Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: DDps+99UaYROvxhdxLhB3iPeOmEJBm5YaUo/9X5E/bw=
Subject key identifier: CB:1D:07:B1:0B:EF:42:EF:7E:EB:A0:DB:DA:0C:53:C2:5A:AB:F3:6B
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 0199500AD37D51039D8617D188A1AA8B38C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 168C
Signing time: Tue 16 Sep 2025 01:01:50 +0000
Manifest this update: Tue 16 Sep 2025 01:01:50 +0000
Manifest next update: Wed 17 Sep 2025 01:01:50 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: t0b3y8e1e937xlsDXzRXjgR/iV+2T8qZmz2FCy9XWU8=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:0a:d3:7d:51:03:9d:86:17:d1:88:a1:aa:8b:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Sep 16 01:01:50 2025 GMT
Not After : Sep 17 01:01:50 2025 GMT
Subject: CN=cb1d07b10bef42ef7eeba0dbda0c53c25aabf36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:44:a9:14:8d:0b:57:2e:bf:90:74:d0:f7:
e6:c8:0d:9e:4e:22:10:6f:4b:e6:b2:14:54:68:ad:
7e:dc:e5:33:82:e7:c7:05:fa:92:f6:5a:98:c6:1a:
c2:1a:c0:9d:8b:6a:99:8c:8a:fd:3a:cd:9a:be:16:
fb:fa:ae:73:b2:7b:4b:de:c0:51:4a:c3:a6:70:da:
4f:a5:c7:ee:3e:2d:50:12:60:2c:2e:87:a3:42:41:
18:43:ac:d1:9d:e8:3b:cd:03:26:c2:4b:27:26:02:
29:1d:2b:e5:08:52:a8:9f:d5:99:69:0f:5c:e7:35:
19:49:31:4d:ee:8d:22:bd:c7:6c:93:05:8d:a9:60:
9f:42:9f:15:39:00:46:de:e6:e4:b1:ef:56:3b:57:
11:b5:a4:1e:29:da:b2:b0:38:e5:67:c7:0a:a3:79:
1c:bf:6d:0a:ae:ac:ff:69:b1:ec:90:31:ec:0c:d3:
94:0a:ca:21:be:66:4c:4c:a3:af:45:5f:68:82:05:
11:58:2c:c3:b6:6f:59:78:83:78:cc:df:5a:e7:a5:
6e:47:94:79:fd:cf:98:1c:0a:65:87:92:70:74:01:
b0:b5:ec:ae:84:f5:87:ca:c9:3d:3b:58:8c:dd:66:
93:df:4f:c4:b0:b6:f7:4f:fb:b4:2b:99:23:bb:ad:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:07:B1:0B:EF:42:EF:7E:EB:A0:DB:DA:0C:53:C2:5A:AB:F3:6B
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:99:e5:9d:b3:b7:26:ae:e9:17:17:1a:d4:87:6d:3d:96:28:
be:20:5a:e8:02:e8:dc:68:bb:44:d9:35:28:7b:7e:05:bc:44:
1d:7c:6a:e4:db:56:6a:88:80:9a:55:ab:78:0b:3b:3a:6b:be:
28:00:f5:8a:39:89:c0:62:da:40:86:36:5f:23:5c:a3:d9:17:
e3:b7:38:00:d8:68:c0:18:58:94:e1:7e:07:81:94:32:fd:ce:
4e:37:2d:77:22:d2:d8:30:b6:35:42:5e:d0:e9:e0:96:17:cf:
16:00:45:a4:eb:9a:8e:52:a4:1c:e3:51:26:2f:43:24:30:d2:
8c:4e:37:59:10:f9:59:1c:ea:be:8f:a4:a7:3c:a3:3d:ef:64:
2e:50:14:87:2e:c7:8a:3a:36:2b:a9:65:1e:26:49:32:5f:03:
3d:24:d9:62:84:9a:63:89:a2:3b:81:ec:dd:00:8e:75:c5:df:
b7:0e:36:a7:25:47:13:18:da:47:3c:4d:b1:85:30:1b:2b:8f:
4d:e0:bf:01:23:b9:d1:bd:20:f5:46:5c:58:90:fe:cb:ba:d2:
bb:24:36:fe:da:ed:66:45:e0:2d:87:ce:cc:56:a6:84:06:ac:
f0:c5:63:be:6a:fd:33:a9:80:78:65:d7:1f:2d:13:18:8b:95:
d3:3f:b2:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlQCtN9UQOdhhfRiKGqizjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOTU1MzNlZjQ3ZmQ5NGI4YzU1NGRmM2QyMjhlZWRjZDRj
YTAzODQwHhcNMjUwOTE2MDEwMTUwWhcNMjUwOTE3MDEwMTUwWjAzMTEwLwYDVQQD
EyhjYjFkMDdiMTBiZWY0MmVmN2VlYmEwZGJkYTBjNTNjMjVhYWJmMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LREqRSNC1cuv5B00PfmyA2eTiIQ
b0vmshRUaK1+3OUzgufHBfqS9lqYxhrCGsCdi2qZjIr9Os2avhb7+q5zsntL3sBR
SsOmcNpPpcfuPi1QEmAsLoejQkEYQ6zRneg7zQMmwksnJgIpHSvlCFKon9WZaQ9c
5zUZSTFN7o0ivcdskwWNqWCfQp8VOQBG3ubkse9WO1cRtaQeKdqysDjlZ8cKo3kc
v20Krqz/abHskDHsDNOUCsohvmZMTKOvRV9oggURWCzDtm9ZeIN4zN9a56VuR5R5
/c+YHAplh5JwdAGwteyuhPWHysk9O1iM3WaT30/EsLb3T/u0K5kju61JawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsdB7EL70Lvfuug29oMU8Jaq/NrMB8GA1UdIwQY
MBaAFO2VUz70f9lLjFVN89Io7tzUygOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUt
MTRkYTc5ZDZjM2FhLzEvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUtMTRkYTc5ZDZjM2Fh
LzEvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5nlnbO3
Jq7pFxca1IdtPZYoviBa6ALo3Gi7RNk1KHt+BbxEHXxq5NtWaoiAmlWreAs7Omu+
KAD1ijmJwGLaQIY2XyNco9kX47c4ANhowBhYlOF+B4GUMv3OTjctdyLS2DC2NUJe
0OnglhfPFgBFpOuajlKkHONRJi9DJDDSjE43WRD5WRzqvo+kpzyjPe9kLlAUhy7H
ijo2K6llHiZJMl8DPSTZYoSaY4miO4Hs3QCOdcXftw42pyVHExjaRzxNsYUwGyuP
TeC/ASO50b0g9UZcWJD+y7rSuyQ2/trtZkXgLYfOzFamhAas8MVjvmr9M6mAeGXX
Hy0TGIuV0z+yWg==
-----END CERTIFICATE-----
Generated at Tue Sep 16 09:00:26 2025 by rpki-client