Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: BZNuu70zdJ2+feqeylJkiR35EuFpn3XbTpGkzfI+YB0=
Subject key identifier: 41:8C:DB:CA:86:E1:C1:76:19:65:52:73:F0:20:58:E8:3B:A8:D7:4E
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 019894485F2AC6CB51E702EC8CA4204B8A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 14:00:27 +0000
Manifest this update: Sun 10 Aug 2025 14:00:27 +0000
Manifest next update: Mon 11 Aug 2025 14:00:27 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: ShjdqbqnoXpS8q0NsRa7eoYwqomKZMEyimkRCrRC1C8=)
2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:5f:2a:c6:cb:51:e7:02:ec:8c:a4:20:4b:8a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Aug 10 14:00:27 2025 GMT
Not After : Aug 11 14:00:27 2025 GMT
Subject: CN=418cdbca86e1c17619655273f02058e83ba8d74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:15:32:4e:43:53:07:7a:c9:78:bd:be:c5:
38:df:e3:18:6b:80:3a:39:4f:d4:ec:fb:85:4a:8c:
41:22:dd:fb:16:a1:7c:f2:c7:86:b0:d4:08:6d:22:
75:af:2b:15:1d:ed:60:38:3f:1f:1d:43:bb:f0:26:
81:08:5a:85:25:11:bd:41:5e:d8:58:76:41:c8:02:
da:b7:21:8a:b0:34:0c:c7:42:b7:4b:e7:1a:16:b5:
c4:03:ca:d6:89:f1:9e:68:9c:a7:1d:76:41:94:7a:
aa:db:e4:57:3d:2e:e2:6e:40:ec:0e:42:90:76:90:
6e:8b:98:d6:b4:37:8a:8c:6c:84:87:d9:e1:92:b7:
42:c0:45:44:f8:93:fd:34:d2:59:8e:47:72:34:5f:
fa:b9:b9:fe:74:94:87:9c:8d:5c:0a:27:86:59:eb:
74:a4:40:fb:3d:11:e9:2a:83:cc:6d:7a:72:4b:40:
fe:ce:d4:8b:ae:ca:c6:ab:ec:ae:25:6e:6c:29:2b:
ca:87:cf:17:df:06:fe:28:7b:70:15:96:1a:b8:4f:
d5:ee:be:89:42:3a:83:f9:ab:d0:8f:68:c2:f5:11:
91:87:4a:82:2b:cb:d6:f2:b0:ad:b3:aa:8d:bb:64:
72:ea:fd:ec:14:f9:ed:79:7e:fc:ab:6b:f1:f4:0b:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:DB:CA:86:E1:C1:76:19:65:52:73:F0:20:58:E8:3B:A8:D7:4E
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:41:1b:12:2c:2e:86:8f:cd:f8:de:7d:13:c1:49:b6:16:5b:
8d:3e:8e:ad:9b:3d:f1:6e:77:cc:57:4e:17:2b:5b:52:e9:b0:
27:fa:8a:8a:97:05:30:db:1c:77:ce:4c:aa:01:5a:35:13:3b:
9a:81:ec:60:14:09:a1:25:d6:ac:83:31:56:89:57:1b:b5:f5:
f7:d3:84:24:e8:72:2a:a5:d3:30:ee:f3:b9:2c:e0:2b:38:9c:
0b:23:50:8e:06:3e:77:b2:9e:80:59:81:bc:9d:f9:b1:45:8d:
3c:da:05:9f:a6:a1:e5:3d:59:ec:7c:d4:17:e9:42:07:e2:06:
a4:f6:2e:06:85:c7:90:d1:30:36:a3:f8:e9:0a:86:d6:71:06:
11:1f:6d:09:92:61:a3:20:c7:16:a1:4a:a8:7c:35:28:db:f6:
22:a3:89:ce:41:d4:4b:13:9d:a1:dd:af:26:bd:31:29:8d:59:
8e:1a:2d:f2:7a:60:d4:ae:64:e7:05:28:ab:93:bf:0d:9f:19:
b7:e9:53:8c:04:8c:8f:0d:2d:40:22:ed:6a:69:4e:21:09:f2:
0d:4b:b6:fa:01:39:89:16:04:29:a2:d4:0a:fa:92:2a:96:9e:
7b:d3:fa:97:70:d5:ce:54:41:d6:2a:d9:18:55:49:5d:3d:69:
2e:98:4c:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUSF8qxstR5wLsjKQgS4qXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjMyMGJlODk3MjY4MzFmM2ZkOTAwNzQwZjFmOTA2Zjli
MTljNmEwHhcNMjUwODEwMTQwMDI3WhcNMjUwODExMTQwMDI3WjAzMTEwLwYDVQQD
Eyg0MThjZGJjYTg2ZTFjMTc2MTk2NTUyNzNmMDIwNThlODNiYThkNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfYVMk5DUwd6yXi9vsU43+MYa4A6
OU/U7PuFSoxBIt37FqF88seGsNQIbSJ1rysVHe1gOD8fHUO78CaBCFqFJRG9QV7Y
WHZByALatyGKsDQMx0K3S+caFrXEA8rWifGeaJynHXZBlHqq2+RXPS7ibkDsDkKQ
dpBui5jWtDeKjGyEh9nhkrdCwEVE+JP9NNJZjkdyNF/6ubn+dJSHnI1cCieGWet0
pED7PRHpKoPMbXpyS0D+ztSLrsrGq+yuJW5sKSvKh88X3wb+KHtwFZYauE/V7r6J
QjqD+avQj2jC9RGRh0qCK8vW8rCts6qNu2Ry6v3sFPnteX78q2vx9AvC1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGM28qG4cF2GWVSc/AgWOg7qNdOMB8GA1UdIwQY
MBaAFO6zIL6Jcmgx8/2QB0Dx+Qb5sZxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kOTBiZTgtZjYwNS00ZmM4LThmMDkt
MDIxMDQwYWEzYzhhLzEvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9kOTBiZTgtZjYwNS00ZmM4LThmMDktMDIxMDQwYWEzYzhh
LzEvN3JNZ3ZvbHlhREh6X1pBSFFQSDVCdm14bkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0EbEiwu
ho/N+N59E8FJthZbjT6OrZs98W53zFdOFytbUumwJ/qKipcFMNscd85MqgFaNRM7
moHsYBQJoSXWrIMxVolXG7X199OEJOhyKqXTMO7zuSzgKzicCyNQjgY+d7KegFmB
vJ35sUWNPNoFn6ah5T1Z7HzUF+lCB+IGpPYuBoXHkNEwNqP46QqG1nEGER9tCZJh
oyDHFqFKqHw1KNv2IqOJzkHUSxOdod2vJr0xKY1Zjhot8npg1K5k5wUoq5O/DZ8Z
t+lTjASMjw0tQCLtamlOIQnyDUu2+gE5iRYEKaLUCvqSKpaee9P6l3DVzlRB1irZ
GFVJXT1pLphMrg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:00 2025 by rpki-client