Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: +B9HpIapiGspaObzLmjei7PS1J1YC0NPWJhWGHznyds=
Subject key identifier: 30:A0:80:5A:A9:07:13:20:FD:26:94:CE:35:9C:E0:5B:9E:F8:6E:24
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019922C3AC52DA1D560985D59EE187C6350F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 06:01:12 +0000
Manifest this update: Sun 07 Sep 2025 06:01:12 +0000
Manifest next update: Mon 08 Sep 2025 06:01:12 +0000
Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: KRnYEAGivWio7ER+IOgDG8TXZC8M6scX7YhEwSpjojo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:ac:52:da:1d:56:09:85:d5:9e:e1:87:c6:35:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Sep 7 06:01:12 2025 GMT
Not After : Sep 8 06:01:12 2025 GMT
Subject: CN=30a0805aa9071320fd2694ce359ce05b9ef86e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:28:c4:82:b8:c0:8f:65:13:a1:d4:73:8b:
7d:f6:a6:e5:9f:37:9f:29:59:c4:1a:14:61:02:5c:
fd:f6:82:6f:4e:e4:bf:ae:87:75:1a:95:3e:75:ff:
45:1f:8a:28:a3:30:f4:06:85:f6:f1:c2:db:1c:8b:
89:b4:a8:4b:42:04:72:b0:20:b9:54:d1:a9:6a:26:
31:fb:ad:5e:1a:a1:be:5a:50:29:06:0f:2a:03:4d:
d9:84:fe:ca:b7:54:51:94:83:0e:17:53:13:55:1d:
71:2e:4a:1b:2d:aa:f6:96:ab:58:43:79:ea:6c:22:
95:44:76:2f:21:ea:f6:b9:a3:de:e8:ed:67:26:50:
4a:79:be:13:64:da:3d:13:5a:f0:02:21:49:fe:a8:
e7:e2:94:b4:fa:b1:02:b3:5b:4b:32:fc:84:ea:55:
45:c6:7d:9f:02:57:ca:b7:71:4b:c2:7a:1f:a1:45:
e1:f9:8a:78:60:3c:f0:38:b3:9b:35:c5:01:1d:da:
3a:44:f4:c9:60:c5:43:3a:91:00:1f:d3:50:c5:6b:
d8:3a:4d:e7:22:56:e6:84:aa:a6:3e:0f:97:65:0c:
43:f5:c2:00:79:8b:c3:14:20:ed:80:1e:16:59:83:
e6:c8:0e:ab:79:f9:f1:37:3e:61:10:69:0d:53:25:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A0:80:5A:A9:07:13:20:FD:26:94:CE:35:9C:E0:5B:9E:F8:6E:24
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:42:dd:99:35:24:3a:96:89:58:f8:3f:5b:7c:ec:69:53:1d:
1e:c1:7b:d5:c5:36:bb:bf:13:f4:8a:1c:5e:ab:ae:96:22:ef:
85:37:d1:40:7b:15:7f:8a:ae:af:40:fa:9a:7c:9b:fe:46:74:
82:a2:ea:d5:75:43:7a:f8:ed:01:1b:fc:5c:ba:5d:69:75:1e:
78:c3:d6:fc:32:c8:a8:51:e3:19:c9:31:21:2b:2a:cb:7c:1e:
b3:05:dd:d4:e5:57:9a:2a:2f:aa:2d:eb:ec:df:43:1f:af:62:
b7:3c:2b:77:2c:45:86:0b:21:ab:1b:35:58:97:39:56:60:52:
ba:78:8d:93:b9:a9:eb:e6:7b:45:11:4b:da:2c:d8:c1:9f:ac:
37:50:f6:01:af:b0:46:4f:34:36:9d:ab:62:e6:91:ef:2b:e2:
48:0b:97:8a:73:8d:9f:1a:1c:f6:a5:14:f6:ea:31:78:8f:c3:
3c:f6:bd:ec:e8:b4:e1:f3:39:8b:af:de:0d:fe:86:4b:6f:e8:
a2:36:e1:07:77:09:66:db:16:ca:6e:e4:4f:5b:26:c3:af:97:
b2:bb:49:dd:d7:0e:ea:1f:0d:f5:f0:41:eb:98:72:a5:2d:8a:
2a:40:a7:33:7a:02:77:ed:13:22:71:c4:90:be:73:a6:63:8b:
1e:14:bb:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw6xS2h1WCYXVnuGHxjUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjkxMjViOGExMGQzMjIzNDg2ODFhMmQyYWM3ZDY3ZDJh
ZDI1MzUwHhcNMjUwOTA3MDYwMTEyWhcNMjUwOTA4MDYwMTEyWjAzMTEwLwYDVQQD
EygzMGEwODA1YWE5MDcxMzIwZmQyNjk0Y2UzNTljZTA1YjllZjg2ZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6goxIK4wI9lE6HUc4t99qblnzef
KVnEGhRhAlz99oJvTuS/rod1GpU+df9FH4ooozD0BoX28cLbHIuJtKhLQgRysCC5
VNGpaiYx+61eGqG+WlApBg8qA03ZhP7Kt1RRlIMOF1MTVR1xLkobLar2lqtYQ3nq
bCKVRHYvIer2uaPe6O1nJlBKeb4TZNo9E1rwAiFJ/qjn4pS0+rECs1tLMvyE6lVF
xn2fAlfKt3FLwnofoUXh+Yp4YDzwOLObNcUBHdo6RPTJYMVDOpEAH9NQxWvYOk3n
IlbmhKqmPg+XZQxD9cIAeYvDFCDtgB4WWYPmyA6refnxNz5hEGkNUyV7YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCggFqpBxMg/SaUzjWc4Fue+G4kMB8GA1UdIwQY
MBaAFGu5EluKENMiNIaBotKsfWfSrSU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUt
ODNiYzQxM2EwNDhkLzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUtODNiYzQxM2EwNDhk
LzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArULdmTUk
OpaJWPg/W3zsaVMdHsF71cU2u78T9IocXquuliLvhTfRQHsVf4qur0D6mnyb/kZ0
gqLq1XVDevjtARv8XLpdaXUeeMPW/DLIqFHjGckxISsqy3weswXd1OVXmiovqi3r
7N9DH69itzwrdyxFhgshqxs1WJc5VmBSuniNk7mp6+Z7RRFL2izYwZ+sN1D2Aa+w
Rk80Np2rYuaR7yviSAuXinONnxoc9qUU9uoxeI/DPPa97Oi04fM5i6/eDf6GS2/o
ojbhB3cJZtsWym7kT1smw6+XsrtJ3dcO6h8N9fBB65hypS2KKkCnM3oCd+0TInHE
kL5zpmOLHhS7/w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:09 2025 by rpki-client