Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier: L8jSskp0dP7IqdZFbIrzXdF9u8pB/S059el5rIpHdu4=
Subject key identifier: FB:ED:81:01:8F:50:C7:A1:2E:68:59:4F:D1:E1:65:B1:56:E6:D6:AB
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial: 019916F6385B8FE1BFE318176414C4401698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number: 03AE
Signing time: Thu 04 Sep 2025 23:00:58 +0000
Manifest this update: Thu 04 Sep 2025 23:00:58 +0000
Manifest next update: Fri 05 Sep 2025 23:00:58 +0000
Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: GT3uecVnutL+2OuwO9Bk83NckJmi+a0anz1jcfRP5V4=)
2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:38:5b:8f:e1:bf:e3:18:17:64:14:c4:40:16:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Validity
Not Before: Sep 4 23:00:58 2025 GMT
Not After : Sep 5 23:00:58 2025 GMT
Subject: CN=fbed81018f50c7a12e68594fd1e165b156e6d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:66:26:bc:c6:1b:89:88:69:95:a0:2e:ab:
b2:91:d9:84:08:bf:39:8a:86:0a:01:0d:f4:d0:f3:
e3:c3:43:ac:9c:96:3a:16:39:fa:11:ef:55:62:83:
f0:e5:3d:a4:e2:d3:0c:72:43:04:c7:e7:10:f4:a7:
3e:09:a4:3e:80:18:8d:7c:e5:b9:1b:4f:a7:89:f4:
7c:c8:fa:1e:77:bd:bf:43:36:ad:28:d2:3a:7d:6c:
d7:b6:38:0c:1e:4d:6d:3b:2e:c8:8a:ea:25:b4:0b:
b1:d4:41:4e:57:c0:a9:12:b4:1a:6b:2b:50:6d:43:
8b:be:58:22:20:c1:76:0a:fd:41:29:09:5f:de:45:
b0:c7:e5:8f:38:6d:9c:12:39:23:57:2c:1d:42:e4:
b1:9d:99:d6:99:e7:5b:a6:e1:3f:35:78:54:1c:75:
46:31:76:cf:c1:5c:2b:53:a2:f3:37:93:01:8e:55:
1e:0f:b1:6f:bc:41:66:ab:ac:d9:91:93:9f:4d:59:
0f:15:61:02:94:6f:0d:77:5a:a5:d1:cb:f5:02:aa:
69:ca:6a:41:43:4d:80:45:5e:ca:b5:e0:39:88:34:
1a:e9:bc:8f:2c:13:81:fb:ea:ce:4e:2b:55:e7:81:
22:7d:ac:01:3d:e3:56:a4:f1:45:74:18:3f:04:93:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:ED:81:01:8F:50:C7:A1:2E:68:59:4F:D1:E1:65:B1:56:E6:D6:AB
X509v3 Authority Key Identifier:
keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:12:4c:4c:6f:56:68:87:76:83:0c:d0:19:6c:f2:25:f4:6d:
70:2f:68:4a:61:f4:12:2c:b3:c1:b9:f6:83:c7:12:12:ab:21:
74:18:df:ac:44:af:49:20:a9:77:9e:4f:e4:26:27:cc:2d:2d:
ac:76:3a:83:68:d0:f3:29:73:9b:2e:a1:3c:7c:54:93:b2:6e:
60:28:76:c9:3c:5a:75:00:23:2b:be:f6:05:73:fa:16:59:ff:
4e:a5:87:68:05:9d:d6:ec:50:f9:59:ab:01:02:ac:47:71:23:
d1:2b:b3:90:fe:64:7f:e0:e5:0c:ae:bd:66:4f:5f:c9:61:89:
8f:01:52:7d:cb:0f:84:37:38:1f:21:ce:fc:2b:73:68:ff:a5:
d4:8d:09:3d:f0:12:93:b4:53:57:a6:18:07:ee:c0:65:ba:36:
bf:80:51:43:8f:eb:1d:17:0d:56:f6:83:f4:3e:ac:43:3c:d0:
3c:1f:12:1b:0d:c8:ee:4c:17:d3:0c:45:c0:93:26:fa:9c:64:
87:e8:0c:5a:94:e2:b1:fe:4a:1f:bd:08:f1:cc:87:71:5a:20:
86:e6:e3:e7:e9:8c:84:02:b8:4c:fe:13:fe:2e:a5:7d:21:b1:
df:70:76:3e:c4:f4:86:6d:a3:9d:61:53:86:5f:93:50:0d:21:
51:59:fd:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkW9jhbj+G/4xgXZBTEQBaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjdiYjc1ODhiODJkNzBkOGNiNzNkNGU0NTE3N2Y2N2Vj
ZWYyMTMwHhcNMjUwOTA0MjMwMDU4WhcNMjUwOTA1MjMwMDU4WjAzMTEwLwYDVQQD
EyhmYmVkODEwMThmNTBjN2ExMmU2ODU5NGZkMWUxNjViMTU2ZTZkNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5FmJrzGG4mIaZWgLquykdmECL85
ioYKAQ300PPjw0OsnJY6Fjn6Ee9VYoPw5T2k4tMMckMEx+cQ9Kc+CaQ+gBiNfOW5
G0+nifR8yPoed72/QzatKNI6fWzXtjgMHk1tOy7IiuoltAux1EFOV8CpErQaaytQ
bUOLvlgiIMF2Cv1BKQlf3kWwx+WPOG2cEjkjVywdQuSxnZnWmedbpuE/NXhUHHVG
MXbPwVwrU6LzN5MBjlUeD7FvvEFmq6zZkZOfTVkPFWEClG8Nd1ql0cv1AqppympB
Q02ARV7KteA5iDQa6byPLBOB++rOTitV54EifawBPeNWpPFFdBg/BJMYSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvtgQGPUMehLmhZT9HhZbFW5tarMB8GA1UdIwQY
MBaAFO1nu3WIuC1w2Mtz1ORRd/Z+zvITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5Yjkt
MWI2MGRmMjUyY2E3LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5YjktMWI2MGRmMjUyY2E3
LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0RJMTG9W
aId2gwzQGWzyJfRtcC9oSmH0Eiyzwbn2g8cSEqshdBjfrESvSSCpd55P5CYnzC0t
rHY6g2jQ8ylzmy6hPHxUk7JuYCh2yTxadQAjK772BXP6Fln/TqWHaAWd1uxQ+Vmr
AQKsR3Ej0SuzkP5kf+DlDK69Zk9fyWGJjwFSfcsPhDc4HyHO/CtzaP+l1I0JPfAS
k7RTV6YYB+7AZbo2v4BRQ4/rHRcNVvaD9D6sQzzQPB8SGw3I7kwX0wxFwJMm+pxk
h+gMWpTisf5KH70I8cyHcVoghubj5+mMhAK4TP4T/i6lfSGx33B2PsT0hm2jnWFT
hl+TUA0hUVn96Q==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:25 2025 by rpki-client