Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier: jQKmAgVuYEaxRRpL+RQYA+GosGC9dAxNCSzWMMf57h8=
Subject key identifier: 2A:01:1C:78:46:69:5D:65:C2:89:EA:29:45:7B:30:E1:38:36:8D:28
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial: 019889578E31CEB3C2F5CC7245E93747A7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number: 0CAE
Signing time: Fri 08 Aug 2025 11:01:13 +0000
Manifest this update: Fri 08 Aug 2025 11:01:13 +0000
Manifest next update: Sat 09 Aug 2025 11:01:13 +0000
Files and hashes: 1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=)
2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: P7puL/sePRqHYZFHCU0NSiHAuAZM0Oe+DACYixsXuoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:8e:31:ce:b3:c2:f5:cc:72:45:e9:37:47:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Validity
Not Before: Aug 8 11:01:13 2025 GMT
Not After : Aug 9 11:01:13 2025 GMT
Subject: CN=2a011c7846695d65c289ea29457b30e138368d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f5:bd:44:6b:eb:a9:fd:f4:2a:86:23:28:4a:
dc:60:8f:94:68:32:31:7e:d5:71:f0:f1:f8:e3:ec:
ee:8a:aa:04:c4:f5:06:f1:71:3c:a3:63:1c:d7:85:
ca:53:a8:1e:6d:24:59:be:5d:15:6b:a8:c7:5f:4a:
56:1b:f7:ad:ff:89:6a:3b:d3:ab:a2:5c:1b:ba:39:
19:20:01:d1:b9:b2:ec:cf:0d:c5:0f:42:f6:d1:1a:
71:ab:95:66:76:dc:68:00:8d:9c:6b:11:9d:c8:4a:
0f:93:a3:76:07:37:c8:4f:32:40:ef:86:8f:52:44:
a9:c7:8d:64:70:33:67:bc:18:fd:12:98:a4:f8:75:
04:04:e6:8f:36:9f:b7:47:91:3f:df:a3:fa:df:36:
e8:ba:3b:cf:5d:8f:d9:1e:b6:00:56:d9:8f:24:e3:
d4:47:cd:6a:db:57:7e:81:51:98:a8:c2:e1:9a:07:
e3:1c:5a:a0:a8:49:a0:a3:84:93:43:ed:b1:80:b8:
02:3f:76:4e:d7:7d:24:41:33:e5:7d:56:75:96:3d:
55:c9:39:bd:51:2c:80:ae:d0:9a:94:b9:48:dc:7a:
76:29:2d:83:20:63:73:dc:78:a4:70:91:d4:b8:31:
5d:a2:1b:2f:d5:ba:56:33:0c:8d:1b:77:12:01:f3:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:01:1C:78:46:69:5D:65:C2:89:EA:29:45:7B:30:E1:38:36:8D:28
X509v3 Authority Key Identifier:
keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:91:d7:10:55:78:ce:09:11:38:07:a2:1e:aa:88:a0:99:23:
eb:2b:1a:e6:82:01:fd:5c:29:11:53:21:11:37:3e:31:5e:0a:
3f:64:4c:bf:78:78:e9:6b:b2:f7:33:4b:ab:bd:37:85:d4:e8:
93:be:23:78:e4:dd:bf:8d:a3:7b:09:6c:f5:24:07:40:08:16:
60:0a:97:e3:d5:d6:95:33:20:d8:de:f5:02:e4:c6:d1:6f:27:
d0:02:28:2e:9e:9f:cf:42:4a:8b:7f:8f:e1:41:aa:ae:01:05:
e9:30:8b:da:bf:8c:07:4d:b8:2f:e3:f2:5d:57:05:18:70:eb:
a6:7b:86:d2:7a:6e:ff:26:59:51:7c:bd:18:dc:7d:f1:b8:c9:
4a:df:7e:35:54:b4:2a:87:2b:10:79:34:07:e2:bc:71:53:04:
f3:81:ee:d6:6f:dd:e5:cb:f6:80:c2:9a:95:e5:53:41:bd:4e:
63:4e:3c:76:42:92:ca:71:f3:cf:c9:cb:bf:62:51:57:cf:6b:
5e:ac:50:4a:be:f8:e7:d9:a8:60:4d:ed:ca:d0:22:2d:ea:41:
44:92:64:0c:cb:c2:42:ca:90:69:5b:37:21:e5:47:b1:f2:b7:
ae:aa:78:7d:4a:62:02:91:14:0e:b8:b3:e2:72:ca:30:e3:4f:
79:38:b0:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJV44xzrPC9cxyRek3R6f1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1
NmRjMzYwHhcNMjUwODA4MTEwMTEzWhcNMjUwODA5MTEwMTEzWjAzMTEwLwYDVQQD
EygyYTAxMWM3ODQ2Njk1ZDY1YzI4OWVhMjk0NTdiMzBlMTM4MzY4ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/W9RGvrqf30KoYjKErcYI+UaDIx
ftVx8PH44+zuiqoExPUG8XE8o2Mc14XKU6gebSRZvl0Va6jHX0pWG/et/4lqO9Or
olwbujkZIAHRubLszw3FD0L20Rpxq5VmdtxoAI2caxGdyEoPk6N2BzfITzJA74aP
UkSpx41kcDNnvBj9Epik+HUEBOaPNp+3R5E/36P63zboujvPXY/ZHrYAVtmPJOPU
R81q21d+gVGYqMLhmgfjHFqgqEmgo4STQ+2xgLgCP3ZO130kQTPlfVZ1lj1VyTm9
USyArtCalLlI3Hp2KS2DIGNz3HikcJHUuDFdohsv1bpWMwyNG3cSAfPNkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoBHHhGaV1lwonqKUV7MOE4No0oMB8GA1UdIwQY
MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt
MDgyMzBjYzUwZWE5LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5
LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJHXEFV4
zgkROAeiHqqIoJkj6ysa5oIB/VwpEVMhETc+MV4KP2RMv3h46Wuy9zNLq703hdTo
k74jeOTdv42jewls9SQHQAgWYAqX49XWlTMg2N71AuTG0W8n0AIoLp6fz0JKi3+P
4UGqrgEF6TCL2r+MB024L+PyXVcFGHDrpnuG0npu/yZZUXy9GNx98bjJSt9+NVS0
KocrEHk0B+K8cVME84Hu1m/d5cv2gMKaleVTQb1OY048dkKSynHzz8nLv2JRV89r
XqxQSr7459moYE3tytAiLepBRJJkDMvCQsqQaVs3IeVHsfK3rqp4fUpiApEUDriz
4nLKMONPeTiwGA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:16 2025 by rpki-client