Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: pduy8wx9So7PMSK7qkXKoZMKAsRNdgA8eQmJc7bdZuU=
Subject key identifier: 6E:79:33:49:7D:F4:62:10:FD:6B:47:D4:5F:3C:DA:ED:00:39:FD:73
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0199228CE7A8F344DA156F824FF4E025A820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 10FD
Signing time: Sun 07 Sep 2025 05:01:23 +0000
Manifest this update: Sun 07 Sep 2025 05:01:23 +0000
Manifest next update: Mon 08 Sep 2025 05:01:23 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: RbeWkRQrndHDqsMxadeaJOFa0z0/deNHrEXBg5G0+Yc=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e7:a8:f3:44:da:15:6f:82:4f:f4:e0:25:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Sep 7 05:01:23 2025 GMT
Not After : Sep 8 05:01:23 2025 GMT
Subject: CN=6e7933497df46210fd6b47d45f3cdaed0039fd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:09:86:f9:59:08:f6:4d:1c:cb:f6:90:66:
58:b6:c2:df:28:0f:50:93:8f:21:9e:9c:a3:b0:6d:
11:92:2e:45:06:34:52:25:0b:7b:f3:7e:db:35:19:
58:5b:4b:b0:c6:e0:a3:df:f4:fe:07:7c:e3:82:44:
d0:f8:79:42:12:9e:09:e7:3a:be:b6:d9:7f:d6:ce:
fa:3d:6c:52:97:17:34:8a:ec:bc:7b:63:27:d4:66:
66:2e:83:65:f9:94:7b:c7:8d:ca:5e:06:f4:5d:e8:
20:21:fd:09:64:ac:a0:d3:5d:a1:a3:eb:d7:4b:b7:
17:75:cb:78:2f:74:1e:14:81:86:f3:a7:9d:11:ce:
8b:f2:29:4d:26:87:a8:33:f4:26:a7:73:e7:72:b7:
ff:b3:5a:c7:6e:2e:62:16:63:1a:e2:39:1d:0b:fe:
93:a7:af:ca:6c:90:1f:82:54:b8:ab:63:7d:99:65:
c2:4b:a6:19:1a:23:26:a3:69:b9:ba:5e:3e:91:8c:
9c:5d:6a:3d:28:e0:6e:1c:21:39:ad:f1:89:c8:68:
42:f8:38:b7:9f:18:98:61:21:c7:39:a2:57:bf:f6:
3c:d9:0a:fd:a0:40:2c:99:2e:3d:43:ad:71:96:97:
3c:14:e3:b5:42:a7:9d:92:19:ee:3f:89:33:2d:02:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:33:49:7D:F4:62:10:FD:6B:47:D4:5F:3C:DA:ED:00:39:FD:73
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ef:8a:cd:08:e8:b5:15:49:95:ed:86:97:28:31:97:0c:fa:
45:bc:3b:f6:bd:ec:8e:af:96:26:c9:8b:1f:58:f9:f1:92:6a:
1f:0d:ee:9a:2b:d1:c5:19:16:80:c4:cb:27:6e:94:07:48:53:
31:a3:4a:9d:0b:08:ed:6e:b6:a6:ce:ec:47:3c:e5:c1:01:f4:
b6:68:ee:5b:18:99:3d:c3:02:37:bc:7e:e3:0d:e1:d7:cc:72:
7a:c6:51:58:4c:a5:28:78:29:6a:8b:02:d7:6b:ad:cb:f0:37:
ee:b2:0a:5e:84:46:bf:bf:40:94:56:11:e5:aa:07:af:b4:d1:
2b:ba:ca:3e:9b:e5:7d:58:0a:8b:b1:e8:b9:da:21:74:5f:4a:
88:f5:7d:f2:a1:96:55:04:29:28:d8:31:f3:54:7c:ab:8e:a5:
a3:50:ce:74:f9:e0:b9:c0:a1:48:d9:0e:8b:a4:3e:93:c2:09:
93:4d:58:6c:2e:5e:a5:71:49:ae:8a:87:41:93:00:10:99:f7:
a8:0d:2b:10:7e:40:d5:e3:50:0e:76:9f:08:a0:92:b4:04:58:
82:ab:f7:1f:16:1d:04:e3:95:59:3e:e3:35:a0:0a:e0:af:78:
38:58:c8:db:4f:0e:21:d7:19:8c:16:30:b9:83:0b:75:93:b0:
d3:33:da:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijOeo80TaFW+CT/TgJaggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz
N2I0ZDAwHhcNMjUwOTA3MDUwMTIzWhcNMjUwOTA4MDUwMTIzWjAzMTEwLwYDVQQD
Eyg2ZTc5MzM0OTdkZjQ2MjEwZmQ2YjQ3ZDQ1ZjNjZGFlZDAwMzlmZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX0JhvlZCPZNHMv2kGZYtsLfKA9Q
k48hnpyjsG0Rki5FBjRSJQt7837bNRlYW0uwxuCj3/T+B3zjgkTQ+HlCEp4J5zq+
ttl/1s76PWxSlxc0iuy8e2Mn1GZmLoNl+ZR7x43KXgb0XeggIf0JZKyg012ho+vX
S7cXdct4L3QeFIGG86edEc6L8ilNJoeoM/Qmp3Pncrf/s1rHbi5iFmMa4jkdC/6T
p6/KbJAfglS4q2N9mWXCS6YZGiMmo2m5ul4+kYycXWo9KOBuHCE5rfGJyGhC+Di3
nxiYYSHHOaJXv/Y82Qr9oEAsmS49Q61xlpc8FOO1QqedkhnuP4kzLQKGxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG55M0l99GIQ/WtH1F882u0AOf1zMB8GA1UdIwQY
MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt
MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl
LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJe+KzQjo
tRVJle2Glygxlwz6Rbw79r3sjq+WJsmLH1j58ZJqHw3umivRxRkWgMTLJ26UB0hT
MaNKnQsI7W62ps7sRzzlwQH0tmjuWxiZPcMCN7x+4w3h18xyesZRWEylKHgpaosC
12uty/A37rIKXoRGv79AlFYR5aoHr7TRK7rKPpvlfVgKi7HoudohdF9KiPV98qGW
VQQpKNgx81R8q46lo1DOdPngucChSNkOi6Q+k8IJk01YbC5epXFJroqHQZMAEJn3
qA0rEH5A1eNQDnafCKCStARYgqv3HxYdBOOVWT7jNaAK4K94OFjI208OIdcZjBYw
uYMLdZOw0zPaFw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:00 2025 by rpki-client