Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: EKhgPya5v8y5/4LNVrWASmsYQrIM/8K3OSM+e8OyKs4=
Subject key identifier: 45:79:8B:6D:17:86:85:8A:B5:73:18:B6:0B:DB:5A:01:D8:16:E9:43
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 019933B78621B2A96123EF1ED4F6B609C9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 13FB
Signing time: Wed 10 Sep 2025 13:01:29 +0000
Manifest this update: Wed 10 Sep 2025 13:01:29 +0000
Manifest next update: Thu 11 Sep 2025 13:01:29 +0000
Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: Mrpyl0bGNrJbaQqyGXZKt5gZq2opDNs5XxDPuo8HFzA=)
2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:86:21:b2:a9:61:23:ef:1e:d4:f6:b6:09:c9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Sep 10 13:01:29 2025 GMT
Not After : Sep 11 13:01:29 2025 GMT
Subject: CN=45798b6d1786858ab57318b60bdb5a01d816e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:24:7c:9b:91:e6:4d:f6:7e:ea:75:f7:5d:
d7:b2:74:96:5b:7d:d1:9f:db:6b:b2:55:49:ca:87:
54:1a:e3:8a:17:3e:6a:f0:2b:5c:d4:aa:e6:e0:ad:
53:8d:68:18:0e:9e:d1:b4:c0:a3:f6:aa:01:80:82:
5b:a4:75:e6:13:38:23:09:fa:7b:85:1c:2e:eb:8e:
5d:1b:0a:dd:7b:7f:65:ea:58:82:39:bf:2d:b4:41:
38:de:49:9a:86:4c:d0:43:ab:b6:f7:48:75:66:13:
34:3b:3d:d8:35:19:20:5f:da:aa:06:a4:bf:0d:98:
05:f1:05:6c:63:b2:d7:d4:d6:59:4d:00:22:96:0c:
99:9d:f2:81:e8:43:ba:a5:42:a5:32:f7:3c:64:c2:
8c:a1:44:9d:5d:90:04:28:6c:64:f4:a7:10:95:d4:
10:a5:79:ee:8d:46:a2:59:7d:01:8a:9c:98:9a:e7:
80:18:c3:c4:d0:80:73:9c:de:5a:43:86:b0:de:bc:
5b:1e:49:ee:5a:6f:0b:30:77:39:d8:7e:2b:58:9e:
73:0d:36:88:bc:3a:30:31:c8:7d:d2:4f:67:fc:de:
af:8f:74:65:c5:97:bf:6d:69:52:6a:19:8d:3e:58:
0e:a5:bd:6e:76:87:d6:cb:d8:be:22:73:16:76:06:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:79:8B:6D:17:86:85:8A:B5:73:18:B6:0B:DB:5A:01:D8:16:E9:43
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:12:1f:72:d7:8e:7f:73:48:e0:e6:a6:77:c9:9a:3b:a6:25:
bf:73:7f:df:9e:35:4c:2c:ce:79:ec:96:41:a2:04:14:2f:d9:
e4:e2:8f:77:c4:32:db:d6:cb:c5:d5:ba:7e:2a:72:b1:64:a2:
78:9c:59:d1:41:7c:17:ba:ee:a3:04:49:3e:ed:04:74:98:a4:
39:be:95:8d:4a:54:32:06:92:db:64:11:0f:29:6e:22:e5:1a:
d8:3a:af:4f:51:57:ae:d2:0c:fe:06:0f:9d:44:f4:f8:77:98:
23:17:34:d3:8f:13:ba:01:d2:53:5a:7c:36:3b:3f:ca:30:1a:
42:50:da:38:cd:8a:52:c8:36:31:a3:82:68:b9:95:25:b6:be:
25:c1:66:bc:9e:54:05:26:d2:5b:cc:bc:23:4d:f8:c9:2f:1e:
9e:da:6b:e4:c1:eb:ed:57:da:65:eb:0a:6a:55:fe:1d:09:a3:
db:f2:e4:bb:ba:07:58:1c:78:f1:a8:80:55:3f:37:a2:81:45:
4a:3a:6b:74:aa:8e:e2:b9:0d:ee:cc:d4:1c:11:d0:2f:7d:69:
c7:30:1f:ac:ba:18:1e:d9:bd:76:79:86:73:26:63:87:6a:b9:
ae:be:a1:27:33:51:21:c2:23:bb:76:2a:4d:40:6c:96:ad:4b:
7f:3e:0b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzt4YhsqlhI+8e1Pa2CcnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh
YTE0ODcwHhcNMjUwOTEwMTMwMTI5WhcNMjUwOTExMTMwMTI5WjAzMTEwLwYDVQQD
Eyg0NTc5OGI2ZDE3ODY4NThhYjU3MzE4YjYwYmRiNWEwMWQ4MTZlOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT8kfJuR5k32fup1913XsnSWW33R
n9trslVJyodUGuOKFz5q8Ctc1Krm4K1TjWgYDp7RtMCj9qoBgIJbpHXmEzgjCfp7
hRwu645dGwrde39l6liCOb8ttEE43kmahkzQQ6u290h1ZhM0Oz3YNRkgX9qqBqS/
DZgF8QVsY7LX1NZZTQAilgyZnfKB6EO6pUKlMvc8ZMKMoUSdXZAEKGxk9KcQldQQ
pXnujUaiWX0BipyYmueAGMPE0IBznN5aQ4aw3rxbHknuWm8LMHc52H4rWJ5zDTaI
vDowMch90k9n/N6vj3RlxZe/bWlSahmNPlgOpb1udofWy9i+InMWdgY5AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV5i20XhoWKtXMYtgvbWgHYFulDMB8GA1UdIwQY
MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt
YzgxNWU1MGVjNWU3LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3
LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBIfcteO
f3NI4Oamd8maO6Ylv3N/3541TCzOeeyWQaIEFC/Z5OKPd8Qy29bLxdW6fipysWSi
eJxZ0UF8F7ruowRJPu0EdJikOb6VjUpUMgaS22QRDyluIuUa2DqvT1FXrtIM/gYP
nUT0+HeYIxc0048TugHSU1p8Njs/yjAaQlDaOM2KUsg2MaOCaLmVJba+JcFmvJ5U
BSbSW8y8I034yS8entpr5MHr7VfaZesKalX+HQmj2/Lku7oHWBx48aiAVT83ooFF
SjprdKqO4rkN7szUHBHQL31pxzAfrLoYHtm9dnmGcyZjh2q5rr6hJzNRIcIju3Yq
TUBslq1Lfz4Lsw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:11:06 2025 by rpki-client