Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: 91gsrYDZXlVFZB9LY2MLIY9hjx1ICc7mcp9ZbBZfpig=
Subject key identifier: DD:7D:99:D3:C8:6D:4F:E3:FD:62:A1:90:C5:5B:AB:48:8D:54:24:3B
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 0198530D8A65B3C16F1FBC51B7060FE11E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0A7D
Signing time: Mon 28 Jul 2025 22:00:52 +0000
Manifest this update: Mon 28 Jul 2025 22:00:52 +0000
Manifest next update: Tue 29 Jul 2025 22:00:52 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: yXBM2i5chKzg5fkn8E78OuFBAr1J855K++BHcIFL+nE=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:8a:65:b3:c1:6f:1f:bc:51:b7:06:0f:e1:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Jul 28 22:00:52 2025 GMT
Not After : Jul 29 22:00:52 2025 GMT
Subject: CN=dd7d99d3c86d4fe3fd62a190c55bab488d54243b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:67:b4:f2:ea:44:35:f7:a6:88:c2:69:61:
14:f7:2a:d7:6d:1c:27:47:0b:98:96:9b:42:cf:5a:
86:a2:e0:31:51:d7:52:33:3b:c2:56:db:e7:1d:89:
be:a3:64:a5:ac:b4:87:8c:12:62:69:00:2b:08:d8:
99:b2:08:4a:14:b2:f0:54:84:98:85:d9:d4:ee:a0:
4c:19:e1:95:d9:bb:bb:4e:7b:de:91:2d:97:4f:1d:
86:35:80:b6:e1:d7:14:b8:e0:fb:39:9f:9a:c2:9f:
09:df:e8:96:4e:7c:93:61:03:c5:fd:19:4a:f3:f8:
97:a8:6b:32:3b:2d:e5:6f:89:0c:04:16:65:85:6e:
cd:fe:cc:bf:f9:df:56:0d:84:55:be:ae:a4:5e:00:
c5:5f:95:45:b1:9f:13:94:ed:5f:4a:31:a8:de:72:
85:ab:6b:bf:2e:a0:d3:91:e7:4d:84:d3:6b:dd:e2:
67:f1:d0:42:26:1b:85:14:7c:67:fc:35:06:03:d3:
a3:ed:d8:f4:18:6c:55:d8:2e:5c:3e:5c:fe:18:c2:
45:c8:cd:b4:49:5a:43:dd:7b:ea:6e:20:d6:10:24:
11:1e:03:e8:bd:03:9a:59:e6:1f:32:2c:83:2e:15:
b2:83:b4:e7:0c:f7:32:16:a6:3c:a9:af:97:a2:b3:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7D:99:D3:C8:6D:4F:E3:FD:62:A1:90:C5:5B:AB:48:8D:54:24:3B
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0b:b5:fe:26:ce:95:d7:09:3d:45:96:57:c0:f4:c8:a6:cf:
ce:66:58:aa:1a:c5:94:41:0b:d4:3e:6a:56:21:f8:d2:3e:28:
2f:81:97:b6:a4:76:52:ac:ee:ab:34:3f:af:bd:be:b7:c5:e0:
f1:1f:97:44:74:75:25:1c:90:56:31:42:ee:17:c5:1b:47:c7:
3c:cd:f7:75:dd:f5:4b:77:d7:12:ee:a6:ff:df:af:59:d2:2f:
64:62:44:b3:42:18:01:4e:8f:78:5d:97:d5:e7:fd:58:33:d0:
73:6a:06:78:8c:21:b3:3a:74:5d:02:84:56:10:71:73:eb:ad:
e9:6b:33:d3:e7:62:53:b8:ae:ff:f5:56:0f:f8:0d:d1:1e:63:
0d:15:5c:c8:1d:c3:54:34:29:b1:cc:c4:e6:40:31:e9:c0:56:
97:da:e9:3b:ff:ea:04:7a:d1:cd:b2:39:94:eb:2e:04:03:d8:
60:c3:41:ee:59:59:b4:33:d4:d2:ea:34:71:2d:c0:9a:f2:33:
d9:fc:55:b2:ac:d9:ee:ab:d2:28:8a:56:db:09:ca:ac:10:b9:
90:7f:03:d0:56:1d:a1:af:91:23:ad:2b:03:4c:e7:6f:09:24:
86:99:ae:47:e1:95:32:19:b9:64:6d:9c:eb:84:1c:1e:8f:84:
9c:dd:30:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDYpls8FvH7xRtwYP4R5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODViYjhhNTA0NDNlNTA0YzQ4NTNjY2UwMjVlZjU4MzQx
YzFkNTAwHhcNMjUwNzI4MjIwMDUyWhcNMjUwNzI5MjIwMDUyWjAzMTEwLwYDVQQD
EyhkZDdkOTlkM2M4NmQ0ZmUzZmQ2MmExOTBjNTViYWI0ODhkNTQyNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkhntPLqRDX3pojCaWEU9yrXbRwn
RwuYlptCz1qGouAxUddSMzvCVtvnHYm+o2SlrLSHjBJiaQArCNiZsghKFLLwVISY
hdnU7qBMGeGV2bu7TnvekS2XTx2GNYC24dcUuOD7OZ+awp8J3+iWTnyTYQPF/RlK
8/iXqGsyOy3lb4kMBBZlhW7N/sy/+d9WDYRVvq6kXgDFX5VFsZ8TlO1fSjGo3nKF
q2u/LqDTkedNhNNr3eJn8dBCJhuFFHxn/DUGA9Oj7dj0GGxV2C5cPlz+GMJFyM20
SVpD3XvqbiDWECQRHgPovQOaWeYfMiyDLhWyg7TnDPcyFqY8qa+XorOl3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN19mdPIbU/j/WKhkMVbq0iNVCQ7MB8GA1UdIwQY
MBaAFK+Fu4pQRD5QTEhTzOAl71g0HB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgt
ZmRlYmJjOTI3ZDQwLzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgtZmRlYmJjOTI3ZDQw
LzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwu1/ibO
ldcJPUWWV8D0yKbPzmZYqhrFlEEL1D5qViH40j4oL4GXtqR2UqzuqzQ/r72+t8Xg
8R+XRHR1JRyQVjFC7hfFG0fHPM33dd31S3fXEu6m/9+vWdIvZGJEs0IYAU6PeF2X
1ef9WDPQc2oGeIwhszp0XQKEVhBxc+ut6Wsz0+diU7iu//VWD/gN0R5jDRVcyB3D
VDQpsczE5kAx6cBWl9rpO//qBHrRzbI5lOsuBAPYYMNB7llZtDPU0uo0cS3AmvIz
2fxVsqzZ7qvSKIpW2wnKrBC5kH8D0FYdoa+RI60rA0znbwkkhpmuR+GVMhm5ZG2c
64QcHo+EnN0wfg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:02 2025 by rpki-client