Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: L8MrkBk5V7hJbZNHcTHL5fZns+w/M474rBWz759ON4I=
Subject key identifier: C3:21:DB:2F:C0:54:0F:5F:FF:03:A0:5B:CD:D5:0F:FB:D8:07:07:8F
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 01984A0A5EECFF6F48308070040040D36120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 0FB4
Signing time: Sun 27 Jul 2025 04:00:50 +0000
Manifest this update: Sun 27 Jul 2025 04:00:50 +0000
Manifest next update: Mon 28 Jul 2025 04:00:50 +0000
Files and hashes: 1: PQ_yvQsZl8a1BJZelz18O8KYziI.roa (hash: a9+EgNIf1zhqdc2reiY/K2IYhXxlOzKE9JswUeuIGNI=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: vJt4qa6oJfuQ5szVDIY+N9E5uINeEd1IfTK4gmZOeUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5e:ec:ff:6f:48:30:80:70:04:00:40:d3:61:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Jul 27 04:00:50 2025 GMT
Not After : Jul 28 04:00:50 2025 GMT
Subject: CN=c321db2fc0540f5fff03a05bcdd50ffbd807078f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:2a:ac:a8:48:cb:b8:28:f2:a4:f7:8f:8e:
24:4b:2f:be:47:85:26:6d:d0:8d:5b:1d:6c:cb:91:
04:dd:9a:78:a0:ed:6e:97:8d:4e:f5:4d:1b:06:5f:
20:a3:22:d8:e8:1a:5e:ec:5f:16:39:0e:b4:c9:05:
97:f3:9b:a5:4f:ac:4b:ab:a4:8e:3c:24:23:55:4e:
7b:8b:f5:6b:32:50:f2:06:85:a8:59:ca:8f:53:14:
cc:ac:b1:dc:18:99:6f:7b:bf:9a:d9:b0:80:c5:18:
b0:67:2f:f5:ee:f8:de:4c:b2:88:13:0a:fd:6a:80:
51:02:53:2a:6d:15:0f:09:5e:e5:38:7e:4c:d5:2b:
af:13:72:7a:7a:b6:15:ba:95:1e:b3:c0:b5:d1:d0:
69:20:35:19:db:50:c2:3c:cb:c2:e6:7e:cb:cd:2a:
56:e8:e9:80:63:ce:73:3e:75:d5:6b:d5:40:4a:ff:
89:a6:17:a8:c3:8c:85:82:24:7a:d1:f2:2d:5f:8f:
bd:18:0e:69:5d:99:4a:fc:c4:a5:84:10:0b:9b:b2:
56:89:75:4b:e4:76:cb:3f:be:e2:c5:5d:0c:b1:6c:
95:62:2e:58:94:6f:05:0c:17:56:4e:19:42:af:a1:
11:c8:e7:2e:7c:2d:8b:f3:44:ff:92:19:42:96:55:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:DB:2F:C0:54:0F:5F:FF:03:A0:5B:CD:D5:0F:FB:D8:07:07:8F
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:81:ba:88:ac:9f:c7:d4:4b:6b:a3:ad:36:fd:8e:6a:f0:
77:be:85:72:53:7b:0e:b6:28:92:3c:7b:02:40:c3:40:e8:ed:
30:8a:8b:c9:b0:01:71:ec:8c:dd:35:d7:d4:1c:a2:02:f7:e0:
4d:8a:a0:f4:9f:75:89:b5:4f:98:9a:47:a3:97:d0:d5:de:34:
f2:a3:39:36:cd:06:e5:58:47:21:85:74:2a:c6:6d:9c:d3:1d:
47:da:40:89:7e:aa:ca:c5:12:3b:fc:e0:1e:cb:3a:73:b6:64:
cd:62:2b:66:75:55:15:0e:2e:6b:d8:52:78:be:5f:65:b6:7c:
3f:95:fa:ed:ba:5d:fc:02:61:87:d2:2e:b1:f8:59:9d:fd:58:
42:b7:2f:ce:cd:1d:cc:1b:56:7c:48:34:9d:0d:ed:97:62:a2:
7d:8f:55:58:2f:49:71:6e:f7:77:50:0e:83:04:2c:08:c6:f1:
7b:a4:0b:02:c3:90:1c:62:22:51:2f:bf:ad:bb:2e:c4:8b:4f:
f8:ff:33:6a:28:93:ec:0d:46:69:4c:13:c4:5e:da:9e:ed:49:
25:0e:41:d2:19:ff:c7:d8:78:c2:cc:b9:de:b1:39:69:8c:6d:
b0:61:45:e1:24:4a:6e:64:11:0f:13:a7:18:c4:d2:a2:30:37:
41:a0:af:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCl7s/29IMIBwBABA02EgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjFlYWJiZTVlZTBjMDQ5NjgwZTJhYmM5NTUzNDM5ZWM2
NDNjMGIwHhcNMjUwNzI3MDQwMDUwWhcNMjUwNzI4MDQwMDUwWjAzMTEwLwYDVQQD
EyhjMzIxZGIyZmMwNTQwZjVmZmYwM2EwNWJjZGQ1MGZmYmQ4MDcwNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB8qrKhIy7go8qT3j44kSy++R4Um
bdCNWx1sy5EE3Zp4oO1ul41O9U0bBl8goyLY6Bpe7F8WOQ60yQWX85ulT6xLq6SO
PCQjVU57i/VrMlDyBoWoWcqPUxTMrLHcGJlve7+a2bCAxRiwZy/17vjeTLKIEwr9
aoBRAlMqbRUPCV7lOH5M1SuvE3J6erYVupUes8C10dBpIDUZ21DCPMvC5n7LzSpW
6OmAY85zPnXVa9VASv+Jpheow4yFgiR60fItX4+9GA5pXZlK/MSlhBALm7JWiXVL
5HbLP77ixV0MsWyVYi5YlG8FDBdWThlCr6ERyOcufC2L80T/khlCllXliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMh2y/AVA9f/wOgW83VD/vYBwePMB8GA1UdIwQY
MBaAFJOx6rvl7gwEloDiq8lVNDnsZDwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYt
OWQyOGJmNWVmM2MxLzEvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYtOWQyOGJmNWVmM2Mx
LzEvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJGBuois
n8fUS2ujrTb9jmrwd76FclN7DrYokjx7AkDDQOjtMIqLybABceyM3TXX1ByiAvfg
TYqg9J91ibVPmJpHo5fQ1d408qM5Ns0G5VhHIYV0KsZtnNMdR9pAiX6qysUSO/zg
Hss6c7ZkzWIrZnVVFQ4ua9hSeL5fZbZ8P5X67bpd/AJhh9IusfhZnf1YQrcvzs0d
zBtWfEg0nQ3tl2KifY9VWC9JcW73d1AOgwQsCMbxe6QLAsOQHGIiUS+/rbsuxItP
+P8zaiiT7A1GaUwTxF7anu1JJQ5B0hn/x9h4wsy53rE5aYxtsGFF4SRKbmQRDxOn
GMTSojA3QaCv5Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:39 2025 by rpki-client