Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json)
Hash identifier: Xi37uqqpR2w3bnYJM3mWmBpiNVvjiPun2ZKNCoDTWeA=
Subject key identifier: 89:B5:A2:B9:54:3A:F3:0A:BB:D2:54:FB:6A:81:30:EA:54:C5:AB:B8
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 01988B7D298740F9CB3FDD28477B4EF1897F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
Manifest number: 10A9
Signing time: Fri 08 Aug 2025 21:01:32 +0000
Manifest this update: Fri 08 Aug 2025 21:01:32 +0000
Manifest next update: Sat 09 Aug 2025 21:01:32 +0000
Files and hashes: 1: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: 6a5nZ2Li69FoB62C4V1FIkQTgOcsyRgn8fskqOEApIc=)
2: prmNkNLNXxPUBZ53bykbtYiFoko.roa (hash: hBOLiexHlZdG3wt6SL4MOVEN8AgHHkXNkc6zKLyvdD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:29:87:40:f9:cb:3f:dd:28:47:7b:4e:f1:89:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Aug 8 21:01:32 2025 GMT
Not After : Aug 9 21:01:32 2025 GMT
Subject: CN=89b5a2b9543af30abbd254fb6a8130ea54c5abb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:83:7d:7b:a3:41:3f:03:0d:79:5f:a3:5a:
5c:b9:cc:67:d1:d6:87:ee:fc:df:96:a2:d1:03:8e:
64:68:13:ee:2b:45:f8:f9:e6:89:74:5c:fa:d5:54:
30:b0:b7:23:3b:3b:bf:e4:8d:7d:81:6e:7a:01:51:
7b:bd:de:ea:a6:6e:f0:09:12:c4:72:2b:d3:f1:11:
79:85:2a:bf:d5:ba:f6:a6:46:88:e5:29:b3:a0:eb:
b4:10:f7:7e:46:7a:de:58:e8:79:ff:d3:26:f7:4d:
f8:b8:af:dd:0a:c6:48:71:ed:38:98:c3:a7:46:6f:
46:ac:27:be:31:58:b9:0f:96:dc:8a:dd:61:26:7a:
fe:75:de:c4:2a:77:16:d4:55:52:17:b5:3a:f2:8c:
c1:4a:60:61:f8:6b:1c:47:70:2e:ba:d8:bb:dd:5d:
37:1a:e8:50:c4:dd:13:7b:f6:f9:7f:78:a3:62:8a:
5f:82:76:07:dd:d7:15:51:f0:67:a4:5e:03:49:96:
19:ff:e9:95:64:a7:1b:0d:2c:a7:00:38:52:5c:23:
0f:c8:ce:4c:48:f8:05:07:41:e0:a8:2c:6b:ee:48:
88:23:9b:5a:61:b7:78:81:8a:29:24:8f:1e:03:9c:
41:4f:fa:60:d8:08:35:0b:7b:aa:c1:8d:33:5f:e1:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:A2:B9:54:3A:F3:0A:BB:D2:54:FB:6A:81:30:EA:54:C5:AB:B8
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:19:5c:90:b8:ac:ce:bc:8e:e1:93:b9:9d:2c:95:33:a7:3e:
5a:b0:fd:9c:07:43:37:9c:f0:1b:d4:63:5c:cb:dc:a0:ce:56:
9a:b2:3d:c0:fc:e2:66:57:22:7b:bf:17:a9:4b:2a:15:9f:3a:
90:19:40:0b:5f:be:5c:d3:db:84:f9:5c:60:a4:ef:89:90:14:
a4:cf:41:04:bc:f8:9e:2f:2b:b7:28:7d:d8:43:56:32:41:51:
f0:32:c8:2e:ff:76:9e:0f:73:a3:ea:d5:46:75:d2:4c:a6:de:
17:31:91:e5:33:58:00:82:f9:5f:c4:70:c8:5e:0b:8a:67:f1:
83:6d:8a:c5:86:ff:a6:8f:66:9f:7d:80:fa:9a:ce:4d:e0:3f:
72:af:bd:fb:f8:e1:17:70:c9:7e:c9:06:b3:64:63:85:e3:8f:
d4:ba:f6:82:8b:2f:6e:d7:90:22:14:c8:9f:16:d4:36:0b:73:
b2:d8:da:15:64:6c:41:22:d3:22:14:5c:dd:a5:d6:a1:f9:01:
fe:46:35:ca:b5:f1:3e:9a:70:d8:73:07:c1:9f:b4:94:30:b0:
76:c0:cc:a4:98:91:92:71:95:53:ad:4b:52:e6:85:16:f4:8c:
dd:71:eb:df:e6:23:e0:0c:bf:76:09:d8:d0:36:43:59:5a:05:
cf:4c:62:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfSmHQPnLP90oR3tO8Yl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YjgwY2FhOTdjMTMxNDdkNjgwYzgwOTc2ZjhhNGIxNWNh
ZGUwNGYwHhcNMjUwODA4MjEwMTMyWhcNMjUwODA5MjEwMTMyWjAzMTEwLwYDVQQD
Eyg4OWI1YTJiOTU0M2FmMzBhYmJkMjU0ZmI2YTgxMzBlYTU0YzVhYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzWDfXujQT8DDXlfo1pcucxn0daH
7vzflqLRA45kaBPuK0X4+eaJdFz61VQwsLcjOzu/5I19gW56AVF7vd7qpm7wCRLE
civT8RF5hSq/1br2pkaI5SmzoOu0EPd+RnreWOh5/9Mm9034uK/dCsZIce04mMOn
Rm9GrCe+MVi5D5bcit1hJnr+dd7EKncW1FVSF7U68ozBSmBh+GscR3Auuti73V03
GuhQxN0Te/b5f3ijYopfgnYH3dcVUfBnpF4DSZYZ/+mVZKcbDSynADhSXCMPyM5M
SPgFB0HgqCxr7kiII5taYbd4gYopJI8eA5xBT/pg2Ag1C3uqwY0zX+FKeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm1orlUOvMKu9JU+2qBMOpUxau4MB8GA1UdIwQY
MBaAFEe4DKqXwTFH1oDICXb4pLFcreBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAt
MTBlMjRlOWQwZmE3LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAtMTBlMjRlOWQwZmE3
LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRlckLis
zryO4ZO5nSyVM6c+WrD9nAdDN5zwG9RjXMvcoM5WmrI9wPziZlcie78XqUsqFZ86
kBlAC1++XNPbhPlcYKTviZAUpM9BBLz4ni8rtyh92ENWMkFR8DLILv92ng9zo+rV
RnXSTKbeFzGR5TNYAIL5X8RwyF4Limfxg22KxYb/po9mn32A+prOTeA/cq+9+/jh
F3DJfskGs2RjheOP1Lr2gosvbteQIhTInxbUNgtzstjaFWRsQSLTIhRc3aXWofkB
/kY1yrXxPppw2HMHwZ+0lDCwdsDMpJiRknGVU61LUuaFFvSM3XHr3+Yj4Ay/dgnY
0DZDWVoFz0xifg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:28 2025 by rpki-client