Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: 7axxeZV1/VEgho++I56BrLSpClNzEzRxl7Zl95DqQjM=
Subject key identifier: 62:A7:AA:23:A7:DB:73:9E:D8:D5:08:EA:78:A5:9B:7E:1A:28:02:89
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 019873066B180FF8E2A4CD44551AB6504151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 03:00:57 +0000
Manifest this update: Mon 04 Aug 2025 03:00:57 +0000
Manifest next update: Tue 05 Aug 2025 03:00:57 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: 4cl6uAypoin2IwrylIVGKvHmSeJqOOAlqkHz+ZLKpvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:6b:18:0f:f8:e2:a4:cd:44:55:1a:b6:50:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Aug 4 03:00:57 2025 GMT
Not After : Aug 5 03:00:57 2025 GMT
Subject: CN=62a7aa23a7db739ed8d508ea78a59b7e1a280289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fa:05:ce:77:47:39:98:3b:2b:a6:09:e9:09:
5a:cb:e1:10:9a:e2:77:44:4c:c0:bb:b6:6c:aa:c6:
cf:48:3e:f7:76:20:6e:66:04:48:dc:55:6f:26:4a:
82:37:8f:af:df:54:7d:88:01:e1:f7:b7:c2:39:bc:
29:d0:fb:72:8a:73:2c:4f:a6:c9:ed:6e:e8:2a:98:
6e:4d:81:4b:b2:63:81:28:91:7f:fa:e9:05:c3:61:
ff:55:7a:bf:3c:16:5e:9f:75:03:f1:37:41:86:3e:
bf:d6:bb:6c:8b:96:ab:bb:75:a1:67:c4:17:61:b1:
46:27:2b:f4:4f:73:08:89:4b:a6:cb:9f:bf:7d:21:
4e:5d:2e:76:9d:fe:ac:0f:6e:57:54:de:dc:fc:ab:
bd:40:8f:a4:9b:6d:9c:c1:b3:b6:51:a7:bf:0b:38:
24:f8:cb:b1:7e:bd:2e:62:df:d9:a7:b8:31:69:3c:
db:b0:2b:ed:95:02:f9:71:36:78:f0:8e:ab:4a:28:
6a:e2:c5:e9:85:40:be:8e:73:4a:59:16:7b:d5:2f:
72:44:1c:3c:26:29:6a:0c:3d:32:06:15:30:6a:ea:
65:ff:07:52:2a:8a:d3:29:7a:c6:5f:af:e1:74:89:
83:08:2f:e5:11:bc:64:64:4f:8d:5a:df:f5:e6:cf:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:AA:23:A7:DB:73:9E:D8:D5:08:EA:78:A5:9B:7E:1A:28:02:89
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4b:5f:d9:db:19:0e:07:01:1b:7b:84:fe:c3:0e:ef:b6:93:
85:6d:5f:d8:6a:51:c2:97:fe:87:32:0c:f1:75:d8:11:c8:1d:
0a:fc:29:7b:52:8f:74:ec:fc:86:f1:96:f7:18:e1:a5:09:b4:
d3:48:4e:d2:4b:16:3a:9e:29:a0:5d:40:01:a7:19:7c:f9:77:
79:fc:f1:cd:6c:36:d9:3e:83:22:b3:db:c1:33:f7:d8:c6:29:
dd:1e:29:c6:d3:01:2f:92:6a:45:71:7c:73:1e:fd:7a:92:b6:
56:3a:ec:2f:d8:ae:fe:50:6b:33:64:5e:72:99:6b:cf:92:fb:
98:30:d1:e9:c2:08:5b:fe:45:cc:81:12:06:99:e9:e3:3d:26:
cc:f2:8a:98:2f:fb:ab:fa:6e:e4:07:a1:55:0d:5b:4f:00:a9:
f0:ee:5a:4b:8a:1b:1d:12:88:54:e3:9f:09:11:2f:5e:e8:d8:
59:a3:cf:ac:5b:69:90:38:dc:ad:b1:28:d9:7e:49:6a:68:08:
f7:2c:eb:33:99:f0:d4:81:13:6d:cc:3e:cc:b0:7e:f8:b7:a0:
d1:98:c5:13:aa:c4:83:21:66:79:20:ba:3c:7f:a8:24:07:f3:
b0:6f:03:be:63:54:a3:57:c6:22:78:92:83:e0:b6:86:36:16:
32:a0:c5:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBmsYD/jipM1EVRq2UEFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5
NTZjMWQwHhcNMjUwODA0MDMwMDU3WhcNMjUwODA1MDMwMDU3WjAzMTEwLwYDVQQD
Eyg2MmE3YWEyM2E3ZGI3MzllZDhkNTA4ZWE3OGE1OWI3ZTFhMjgwMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5voFzndHOZg7K6YJ6Qlay+EQmuJ3
REzAu7ZsqsbPSD73diBuZgRI3FVvJkqCN4+v31R9iAHh97fCObwp0PtyinMsT6bJ
7W7oKphuTYFLsmOBKJF/+ukFw2H/VXq/PBZen3UD8TdBhj6/1rtsi5aru3WhZ8QX
YbFGJyv0T3MIiUumy5+/fSFOXS52nf6sD25XVN7c/Ku9QI+km22cwbO2Uae/Czgk
+Muxfr0uYt/Zp7gxaTzbsCvtlQL5cTZ48I6rSihq4sXphUC+jnNKWRZ71S9yRBw8
JilqDD0yBhUwaupl/wdSKorTKXrGX6/hdImDCC/lEbxkZE+NWt/15s9J7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKnqiOn23Oe2NUI6nilm34aKAKJMB8GA1UdIwQY
MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt
NDY2MDEzNDM1MDc5LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5
LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUktf2dsZ
DgcBG3uE/sMO77aThW1f2GpRwpf+hzIM8XXYEcgdCvwpe1KPdOz8hvGW9xjhpQm0
00hO0ksWOp4poF1AAacZfPl3efzxzWw22T6DIrPbwTP32MYp3R4pxtMBL5JqRXF8
cx79epK2VjrsL9iu/lBrM2Recplrz5L7mDDR6cIIW/5FzIESBpnp4z0mzPKKmC/7
q/pu5AehVQ1bTwCp8O5aS4obHRKIVOOfCREvXujYWaPPrFtpkDjcrbEo2X5JamgI
9yzrM5nw1IETbcw+zLB++Leg0ZjFE6rEgyFmeSC6PH+oJAfzsG8DvmNUo1fGIniS
g+C2hjYWMqDF3A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:22 2025 by rpki-client