Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: WyAGjLjWLo/gjnAzvGysHZFj4H7neykAYaSmR9Km3VI=
Subject key identifier: 9D:6B:47:91:32:44:6A:52:48:FB:20:C0:2D:2F:DC:F3:5A:33:96:D1
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 0198819E52B8536D94C0DEDF0F77BCFC23F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 1045
Signing time: Wed 06 Aug 2025 23:01:33 +0000
Manifest this update: Wed 06 Aug 2025 23:01:33 +0000
Manifest next update: Thu 07 Aug 2025 23:01:33 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: ScsVClSugfS7Rgd3uQiKZUFZ7lAEkjAxJgF2NyMne5Y=)
2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:52:b8:53:6d:94:c0:de:df:0f:77:bc:fc:23:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Aug 6 23:01:33 2025 GMT
Not After : Aug 7 23:01:33 2025 GMT
Subject: CN=9d6b479132446a5248fb20c02d2fdcf35a3396d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:0f:71:be:e4:db:66:9e:76:05:ea:87:63:
04:bc:ce:af:4a:e0:43:d6:15:97:7e:21:32:dc:14:
2c:c6:09:93:0e:e0:1e:1b:41:df:ed:c5:24:ee:76:
6d:8e:7a:a4:d8:9d:74:b0:42:3b:b0:cd:86:e2:3d:
07:ab:fb:51:47:72:22:c8:88:5e:d5:4e:ec:e2:8a:
46:be:5f:71:4b:bc:83:91:e0:7f:e0:de:76:d5:fe:
a1:56:80:27:73:58:8f:af:af:e1:cf:82:be:a7:fe:
48:4f:b3:92:43:ea:48:2c:0d:9e:3b:39:b4:df:fc:
4b:3d:7f:07:4a:c8:76:12:1e:90:d8:01:03:06:4c:
25:81:a7:69:b9:74:c3:3b:8c:7f:99:3e:58:49:57:
a1:5e:0d:30:43:1f:55:d0:f6:c4:45:0a:46:59:45:
78:ea:96:86:15:33:97:cc:0c:f2:a5:de:7b:d9:2e:
90:a1:1d:12:41:1f:f1:c4:3c:13:c2:36:18:53:76:
8e:fe:da:c2:11:f3:44:ee:d6:54:81:7f:6b:dc:01:
b8:3a:03:94:b1:44:9b:17:94:ec:ae:2e:74:6f:f1:
54:f4:a2:f9:d9:a7:22:8d:89:ce:ab:e6:07:df:50:
cd:83:a2:cc:5b:6f:69:12:bf:77:a2:94:2e:73:a8:
50:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6B:47:91:32:44:6A:52:48:FB:20:C0:2D:2F:DC:F3:5A:33:96:D1
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e0:bd:9b:3c:da:04:0f:8f:fd:50:26:c2:be:05:56:ba:68:
29:56:4e:f7:7d:f1:26:4e:3d:e4:2b:ef:fa:d1:cd:82:ae:dd:
1c:5c:ee:49:1a:8a:8d:29:d0:7d:4d:30:5c:f1:3f:c1:6b:8f:
ce:3b:d5:7b:ec:45:67:40:7a:c4:da:2e:08:27:cf:d3:6d:18:
51:c8:43:ff:ea:a1:a0:30:9b:a3:17:73:5a:92:e6:c2:a0:8a:
7a:82:07:5c:b3:c7:67:3f:3b:83:8d:7a:cc:9e:64:79:a9:2f:
95:91:e0:69:d8:c4:c1:20:cc:7a:94:6d:4b:bc:36:34:17:82:
82:f7:0d:5c:2d:45:83:2a:9e:42:52:74:ec:e2:f8:ea:3f:18:
23:a9:05:b2:ec:bd:69:06:02:a2:37:ed:74:b0:01:5b:21:86:
47:01:59:c0:22:ba:42:0c:24:56:e2:bd:9b:41:f1:7c:98:30:
9b:92:88:39:f7:3e:0b:4e:5d:9a:43:1f:23:81:b9:45:bb:49:
38:ce:0b:1e:73:a9:cd:78:7b:b6:52:e7:89:57:e4:d1:ac:ae:
9e:ee:8f:b6:ba:13:20:c4:f7:26:66:39:11:a3:f6:0b:97:84:
62:35:9f:cd:a8:39:72:57:25:a5:93:ae:c5:06:e6:e0:bb:6c:
6a:22:00:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnlK4U22UwN7fD3e8/CP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmQ0N2I0N2UwNWIxM2QwNThiMWNiNDI1MjlhN2MxODY2
ZGNkZjIwHhcNMjUwODA2MjMwMTMzWhcNMjUwODA3MjMwMTMzWjAzMTEwLwYDVQQD
Eyg5ZDZiNDc5MTMyNDQ2YTUyNDhmYjIwYzAyZDJmZGNmMzVhMzM5NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yQPcb7k22aedgXqh2MEvM6vSuBD
1hWXfiEy3BQsxgmTDuAeG0Hf7cUk7nZtjnqk2J10sEI7sM2G4j0Hq/tRR3IiyIhe
1U7s4opGvl9xS7yDkeB/4N521f6hVoAnc1iPr6/hz4K+p/5IT7OSQ+pILA2eOzm0
3/xLPX8HSsh2Eh6Q2AEDBkwlgadpuXTDO4x/mT5YSVehXg0wQx9V0PbERQpGWUV4
6paGFTOXzAzypd572S6QoR0SQR/xxDwTwjYYU3aO/trCEfNE7tZUgX9r3AG4OgOU
sUSbF5Tsri50b/FU9KL52acijYnOq+YH31DNg6LMW29pEr93opQuc6hQiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1rR5EyRGpSSPsgwC0v3PNaM5bRMB8GA1UdIwQY
MBaAFOxtR7R+BbE9BYsctCUpp8GGbc3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEt
YzM5YWRiOThmNDI5LzEvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEtYzM5YWRiOThmNDI5
LzEvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreC9mzza
BA+P/VAmwr4FVrpoKVZO933xJk495Cvv+tHNgq7dHFzuSRqKjSnQfU0wXPE/wWuP
zjvVe+xFZ0B6xNouCCfP020YUchD/+qhoDCboxdzWpLmwqCKeoIHXLPHZz87g416
zJ5keakvlZHgadjEwSDMepRtS7w2NBeCgvcNXC1FgyqeQlJ07OL46j8YI6kFsuy9
aQYCojftdLABWyGGRwFZwCK6QgwkVuK9m0HxfJgwm5KIOfc+C05dmkMfI4G5RbtJ
OM4LHnOpzXh7tlLniVfk0ayunu6PtroTIMT3JmY5EaP2C5eEYjWfzag5clclpZOu
xQbm4LtsaiIAJw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:13 2025 by rpki-client