Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier: 7Z2bCFyBLzeGn6xIxg0wLnCIxG6hCw587cfB8RSPnCk=
Subject key identifier: F2:0D:CE:8C:C9:5B:98:5C:E7:53:53:1F:91:39:94:BA:EA:A5:A8:72
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial: 0198971290BBCD01A63F7C676BFB036A105D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number: 11F9
Signing time: Mon 11 Aug 2025 03:00:32 +0000
Manifest this update: Mon 11 Aug 2025 03:00:32 +0000
Manifest next update: Tue 12 Aug 2025 03:00:32 +0000
Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: va14irO8Nn6IHdHbQrlyfGvRvoy0DPP5mJHAD9fy0ko=)
2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:90:bb:cd:01:a6:3f:7c:67:6b:fb:03:6a:10:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Validity
Not Before: Aug 11 03:00:32 2025 GMT
Not After : Aug 12 03:00:32 2025 GMT
Subject: CN=f20dce8cc95b985ce753531f913994baeaa5a872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:78:25:d6:ec:df:5f:3b:bb:b5:37:dd:62:
55:11:31:d5:06:22:bd:a3:37:1d:28:03:31:92:88:
1b:cc:e9:e0:c0:b3:ee:ef:a8:3f:f6:23:50:1b:b1:
98:77:a2:ab:4a:b7:a0:ef:36:6f:05:18:dd:d7:07:
f6:92:83:7b:dc:f7:22:52:fe:73:45:6e:b2:d1:7d:
21:1b:9b:9f:15:a7:f8:da:0e:94:08:f2:d1:fb:14:
ab:22:80:03:9d:f4:e6:e0:c5:a4:a0:e2:fb:27:3c:
b4:e2:34:7f:2c:32:9b:52:32:ca:fd:4d:f3:8a:58:
9b:f2:bd:20:02:b2:b2:a7:80:6a:72:20:8e:e5:2c:
dd:ae:17:51:0a:98:08:7c:bd:fb:3f:70:d5:72:d7:
f7:e5:6e:9f:87:fd:d3:2b:23:52:b1:c0:45:b8:c9:
9d:d6:63:d8:3b:1e:94:23:3a:b6:62:2e:61:f6:73:
fd:42:2a:26:05:f2:df:d2:91:2e:fe:e7:57:cf:ac:
8e:ac:b2:ca:b4:70:6f:fd:c6:88:f2:bd:c4:68:62:
2d:7a:af:7f:0b:f1:96:11:ba:4d:67:82:b9:9b:49:
51:39:a3:60:d7:4b:98:7c:2b:70:13:e1:10:ee:b2:
95:1a:bd:5f:f8:5e:10:a5:e5:73:b9:4c:e6:ee:13:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:CE:8C:C9:5B:98:5C:E7:53:53:1F:91:39:94:BA:EA:A5:A8:72
X509v3 Authority Key Identifier:
keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f7:93:78:82:44:52:5c:2e:ea:65:94:28:ae:71:79:c6:66:
23:3a:02:6b:d6:ca:01:ac:d5:d8:bd:ed:d5:95:fc:cd:61:4c:
4b:49:5b:1f:f8:ff:e7:00:21:97:c1:e3:c7:82:87:0a:77:06:
e7:dd:8e:06:8c:13:89:22:c6:a3:e2:2f:0b:85:e7:36:d3:ca:
c8:9d:32:25:f6:f5:0c:8d:01:b4:1a:e3:99:eb:9f:bc:08:13:
08:43:ce:c6:e2:f5:c1:2a:db:59:f4:0b:26:13:c6:92:44:c7:
c9:b2:ab:c9:4e:19:af:cf:5c:a0:6a:64:a2:69:08:b3:99:8a:
cb:ed:43:2f:df:86:42:3f:05:c9:34:23:c4:da:ac:c2:a0:fa:
21:fe:c4:a5:80:18:bc:ff:db:7d:18:44:d4:b2:1c:b5:9b:b0:
7f:cb:6e:16:76:fc:34:6e:33:e1:1c:d2:00:b1:48:25:8c:da:
c4:21:44:48:2b:2b:c6:3b:73:26:df:d0:33:44:bf:ef:91:3d:
c6:a3:38:02:81:00:99:6b:93:2f:26:51:e1:21:e6:32:02:25:
f6:dd:81:aa:cf:73:a0:50:c6:92:f3:95:5a:7f:ed:5a:5e:17:
54:82:2c:b3:f9:fb:d2:46:76:d4:76:39:18:7b:e0:74:38:51:
e2:85:7a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXEpC7zQGmP3xna/sDahBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh
ZWYzY2MwHhcNMjUwODExMDMwMDMyWhcNMjUwODEyMDMwMDMyWjAzMTEwLwYDVQQD
EyhmMjBkY2U4Y2M5NWI5ODVjZTc1MzUzMWY5MTM5OTRiYWVhYTVhODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi14Jdbs3187u7U33WJVETHVBiK9
ozcdKAMxkogbzOngwLPu76g/9iNQG7GYd6KrSreg7zZvBRjd1wf2koN73PciUv5z
RW6y0X0hG5ufFaf42g6UCPLR+xSrIoADnfTm4MWkoOL7Jzy04jR/LDKbUjLK/U3z
ilib8r0gArKyp4BqciCO5SzdrhdRCpgIfL37P3DVctf35W6fh/3TKyNSscBFuMmd
1mPYOx6UIzq2Yi5h9nP9QiomBfLf0pEu/udXz6yOrLLKtHBv/caI8r3EaGIteq9/
C/GWEbpNZ4K5m0lROaNg10uYfCtwE+EQ7rKVGr1f+F4QpeVzuUzm7hP4swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPINzozJW5hc51NTH5E5lLrqpahyMB8GA1UdIwQY
MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt
ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx
LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPeTeIJE
Ulwu6mWUKK5xecZmIzoCa9bKAazV2L3t1ZX8zWFMS0lbH/j/5wAhl8Hjx4KHCncG
592OBowTiSLGo+IvC4XnNtPKyJ0yJfb1DI0BtBrjmeufvAgTCEPOxuL1wSrbWfQL
JhPGkkTHybKryU4Zr89coGpkomkIs5mKy+1DL9+GQj8FyTQjxNqswqD6If7EpYAY
vP/bfRhE1LIctZuwf8tuFnb8NG4z4RzSALFIJYzaxCFESCsrxjtzJt/QM0S/75E9
xqM4AoEAmWuTLyZR4SHmMgIl9t2Bqs9zoFDGkvOVWn/tWl4XVIIss/n70kZ21HY5
GHvgdDhR4oV6hw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:14 2025 by rpki-client