
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: cX2yDoiF13eygmUdiso8+xZ1ET1AUcR5kT8nANF1klI=
Subject key identifier: 25:CB:B6:85:5E:0B:B1:70:A2:40:CA:AD:A9:81:48:E6:65:A8:1B:8B
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 01987F79E91DA390CC24BC401BEDD11AFDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 08D6
Signing time: Wed 06 Aug 2025 13:02:32 +0000
Manifest this update: Wed 06 Aug 2025 13:02:32 +0000
Manifest next update: Thu 07 Aug 2025 13:02:32 +0000
Files and hashes: 1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: bgfxolMEewvX7Ut+NvkqkaHCj22hXrjUZGDwnJ1VfVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:e9:1d:a3:90:cc:24:bc:40:1b:ed:d1:1a:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Aug 6 13:02:32 2025 GMT
Not After : Aug 7 13:02:32 2025 GMT
Subject: CN=25cbb6855e0bb170a240caada98148e665a81b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:4e:3b:fa:62:03:bd:e2:7d:0e:96:5f:41:
ca:af:75:4d:53:ef:fc:a4:44:20:49:62:70:c5:cb:
57:21:b1:e3:ef:03:98:b7:69:be:ee:34:c5:0d:3b:
1c:47:e1:2c:02:cb:3d:0c:b2:1f:f0:0f:2c:cd:ae:
79:38:b4:70:99:94:86:ad:fb:3c:fc:05:15:cf:13:
5d:b8:2b:4c:bc:c3:c1:a0:9d:9a:fe:e3:a8:ef:eb:
62:ec:b3:53:0f:9e:ec:76:c1:8c:24:57:ef:5f:de:
c2:be:36:93:74:22:73:88:b1:d5:52:c9:f8:00:c4:
bf:51:f0:f3:cf:4a:da:23:d3:68:48:1c:a8:fa:2e:
b5:be:b6:dc:09:d3:5d:a1:11:b4:4e:cd:c5:7f:e0:
2f:82:c8:7c:91:08:28:b8:ca:13:be:19:65:fe:40:
3e:ac:2c:b5:6c:04:1d:a7:c4:09:06:00:8c:ba:dd:
08:67:a7:83:d0:ee:55:27:7d:80:b1:17:de:ea:b2:
51:ce:6c:56:7e:53:ba:4a:61:11:ed:a6:d8:76:82:
61:69:87:58:1b:b7:4e:a7:bc:c9:da:e6:70:18:3a:
e9:ef:7a:41:13:fc:47:1e:b1:db:8c:4d:e4:8f:0e:
e2:4d:c4:45:c0:bb:58:8e:70:52:97:52:d5:89:2a:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:B6:85:5E:0B:B1:70:A2:40:CA:AD:A9:81:48:E6:65:A8:1B:8B
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:fe:88:dd:3f:06:b9:e0:76:9d:6e:e1:b3:bc:29:ca:9b:
5f:2f:6e:0b:8f:fe:fa:f8:08:23:0a:b6:37:53:0b:38:87:83:
0b:75:4e:f6:a3:e4:2f:a9:a0:cd:bc:8c:e9:f3:03:be:f7:57:
12:eb:a8:4a:08:d3:30:4d:d4:07:2b:10:80:9b:6c:60:b7:5c:
87:f1:4f:d1:5e:6c:dd:4d:ee:de:a4:09:f2:ac:ff:01:73:d0:
6a:71:ce:34:31:ca:cd:e0:a4:9c:74:36:fc:94:22:01:57:cb:
55:18:8f:f2:f8:eb:14:49:65:8e:11:bd:e5:99:dc:9d:98:2a:
fd:e8:4f:0e:6b:26:d4:29:27:13:58:3f:19:ea:41:26:b1:2c:
a6:3a:b8:76:ed:5b:2c:f1:ff:bb:ab:ed:fb:73:d1:06:b1:e5:
b2:96:21:7f:8e:05:34:56:f1:58:c6:c3:1f:7c:4a:fb:99:8e:
7c:aa:34:52:6b:f8:fe:63:67:6d:7e:fd:0e:ba:51:0a:18:66:
7d:7b:a6:55:97:31:b7:9d:2c:55:c6:97:f3:f9:52:c1:d4:cd:
71:c4:1b:78:9f:53:a8:11:99:63:b0:a3:e8:5a:bf:1e:89:52:
33:0e:a7:40:fa:44:3b:05:18:c3:8d:b3:4e:d7:e2:06:d4:c7:
f5:82:f1:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/eekdo5DMJLxAG+3RGv3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjFkMGYyYzNkMjFlNTRjNGQxODEyNzYwNDQzNWE5MGYy
NGRiNTEwHhcNMjUwODA2MTMwMjMyWhcNMjUwODA3MTMwMjMyWjAzMTEwLwYDVQQD
EygyNWNiYjY4NTVlMGJiMTcwYTI0MGNhYWRhOTgxNDhlNjY1YTgxYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsShOO/piA73ifQ6WX0HKr3VNU+/8
pEQgSWJwxctXIbHj7wOYt2m+7jTFDTscR+EsAss9DLIf8A8sza55OLRwmZSGrfs8
/AUVzxNduCtMvMPBoJ2a/uOo7+ti7LNTD57sdsGMJFfvX97CvjaTdCJziLHVUsn4
AMS/UfDzz0raI9NoSByo+i61vrbcCdNdoRG0Ts3Ff+Avgsh8kQgouMoTvhll/kA+
rCy1bAQdp8QJBgCMut0IZ6eD0O5VJ32AsRfe6rJRzmxWflO6SmER7abYdoJhaYdY
G7dOp7zJ2uZwGDrp73pBE/xHHrHbjE3kjw7iTcRFwLtYjnBSl1LViSoxIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXLtoVeC7FwokDKramBSOZlqBuLMB8GA1UdIwQY
MBaAFAux0PLD0h5UxNGBJ2BENakPJNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQt
Nzk5ZjdmNDU2MTYwLzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQtNzk5ZjdmNDU2MTYw
LzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLn+iN0/
Brngdp1u4bO8KcqbXy9uC4/++vgIIwq2N1MLOIeDC3VO9qPkL6mgzbyM6fMDvvdX
EuuoSgjTME3UBysQgJtsYLdch/FP0V5s3U3u3qQJ8qz/AXPQanHONDHKzeCknHQ2
/JQiAVfLVRiP8vjrFElljhG95ZncnZgq/ehPDmsm1CknE1g/GepBJrEspjq4du1b
LPH/u6vt+3PRBrHlspYhf44FNFbxWMbDH3xK+5mOfKo0Umv4/mNnbX79DrpRChhm
fXumVZcxt50sVcaX8/lSwdTNccQbeJ9TqBGZY7Cj6Fq/HolSMw6nQPpEOwUYw42z
TtfiBtTH9YLxJA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:08 2025 by rpki-client