Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: +Eln/5PwhzSIwxguOrI8NMXAg3ToNRJjrk8I7vM2wrE=
Subject key identifier: 29:1D:C0:04:A7:C3:2D:66:19:A3:42:2A:9B:C1:AD:98:57:C0:3A:9D
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 019875D06737B7455396FCA0C3CCB3E33FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 038E
Signing time: Mon 04 Aug 2025 16:00:48 +0000
Manifest this update: Mon 04 Aug 2025 16:00:48 +0000
Manifest next update: Tue 05 Aug 2025 16:00:48 +0000
Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: u7Jlo/ANYoJ0fuxFGnIEwBpEQXdfkt9fxnylXdLpSLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:67:37:b7:45:53:96:fc:a0:c3:cc:b3:e3:3f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Aug 4 16:00:48 2025 GMT
Not After : Aug 5 16:00:48 2025 GMT
Subject: CN=291dc004a7c32d6619a3422a9bc1ad9857c03a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:81:c6:89:a2:a8:a8:38:1c:01:f9:30:aa:
25:d2:a7:73:d3:cb:25:84:be:eb:6f:23:4a:d4:cb:
66:2e:33:9d:ba:34:91:5a:73:1c:be:ff:0a:cb:95:
d4:01:ad:a1:26:8c:ef:e1:64:bb:67:d6:e4:7f:bb:
7e:da:fe:31:b5:1e:20:47:41:43:ce:2d:25:e0:36:
e7:a4:34:df:dd:80:12:28:59:15:cb:91:6e:b9:8d:
36:65:0d:33:50:3b:3d:0a:65:d4:c6:1d:2f:9d:e9:
bf:21:d4:95:df:60:a8:fd:28:1f:18:23:1c:6c:ac:
94:ba:41:e8:1e:a0:ff:4f:a8:e5:0d:fb:ab:cb:90:
a1:d2:93:03:3c:73:2d:5c:d8:ef:c4:2f:98:8d:81:
ab:7b:05:df:91:e2:e8:dc:e3:6b:78:b0:f2:9a:0a:
ce:a6:ed:7f:f7:e8:32:e2:9c:cc:99:3b:cc:1c:b8:
c8:1d:26:52:89:01:92:9d:3f:76:4e:db:08:2c:87:
e7:fa:df:b5:2a:cb:84:4c:02:f2:49:00:e2:19:12:
a0:c7:20:eb:53:13:92:a6:a2:5c:1a:34:41:c8:cc:
8c:13:d7:10:bf:c8:02:ef:02:34:c3:e2:e4:a9:81:
38:2e:ef:e9:72:a6:c0:81:3a:c2:5e:e1:0f:bd:45:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1D:C0:04:A7:C3:2D:66:19:A3:42:2A:9B:C1:AD:98:57:C0:3A:9D
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:81:48:08:28:3d:2d:94:16:a1:a5:be:7d:3a:50:2a:c1:c8:
ea:73:0f:ef:66:3c:32:b7:69:dc:70:e7:6f:24:7c:c9:de:27:
ba:b2:06:e8:5a:78:f2:27:39:34:06:a5:67:e2:87:08:4b:bd:
40:f0:ab:9e:2c:b0:43:74:57:6f:af:c1:f3:c3:bf:c6:c9:9a:
27:e0:33:00:b6:90:3b:94:d9:f0:a7:65:a3:48:89:31:fc:7a:
1a:37:1f:61:a0:49:66:ac:95:f7:15:eb:d4:ed:92:26:43:b8:
3d:ee:59:23:ec:44:44:b7:d8:08:bb:73:dd:3e:c9:58:71:7b:
cc:62:36:70:fe:4c:0b:c0:11:fd:c4:bd:5a:40:b6:65:c1:34:
dc:fe:52:ba:d9:e4:11:dc:81:f7:3b:5b:b7:9d:42:77:95:07:
43:da:dd:e3:d8:56:8d:5b:86:fe:a6:e7:dc:bc:bf:32:75:5a:
07:54:f5:ae:a9:0f:69:6b:42:4d:ed:d9:82:35:6c:69:19:98:
19:65:9a:55:9b:c8:20:43:b7:99:76:ce:97:3a:49:f8:3f:f4:
2c:f6:87:e3:7c:4c:55:d0:1d:ba:28:43:66:df:bf:61:8e:74:
79:4b:91:24:c9:9c:03:7f:e8:75:5c:10:5d:63:b2:5f:4e:ca:
72:ff:33:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10Gc3t0VTlvygw8yz4z/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1
NTQ2Y2MwHhcNMjUwODA0MTYwMDQ4WhcNMjUwODA1MTYwMDQ4WjAzMTEwLwYDVQQD
EygyOTFkYzAwNGE3YzMyZDY2MTlhMzQyMmE5YmMxYWQ5ODU3YzAzYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCaBxomiqKg4HAH5MKol0qdz08sl
hL7rbyNK1MtmLjOdujSRWnMcvv8Ky5XUAa2hJozv4WS7Z9bkf7t+2v4xtR4gR0FD
zi0l4DbnpDTf3YASKFkVy5FuuY02ZQ0zUDs9CmXUxh0vnem/IdSV32Co/SgfGCMc
bKyUukHoHqD/T6jlDfury5Ch0pMDPHMtXNjvxC+YjYGrewXfkeLo3ONreLDymgrO
pu1/9+gy4pzMmTvMHLjIHSZSiQGSnT92TtsILIfn+t+1KsuETALySQDiGRKgxyDr
UxOSpqJcGjRByMyME9cQv8gC7wI0w+LkqYE4Lu/pcqbAgTrCXuEPvUV17wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkdwASnwy1mGaNCKpvBrZhXwDqdMB8GA1UdIwQY
MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt
NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1
LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4FICCg9
LZQWoaW+fTpQKsHI6nMP72Y8Mrdp3HDnbyR8yd4nurIG6Fp48ic5NAalZ+KHCEu9
QPCrniywQ3RXb6/B88O/xsmaJ+AzALaQO5TZ8Kdlo0iJMfx6GjcfYaBJZqyV9xXr
1O2SJkO4Pe5ZI+xERLfYCLtz3T7JWHF7zGI2cP5MC8AR/cS9WkC2ZcE03P5Sutnk
EdyB9ztbt51Cd5UHQ9rd49hWjVuG/qbn3Ly/MnVaB1T1rqkPaWtCTe3ZgjVsaRmY
GWWaVZvIIEO3mXbOlzpJ+D/0LPaH43xMVdAduihDZt+/YY50eUuRJMmcA3/odVwQ
XWOyX07Kcv8zQg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:14:44 2025 by rpki-client