Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: aTsFhyHeDvrZjvbxoiZ4Qori8v/DBaqeNmUl0HBLs10=
Subject key identifier: DF:1F:91:2E:DC:05:9B:49:01:C9:6B:73:83:DA:A8:3D:0F:00:49:4E
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 0199239F44767F1B4B0990CF9FD82C57E4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:04 +0000
Manifest this update: Sun 07 Sep 2025 10:01:04 +0000
Manifest next update: Mon 08 Sep 2025 10:01:04 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: wGZP6ybzNe6xZC0ac9yrwttj06Gkl5P7mQ/iVgBXLdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:44:76:7f:1b:4b:09:90:cf:9f:d8:2c:57:e4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Sep 7 10:01:04 2025 GMT
Not After : Sep 8 10:01:04 2025 GMT
Subject: CN=df1f912edc059b4901c96b7383daa83d0f00494e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:05:aa:99:b1:c0:9d:f6:9d:dc:b7:87:3a:
73:de:22:51:19:2c:c2:13:2b:7b:9c:1c:d1:d9:e0:
84:03:26:7e:8c:e2:ce:c5:f6:e7:8b:af:9f:b3:f9:
ca:25:cf:d6:46:52:b7:79:4a:7c:6f:de:46:8e:8b:
89:b7:9e:20:a6:24:e7:dc:7f:83:26:cb:2c:e8:53:
d3:f1:b1:eb:ff:c9:16:47:ac:76:55:ce:09:8b:ab:
79:27:15:da:82:09:8a:0b:ca:cd:09:ec:96:05:70:
33:8a:93:a1:88:b3:3f:9e:9e:15:9f:60:39:6f:4d:
5e:85:76:82:86:64:f8:b4:8a:65:05:bd:82:ea:0d:
a3:8c:ec:9e:a6:0e:18:a2:7b:6b:44:ab:df:ec:26:
25:c0:c2:a1:a7:c5:6d:ed:72:21:ba:7c:a7:53:fd:
31:ea:4d:2a:78:68:bf:68:d4:5c:74:89:b8:a3:be:
1e:f1:3d:2e:16:83:5f:6a:fa:76:dc:6e:65:27:fb:
6f:c8:bb:4d:f1:e6:27:4d:d2:0a:69:78:11:de:33:
d7:54:f5:77:49:26:fd:3e:ce:8b:55:b9:7f:cc:32:
0b:5f:5e:ee:a8:f1:c0:78:31:9e:dc:c5:23:0a:4b:
77:30:c3:1c:d0:15:41:32:33:7c:34:ac:3b:33:20:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1F:91:2E:DC:05:9B:49:01:C9:6B:73:83:DA:A8:3D:0F:00:49:4E
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0a:66:33:fc:e9:f5:82:87:d6:75:63:c5:57:f2:56:b8:55:
d1:fa:a1:8d:cc:0d:3a:a2:3d:e9:37:66:59:1c:c8:97:02:52:
24:da:bd:d1:6c:74:97:dd:c3:26:2f:ff:4b:df:12:7f:39:af:
74:88:16:e7:2c:26:ad:2f:51:f8:79:e0:cf:0b:cb:17:28:ec:
70:72:79:3a:f9:2d:ee:20:ae:14:41:76:59:89:74:ed:3b:08:
1f:ef:3a:9e:84:57:9c:5b:09:91:eb:dd:33:ad:de:09:db:31:
95:ed:0f:20:54:82:d7:05:35:9b:09:24:5d:87:66:75:28:94:
87:df:58:fc:b6:69:7e:69:76:3f:b6:04:37:5d:68:05:a1:7f:
91:76:19:0e:5a:e9:52:61:66:49:d9:72:17:32:f5:a7:2b:e5:
fa:32:b1:ed:a6:05:f8:9c:08:30:ea:12:3b:6f:6c:f3:7e:87:
cc:39:f0:8f:ff:f3:9a:78:04:c2:2f:97:c0:60:7e:db:74:af:
e9:e9:88:7b:a8:08:0b:85:3a:39:eb:e8:77:c4:f3:6c:c9:37:
53:d2:d1:14:af:05:a9:f0:27:b8:97:68:14:fd:a1:dc:a8:79:
e7:80:2a:37:99:55:76:fc:7c:8c:e7:f1:39:eb:3d:ba:52:8d:
70:50:a1:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn0R2fxtLCZDPn9gsV+THMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGQ3NDZlODE3NDc2ZDU1NzhmYmNiZWQ1NzRkN2MxYWQy
NjQxZjEwHhcNMjUwOTA3MTAwMTA0WhcNMjUwOTA4MTAwMTA0WjAzMTEwLwYDVQQD
EyhkZjFmOTEyZWRjMDU5YjQ5MDFjOTZiNzM4M2RhYTgzZDBmMDA0OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokYFqpmxwJ32ndy3hzpz3iJRGSzC
Eyt7nBzR2eCEAyZ+jOLOxfbni6+fs/nKJc/WRlK3eUp8b95GjouJt54gpiTn3H+D
Jsss6FPT8bHr/8kWR6x2Vc4Ji6t5JxXaggmKC8rNCeyWBXAzipOhiLM/np4Vn2A5
b01ehXaChmT4tIplBb2C6g2jjOyepg4YontrRKvf7CYlwMKhp8Vt7XIhunynU/0x
6k0qeGi/aNRcdIm4o74e8T0uFoNfavp23G5lJ/tvyLtN8eYnTdIKaXgR3jPXVPV3
SSb9Ps6LVbl/zDILX17uqPHAeDGe3MUjCkt3MMMc0BVBMjN8NKw7MyCYgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8fkS7cBZtJAclrc4PaqD0PAElOMB8GA1UdIwQY
MBaAFOzddG6BdHbVV4+8vtV018GtJkHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEt
MjM4MzNmZTAwOWFhLzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEtMjM4MzNmZTAwOWFh
LzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQpmM/zp
9YKH1nVjxVfyVrhV0fqhjcwNOqI96TdmWRzIlwJSJNq90Wx0l93DJi//S98Sfzmv
dIgW5ywmrS9R+HngzwvLFyjscHJ5Ovkt7iCuFEF2WYl07TsIH+86noRXnFsJkevd
M63eCdsxle0PIFSC1wU1mwkkXYdmdSiUh99Y/LZpfml2P7YEN11oBaF/kXYZDlrp
UmFmSdlyFzL1pyvl+jKx7aYF+JwIMOoSO29s836HzDnwj//zmngEwi+XwGB+23Sv
6emIe6gIC4U6Oevod8TzbMk3U9LRFK8FqfAnuJdoFP2h3Kh554AqN5lVdvx8jOfx
Oes9ulKNcFChPA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:20 2025 by rpki-client