsOcIiMRQI8T27N2TVM2FIlazbiRHuFGKbk7PkmA8d87Q1j
zI6UbapFw3P/Tj9eBGYljPlRGGHE7SJKapAhUmJV8oz/Q1RFnJKhnydxd3BicUKX
9O4jQvqIiZ11/DhsRXrNSvByu4M5TjUcjvk42AfBBNUNa2VlV9/pPh2wUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITCIJKjUrkHY2KuV57s9u9BararMB8GA1UdIwQY
MBaAFO7RVPlq3OubzuC9wLg1r74FCXUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYt
NzZiN2VlZDUxZTRhLzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYtNzZiN2VlZDUxZTRh
LzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwswr57U
0xOQjSJrH56bxgsJ8gcF5i+B4gE62qgaSg1KXEdADjfASri50oZ+zqaOHmYk5khx
syLRkOlfx7ytq9kXQPpQAXTIau0kLmA4KwiCWcBqHtof+8sM1WOzpONmWKU1KysT
BANpR5DzSM8VkbNaO8BcILFfx/ZheN1+LYvdPlqG9aw1nvD8dMsNpEU5+hT4W9h1
xE399dmBMc4lSvnG4vn6yG93KsuKstk+Ky+4+E4lRTh7K2A3uD5ml30mr9ihso/T
CVIPWPdm7JHXozBVFO4BXDCMRdcIiF8kKz87VOgXcXWzJArETAGhPpX/clQiMo0o
UKOMIuSy42s5rA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:11:09 2025 by rpki-client