Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: val84OCQLol+HnJnxZL09anIyAoLEgWbKIcecgE6pok=
Subject key identifier: 74:26:E3:E0:AB:BB:34:76:7A:29:DF:FC:CF:21:2C:8E:4C:DB:10:9A
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 01984A0A43A62099F56DE05429DEBB0BFE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 1382
Signing time: Sun 27 Jul 2025 04:00:43 +0000
Manifest this update: Sun 27 Jul 2025 04:00:43 +0000
Manifest next update: Mon 28 Jul 2025 04:00:43 +0000
Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: 4vqGuZkkDNpaZAoTYnJV233rmXVOWepPuMTOzl57IlQ=)
2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:43:a6:20:99:f5:6d:e0:54:29:de:bb:0b:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jul 27 04:00:43 2025 GMT
Not After : Jul 28 04:00:43 2025 GMT
Subject: CN=7426e3e0abbb34767a29dffccf212c8e4cdb109a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4b:a3:7a:66:8e:52:d0:f1:ee:93:d1:d1:05:
5b:91:6c:b7:06:e9:d6:e4:27:dd:60:b6:c9:2e:6e:
e4:31:8f:9d:48:b7:41:f6:89:fe:f9:c2:c1:f2:ec:
16:94:3a:1f:55:ff:c7:2b:2f:f1:a0:15:a8:e8:2c:
15:67:f5:2d:93:d5:60:bf:07:f6:91:39:4d:58:12:
bc:82:39:14:eb:a9:89:18:de:5e:e7:7a:57:95:34:
d3:d1:73:8f:b5:63:26:d2:44:3e:aa:b5:48:ac:8e:
f0:a0:d1:46:59:a1:7f:db:43:e5:f8:f4:0c:ce:5e:
be:6e:a2:30:9a:f0:48:fd:1f:43:d4:42:86:71:2e:
a5:d5:fb:db:18:6b:ef:2d:02:d1:5b:50:59:56:67:
8e:10:63:db:77:01:eb:ef:83:3d:19:89:81:3e:63:
b3:01:07:33:a5:e7:40:e8:5d:f0:55:67:36:5d:7d:
26:95:14:34:70:cb:30:78:63:f8:5d:1e:c9:a9:fc:
8a:bd:fa:02:e5:61:b2:7f:34:9c:aa:df:0d:fa:d5:
b2:81:1a:76:4d:3b:9f:9b:7b:c7:3e:de:81:90:ed:
6a:73:f8:0c:f1:29:27:61:62:e3:a1:44:e7:03:30:
be:02:0e:0c:4f:16:d3:71:dd:a1:da:7c:08:f6:6a:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:E3:E0:AB:BB:34:76:7A:29:DF:FC:CF:21:2C:8E:4C:DB:10:9A
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5d:e5:b0:bb:d2:f7:7b:40:99:7b:1d:92:a7:dc:6b:d9:74:
76:92:da:af:f1:96:9e:f9:d5:ca:f5:4e:5a:3f:52:02:ec:22:
92:5e:28:c9:4a:5b:ab:05:03:0f:9f:b6:a2:a8:d6:2f:5f:4d:
c4:bc:38:4b:fc:18:c8:01:c1:94:de:c5:b9:39:64:a5:f8:89:
0d:83:14:bb:0e:11:dc:e5:6a:00:8f:5e:a0:72:25:e3:68:3f:
96:d3:2b:aa:30:47:80:1e:59:8e:b3:2f:ba:62:9c:e2:7f:43:
e5:f6:3c:6c:27:f8:ef:39:35:a3:b7:b7:82:9b:74:76:82:8e:
0c:cd:4d:f6:e9:0a:1f:9b:9a:69:3e:fd:ff:de:09:5c:18:6d:
2c:ac:cd:c9:be:2d:c3:70:24:57:1b:0c:5f:83:be:92:29:ad:
ce:b1:4b:d5:2f:4b:e1:8d:7b:31:f0:6d:26:45:97:4f:49:33:
fb:92:fe:3b:6a:6c:9a:3d:cd:68:2d:a2:12:d0:12:ce:ff:39:
a3:59:06:08:f8:aa:e1:3a:f5:81:3d:39:0e:51:3b:ea:57:25:
48:b8:7e:4f:44:65:a3:ec:eb:a6:13:92:12:14:5c:57:4c:27:
a9:bd:53:8a:ba:e3:e9:bd:5f:78:a1:fd:c0:40:9a:94:f4:3e:
f0:8e:2a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCkOmIJn1beBUKd67C/5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh
YTE0ODcwHhcNMjUwNzI3MDQwMDQzWhcNMjUwNzI4MDQwMDQzWjAzMTEwLwYDVQQD
Eyg3NDI2ZTNlMGFiYmIzNDc2N2EyOWRmZmNjZjIxMmM4ZTRjZGIxMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70ujemaOUtDx7pPR0QVbkWy3BunW
5CfdYLbJLm7kMY+dSLdB9on++cLB8uwWlDofVf/HKy/xoBWo6CwVZ/Utk9Vgvwf2
kTlNWBK8gjkU66mJGN5e53pXlTTT0XOPtWMm0kQ+qrVIrI7woNFGWaF/20Pl+PQM
zl6+bqIwmvBI/R9D1EKGcS6l1fvbGGvvLQLRW1BZVmeOEGPbdwHr74M9GYmBPmOz
AQczpedA6F3wVWc2XX0mlRQ0cMsweGP4XR7JqfyKvfoC5WGyfzScqt8N+tWygRp2
TTufm3vHPt6BkO1qc/gM8SknYWLjoUTnAzC+Ag4MTxbTcd2h2nwI9mpNXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQm4+CruzR2einf/M8hLI5M2xCaMB8GA1UdIwQY
MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt
YzgxNWU1MGVjNWU3LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3
LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF3lsLvS
93tAmXsdkqfca9l0dpLar/GWnvnVyvVOWj9SAuwikl4oyUpbqwUDD5+2oqjWL19N
xLw4S/wYyAHBlN7FuTlkpfiJDYMUuw4R3OVqAI9eoHIl42g/ltMrqjBHgB5ZjrMv
umKc4n9D5fY8bCf47zk1o7e3gpt0doKODM1N9ukKH5uaaT79/94JXBhtLKzNyb4t
w3AkVxsMX4O+kimtzrFL1S9L4Y17MfBtJkWXT0kz+5L+O2psmj3NaC2iEtASzv85
o1kGCPiq4Tr1gT05DlE76lclSLh+T0Rlo+zrphOSEhRcV0wnqb1Tirrj6b1feKH9
wECalPQ+8I4qLw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:25 2025 by rpki-client