
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
File: R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft (raw, json)
Hash identifier: fNy/6hY0dGiJvpLE9PWJ8i6/a07uO/A+EiCfQjuajKU=
Subject key identifier: 6F:FD:64:DC:73:E0:2F:F2:CC:33:A5:E0:EE:90:F6:34:27:76:67:21
Authority key identifier: 47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
Certificate issuer: /CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Certificate serial: 01984AAEE0718E40986ECCA7D566CAF58848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: 6CJuWYcvaw-acDsC8fypVGv6nZs.roa (hash: wT9pXkMIK5iq/Fr3VYtO4ReEPTUzPvr9i2oggz8Pizc=)
2: R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl (hash: y+FHU3GXtSguYga5vMY0ujBa1UEKua2mjSd8flEIy+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e0:71:8e:40:98:6e:cc:a7:d5:66:ca:f5:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=6ffd64dc73e02ff2cc33a5e0ee90f63427766721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:be:b1:15:fd:d9:81:f5:53:fe:af:45:3a:
c8:61:39:39:95:8d:96:ae:de:36:4c:6c:69:f2:77:
f9:3e:4e:3e:48:15:69:b6:e8:c9:27:8e:19:84:10:
4a:a4:74:c0:df:2b:f3:09:ec:c8:f2:db:5c:cc:ce:
cf:c3:15:25:0b:c8:66:fd:be:4f:f3:89:3a:c1:7b:
a9:77:14:96:5e:72:4e:b8:68:9f:22:0e:d2:6d:a0:
4b:1a:93:a4:73:30:13:09:64:85:f0:b7:2c:33:6b:
b6:c2:1a:19:b2:ea:2f:97:ff:3e:c5:66:de:d0:37:
7d:99:86:ef:37:49:f6:c9:b6:c9:09:46:07:28:0b:
aa:3f:b3:57:c7:b6:bb:8d:8c:15:80:f9:99:92:d0:
39:91:11:99:8a:bb:c0:f5:4d:54:37:64:d6:64:10:
43:4f:5c:32:2d:15:33:7c:c3:68:76:24:64:e2:e7:
dd:44:b8:c2:eb:f4:9f:44:43:e5:bd:f3:d2:81:1d:
3a:75:ac:d9:f7:5c:2b:d0:a0:dc:7e:10:64:12:05:
87:20:cb:b7:cc:9c:bd:50:5e:28:61:fd:df:71:95:
b8:f7:33:9b:45:de:bf:0a:29:77:f1:e2:e3:8b:9c:
c0:28:2c:4f:37:ae:02:af:c1:b7:d6:ca:38:80:97:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:64:DC:73:E0:2F:F2:CC:33:A5:E0:EE:90:F6:34:27:76:67:21
X509v3 Authority Key Identifier:
keyid:47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6f:cb:3c:e4:42:11:aa:9b:40:40:2f:37:21:58:6b:89:7a:
98:c4:1f:af:df:f8:0e:79:86:2d:63:a6:0f:bc:43:84:76:29:
41:46:61:ae:8f:3a:8b:fa:1f:cc:3e:87:17:b9:5d:07:5d:be:
cb:40:20:5c:d1:a7:42:1b:75:c4:a9:07:9a:43:56:af:fb:53:
60:08:29:96:66:45:9b:43:b6:f3:03:80:02:a5:be:04:50:ac:
ff:da:f1:dd:43:0f:b5:90:31:4d:d1:18:12:be:dc:c8:ae:4f:
d3:c8:d1:ed:4f:df:cf:20:15:ee:4c:cc:74:1e:07:6d:ef:62:
57:fa:f8:75:d0:84:45:6e:8d:a3:b3:25:16:55:26:3b:42:84:
ef:04:85:44:1c:fe:c9:71:82:c8:56:73:f5:2b:d9:2a:6b:a6:
0c:7b:b2:05:1b:f2:7b:d0:f4:e7:b0:8e:70:27:82:56:d7:fd:
23:ab:82:40:ca:e1:5e:d3:a7:8f:b2:50:8d:61:d1:9f:0c:6b:
b8:d0:7c:39:00:37:5e:09:76:05:e9:98:02:bd:f0:bb:2d:81:
5c:f7:a0:5a:b5:cb:94:bd:73:27:00:4e:4f:18:f7:2d:4d:f7:
20:3b:3e:6e:23:cb:0b:dc:c4:30:0b:d3:8e:c0:58:0e:4d:ba:
9e:a8:ff:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKruBxjkCYbsyn1WbK9YhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmJiNzRkNDFiMjk4ZjU5ZWRkNGRhMjNkMThiNmJiNTE0
M2Y2NDQwHhcNMjUwNzI3MDcwMDMxWhcNMjUwNzI4MDcwMDMxWjAzMTEwLwYDVQQD
Eyg2ZmZkNjRkYzczZTAyZmYyY2MzM2E1ZTBlZTkwZjYzNDI3NzY2NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn++sRX92YH1U/6vRTrIYTk5lY2W
rt42TGxp8nf5Pk4+SBVptujJJ44ZhBBKpHTA3yvzCezI8ttczM7PwxUlC8hm/b5P
84k6wXupdxSWXnJOuGifIg7SbaBLGpOkczATCWSF8LcsM2u2whoZsuovl/8+xWbe
0Dd9mYbvN0n2ybbJCUYHKAuqP7NXx7a7jYwVgPmZktA5kRGZirvA9U1UN2TWZBBD
T1wyLRUzfMNodiRk4ufdRLjC6/SfREPlvfPSgR06dazZ91wr0KDcfhBkEgWHIMu3
zJy9UF4oYf3fcZW49zObRd6/Cil38eLji5zAKCxPN64Cr8G31so4gJfCZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/9ZNxz4C/yzDOl4O6Q9jQndmchMB8GA1UdIwQY
MBaAFEe7t01Bspj1nt1Noj0YtrtRQ/ZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjd1M1RVR3ltUFdlM1UyaVBSaTJ1MUZEOWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85NWEwMmMtZGYzYi00MGJhLWJkZTUt
MjYyNDM4ZTg1OWU0LzEvUjd1M1RVR3ltUFdlM1UyaVBSaTJ1MUZEOWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85NWEwMmMtZGYzYi00MGJhLWJkZTUtMjYyNDM4ZTg1OWU0
LzEvUjd1M1RVR3ltUFdlM1UyaVBSaTJ1MUZEOWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW/LPORC
EaqbQEAvNyFYa4l6mMQfr9/4DnmGLWOmD7xDhHYpQUZhro86i/ofzD6HF7ldB12+
y0AgXNGnQht1xKkHmkNWr/tTYAgplmZFm0O28wOAAqW+BFCs/9rx3UMPtZAxTdEY
Er7cyK5P08jR7U/fzyAV7kzMdB4Hbe9iV/r4ddCERW6No7MlFlUmO0KE7wSFRBz+
yXGCyFZz9SvZKmumDHuyBRvye9D057COcCeCVtf9I6uCQMrhXtOnj7JQjWHRnwxr
uNB8OQA3Xgl2BemYAr3wuy2BXPegWrXLlL1zJwBOTxj3LU33IDs+biPLC9zEMAvT
jsBYDk26nqj/yw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:24:21 2025 by rpki-client