Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: qRBJjkrxr88PjN8pNHBlqdOZ4wY7Z4mi0AM6JB+xegA=
Subject key identifier: 04:9A:8A:EF:B8:24:3C:B3:9C:CC:81:15:32:B0:7D:90:8B:00:D4:B3
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 0198451AD266937544BAC64A1E635C93115D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0DCC
Signing time: Sat 26 Jul 2025 05:00:42 +0000
Manifest this update: Sat 26 Jul 2025 05:00:42 +0000
Manifest next update: Sun 27 Jul 2025 05:00:42 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: xXzuzHpUaEkF5Iwkku1FHyHwsASXG3EKBj8A3ju1seo=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:d2:66:93:75:44:ba:c6:4a:1e:63:5c:93:11:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jul 26 05:00:42 2025 GMT
Not After : Jul 27 05:00:42 2025 GMT
Subject: CN=049a8aefb8243cb39ccc811532b07d908b00d4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:38:24:23:33:55:95:f4:89:42:6f:e0:e6:
e6:cf:0a:a3:8c:a2:44:3b:63:4c:7d:90:d0:9d:8e:
77:22:a3:e3:a2:f0:77:28:d7:0e:b6:af:00:98:68:
20:25:e4:a6:e9:46:f4:e6:bc:38:ca:ad:dc:76:a0:
fb:d1:aa:be:44:93:8c:e0:0d:2f:c1:4f:2a:c5:20:
87:ef:9d:c1:01:70:50:3d:16:cd:bb:36:06:58:e3:
f0:c9:52:3a:ed:9b:39:52:99:b5:1a:bb:d3:fa:41:
27:b6:48:d5:71:bf:c3:bf:3b:ff:4d:72:6c:d2:a3:
72:97:a0:4d:24:9d:0b:93:2e:f2:9e:f5:bb:33:e2:
33:07:67:3c:8b:12:37:62:23:76:83:53:e6:f5:70:
75:c3:b0:c9:db:4c:09:b5:26:48:46:5e:7a:3b:31:
82:58:09:ba:44:7a:46:cd:df:94:e1:f3:21:58:a5:
d1:8b:ad:68:43:0f:d1:57:fb:eb:b3:15:e5:ac:2e:
1a:48:7c:19:9f:4b:af:2d:fd:9c:a4:9d:16:5e:c0:
c2:d7:d3:ff:18:fb:da:27:ec:2b:ea:27:b3:12:bc:
38:64:3b:c3:0b:8f:f9:ce:31:c5:00:7d:ed:76:e2:
e6:ad:56:fb:6c:65:54:22:cd:ae:80:fc:93:0f:4f:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9A:8A:EF:B8:24:3C:B3:9C:CC:81:15:32:B0:7D:90:8B:00:D4:B3
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d2:bb:20:5e:2e:28:35:cd:a2:22:d2:1d:02:06:93:e4:86:
00:a3:7a:ff:cf:b4:7b:f5:50:93:6f:70:1e:db:9c:cc:b2:35:
70:a0:b6:55:54:f4:d3:01:f9:c3:7a:1e:09:1a:57:36:f6:05:
5d:fc:19:4e:12:dd:a6:0e:38:45:fb:9c:11:a6:cc:54:42:eb:
4b:c7:13:93:76:1d:11:41:12:ab:dc:8c:28:74:25:d6:ca:96:
37:70:39:9e:67:ec:e5:b9:a5:a8:a3:98:0f:eb:b3:f8:c3:6f:
33:0c:83:86:24:9d:c0:e4:38:25:ca:98:ae:a7:a1:15:07:83:
ca:86:13:78:4d:fa:06:27:94:53:02:4e:78:03:f0:fa:fb:90:
97:3e:d2:37:b3:58:39:d5:38:eb:93:0e:2e:a2:40:b6:5f:2b:
29:59:85:a9:b5:a4:15:89:ec:e8:8a:8c:0f:ba:bb:ba:2c:ca:
93:24:e5:e4:0e:b6:3e:d5:fd:58:4e:39:ca:b5:43:fb:b6:e3:
3c:54:f2:fa:2c:c6:39:4b:f2:af:73:ad:53:92:3a:1b:8c:43:
8c:8d:4e:b9:b7:5e:c9:f4:3e:40:ed:34:40:3a:20:f1:2f:fa:
22:ea:39:bc:99:e5:d8:4f:c8:ac:48:f3:20:3e:4c:47:d0:76:
36:7e:b8:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGtJmk3VEusZKHmNckxFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4
YzEzNGYwHhcNMjUwNzI2MDUwMDQyWhcNMjUwNzI3MDUwMDQyWjAzMTEwLwYDVQQD
EygwNDlhOGFlZmI4MjQzY2IzOWNjYzgxMTUzMmIwN2Q5MDhiMDBkNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXU4JCMzVZX0iUJv4ObmzwqjjKJE
O2NMfZDQnY53IqPjovB3KNcOtq8AmGggJeSm6Ub05rw4yq3cdqD70aq+RJOM4A0v
wU8qxSCH753BAXBQPRbNuzYGWOPwyVI67Zs5Upm1GrvT+kEntkjVcb/Dvzv/TXJs
0qNyl6BNJJ0Lky7ynvW7M+IzB2c8ixI3YiN2g1Pm9XB1w7DJ20wJtSZIRl56OzGC
WAm6RHpGzd+U4fMhWKXRi61oQw/RV/vrsxXlrC4aSHwZn0uvLf2cpJ0WXsDC19P/
GPvaJ+wr6iezErw4ZDvDC4/5zjHFAH3tduLmrVb7bGVUIs2ugPyTD0/kqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASaiu+4JDyznMyBFTKwfZCLANSzMB8GA1UdIwQY
MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt
MzU0MmY5OWJlNjNiLzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi
LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdK7IF4u
KDXNoiLSHQIGk+SGAKN6/8+0e/VQk29wHtuczLI1cKC2VVT00wH5w3oeCRpXNvYF
XfwZThLdpg44RfucEabMVELrS8cTk3YdEUESq9yMKHQl1sqWN3A5nmfs5bmlqKOY
D+uz+MNvMwyDhiSdwOQ4JcqYrqehFQeDyoYTeE36BieUUwJOeAPw+vuQlz7SN7NY
OdU465MOLqJAtl8rKVmFqbWkFYns6IqMD7q7uizKkyTl5A62PtX9WE45yrVD+7bj
PFTy+izGOUvyr3OtU5I6G4xDjI1OubdeyfQ+QO00QDog8S/6Iuo5vJnl2E/IrEjz
ID5MR9B2Nn64hQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:42:28 2025 by rpki-client