Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File: 7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier: J7ExhkuwsuoRLNSujXoVLjuoCzKqBZvLfnDs75xaFNI=
Subject key identifier: 5A:74:B5:81:7C:53:AC:08:B6:A7:2D:E0:DB:32:B1:94:EA:C0:79:09
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial: 01993794D1D272E2C5E0F0A03BB7A79A7711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number: 168A
Signing time: Thu 11 Sep 2025 07:02:03 +0000
Manifest this update: Thu 11 Sep 2025 07:02:03 +0000
Manifest next update: Fri 12 Sep 2025 07:02:03 +0000
Files and hashes: 1: 0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa (hash: iLVj7sxryrS44+Um3qKoIRww0o5d/litSLFCSSNu8gk=)
2: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: GPfXRLSXDgS7E81jCttOUOWrXkPgJBbzCyw+rR80fjM=)
3: BUhsNJUBNyb2HSIUiIeGUaXbRSs.roa (hash: WZxDNbWAEQbOChQ4uBirZFUp84bvXSVkcscB3oLo9vU=)
4: g0sPCB79WMlgxKBl78JsjxBs-fY.roa (hash: X+EXtP8p8Q91QAPiVwkYVGvv2ZKJC7/ZwL2Di69yJ1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:d1:d2:72:e2:c5:e0:f0:a0:3b:b7:a7:9a:77:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Validity
Not Before: Sep 11 07:02:03 2025 GMT
Not After : Sep 12 07:02:03 2025 GMT
Subject: CN=5a74b5817c53ac08b6a72de0db32b194eac07909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:20:dd:fa:2b:61:2d:a3:07:ae:6b:f4:d6:
4f:ab:3e:4f:49:de:6b:51:b3:9a:c6:0a:da:49:b7:
ec:fc:91:73:48:5e:ce:73:5e:8d:32:49:8e:b3:e1:
56:5e:e3:a3:ea:29:7f:2f:b3:fb:18:5f:2e:c5:51:
73:77:85:16:00:fa:49:90:95:fc:4b:73:5e:6b:d3:
eb:e4:92:41:49:73:d9:67:6f:e8:4b:38:7f:9f:14:
30:bb:37:b4:24:bb:39:86:17:af:a8:d2:0e:7f:2e:
30:9f:e3:d3:59:6d:ef:8a:7f:3d:05:e4:9c:a8:c9:
f0:b7:5b:74:d4:59:f2:a6:ae:6a:e4:73:13:6a:24:
f0:92:36:42:4d:74:76:7b:e7:0e:a6:70:44:85:6f:
d6:6d:77:f1:a2:60:d6:e6:4a:27:25:d8:67:09:94:
35:8e:b9:4c:93:6c:f4:c8:93:45:e8:70:8c:79:45:
82:b0:0b:9a:4f:80:1d:d9:c0:7b:9e:30:f5:92:c5:
77:a8:29:28:4a:0c:38:d2:a7:42:7b:b6:2a:4d:f4:
65:ab:a9:0a:af:86:57:57:36:17:9f:6a:97:59:54:
58:27:cc:0a:00:5c:f0:7a:0b:d5:8f:b5:45:58:ff:
49:bc:64:4e:b5:e3:e7:6f:7c:c0:8a:cb:89:53:f4:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:74:B5:81:7C:53:AC:08:B6:A7:2D:E0:DB:32:B1:94:EA:C0:79:09
X509v3 Authority Key Identifier:
keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d9:9c:a9:a2:5f:c3:88:00:59:1b:3e:15:4e:90:53:8f:75:
b3:54:93:eb:23:1d:73:68:1b:76:57:46:de:34:61:5a:d9:7a:
bf:28:48:25:49:58:41:23:b6:66:a9:91:6e:88:c4:0b:6f:cb:
ba:46:37:56:7c:83:45:73:f7:f2:74:eb:d7:e7:cc:60:63:b5:
8a:c6:15:16:2b:01:84:67:84:7c:a2:5c:85:8a:fe:8b:39:69:
d6:c0:04:3d:ae:d1:00:52:cc:a0:9b:9e:a3:eb:02:f8:80:41:
37:b0:f6:cf:93:22:fe:e5:7c:5f:e7:66:fc:a8:4d:02:d4:a0:
11:73:e5:2b:ec:48:2d:3e:53:f5:8d:e2:8a:63:2b:31:18:e6:
1f:e7:da:0f:4e:3f:aa:a4:4b:5d:79:3c:90:13:62:b0:ff:b2:
cc:05:e5:04:9c:ee:04:88:40:e1:d1:6c:3c:33:5c:46:34:f8:
a7:a9:be:c2:63:7c:90:cd:ea:1a:f1:de:29:84:17:d0:73:b4:
67:cf:32:f2:c7:23:3f:42:80:e4:44:f2:58:21:58:69:cd:92:
68:9e:90:bf:bd:38:a8:15:6e:87:33:23:bd:27:96:a3:77:3d:
94:9c:7d:e9:23:00:56:cf:7b:be:0f:57:bb:91:a5:6c:86:ff:
90:af:9d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3lNHScuLF4PCgO7enmncRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNGY3ODk0NzM0MWNlNTU4ODhiN2ViZjM2OTAxNDNiMGNi
ZmYzZDYwHhcNMjUwOTExMDcwMjAzWhcNMjUwOTEyMDcwMjAzWjAzMTEwLwYDVQQD
Eyg1YTc0YjU4MTdjNTNhYzA4YjZhNzJkZTBkYjMyYjE5NGVhYzA3OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqgg3forYS2jB65r9NZPqz5PSd5r
UbOaxgraSbfs/JFzSF7Oc16NMkmOs+FWXuOj6il/L7P7GF8uxVFzd4UWAPpJkJX8
S3Nea9Pr5JJBSXPZZ2/oSzh/nxQwuze0JLs5hhevqNIOfy4wn+PTWW3vin89BeSc
qMnwt1t01Fnypq5q5HMTaiTwkjZCTXR2e+cOpnBEhW/WbXfxomDW5konJdhnCZQ1
jrlMk2z0yJNF6HCMeUWCsAuaT4Ad2cB7njD1ksV3qCkoSgw40qdCe7YqTfRlq6kK
r4ZXVzYXn2qXWVRYJ8wKAFzwegvVj7VFWP9JvGROtePnb3zAisuJU/T1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp0tYF8U6wItqct4NsysZTqwHkJMB8GA1UdIwQY
MBaAFO9PeJRzQc5ViIt+vzaQFDsMv/PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAt
OWJhYTY2Y2ExNDA0LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAtOWJhYTY2Y2ExNDA0
LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdmcqaJf
w4gAWRs+FU6QU491s1ST6yMdc2gbdldG3jRhWtl6vyhIJUlYQSO2ZqmRbojEC2/L
ukY3VnyDRXP38nTr1+fMYGO1isYVFisBhGeEfKJchYr+izlp1sAEPa7RAFLMoJue
o+sC+IBBN7D2z5Mi/uV8X+dm/KhNAtSgEXPlK+xILT5T9Y3iimMrMRjmH+faD04/
qqRLXXk8kBNisP+yzAXlBJzuBIhA4dFsPDNcRjT4p6m+wmN8kM3qGvHeKYQX0HO0
Z88y8scjP0KA5ETyWCFYac2SaJ6Qv704qBVuhzMjvSeWo3c9lJx96SMAVs97vg9X
u5GlbIb/kK+dNA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 10:13:36 2025 by rpki-client