Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: MEmbYlEUo1NnOFoiq/LE8uRkx0DeBx0mc2yfZZROlps=
Subject key identifier: BC:AA:4C:F2:83:2D:3F:86:7B:0D:46:FE:78:D8:C3:1E:C9:92:55:E8
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 0199228C6F27533426C4998BD60877B71504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 07DD
Signing time: Sun 07 Sep 2025 05:00:52 +0000
Manifest this update: Sun 07 Sep 2025 05:00:52 +0000
Manifest next update: Mon 08 Sep 2025 05:00:52 +0000
Files and hashes: 1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: WroXrPDvN8BPrgf8TXIQqpqD5MkbXcWLbpIN/llSpa8=)
2: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
3: zeqX-4ngsCGD2Y4pwGbqJh4HQYw.roa (hash: KAYfqgoq5ZBvonKqM43MFg2S2Gi1Jp8WijPkzVbT/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6f:27:53:34:26:c4:99:8b:d6:08:77:b7:15:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Sep 7 05:00:52 2025 GMT
Not After : Sep 8 05:00:52 2025 GMT
Subject: CN=bcaa4cf2832d3f867b0d46fe78d8c31ec99255e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:54:a1:29:42:1c:be:20:2a:85:47:34:33:
8e:20:d6:41:86:f2:5e:eb:d7:0e:02:07:60:3e:07:
52:c2:6e:10:63:09:f0:78:76:0e:ee:0f:8f:80:c3:
4d:65:ca:88:bc:e4:19:df:1a:b0:e7:24:4b:4f:d8:
4a:46:da:5d:f9:b0:4a:3b:73:d7:37:dc:46:cb:b9:
c0:f6:61:f6:c3:30:45:b2:88:74:92:15:3c:0d:29:
33:1e:24:a9:f6:02:05:5d:32:c6:cc:fb:22:05:48:
b2:92:59:34:03:95:08:ac:7a:b5:10:c0:fa:aa:74:
60:30:24:8a:23:9f:90:cb:ee:48:6b:b1:2e:95:90:
e3:09:c9:85:4a:d0:6f:d1:05:5c:0a:5d:bb:86:18:
8a:4d:08:dc:0e:4d:34:96:1f:13:c1:a6:b4:82:0e:
93:28:ab:2f:1f:18:bb:6a:33:95:e2:e9:52:99:e6:
df:3c:5a:94:cd:f9:6b:3f:f5:a8:88:14:f6:9d:2b:
98:68:5e:8d:54:74:4b:bf:8b:ce:ce:72:57:29:75:
ed:88:95:9f:0b:2c:48:09:bb:8e:c7:02:3c:9b:28:
c2:a1:86:2b:db:dc:4d:65:8a:9a:36:99:af:52:91:
ce:7d:e4:53:2f:6d:2a:7a:f2:5e:6a:d0:9c:4f:d0:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AA:4C:F2:83:2D:3F:86:7B:0D:46:FE:78:D8:C3:1E:C9:92:55:E8
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f9:2d:8a:af:2a:d4:6c:fd:0b:fb:2d:6b:7d:93:af:39:6a:
4b:eb:19:4d:38:0e:50:ea:f8:dc:03:04:22:68:0b:77:4a:32:
c1:2f:92:8f:0c:79:ae:ad:7c:81:d9:2f:cf:e4:eb:88:6c:76:
2f:b6:48:22:c2:54:ae:af:97:82:5e:d7:c9:b1:25:67:ff:02:
90:01:31:45:94:56:1b:53:8d:69:6a:c9:f9:aa:de:c6:68:81:
1e:7c:85:81:8c:8b:48:21:60:d7:b5:5e:2e:fa:76:e7:27:3f:
d1:77:f8:8b:51:2a:70:af:a5:15:e1:ec:75:97:17:8e:c0:75:
39:3f:ed:3c:17:29:a8:17:db:a8:1d:61:39:b1:1c:85:d8:ff:
3a:34:44:d5:f6:cc:bc:78:ae:0e:e5:98:46:45:ad:75:d7:bc:
c5:fa:67:62:eb:0a:b9:fd:e4:45:b9:86:5e:35:2d:14:1e:28:
80:af:0c:f9:e2:ba:93:d1:1a:6b:de:c3:bc:24:55:6a:f3:90:
2b:47:09:bb:b3:98:21:f2:48:68:82:da:8e:d5:aa:79:fe:23:
00:44:67:9c:8d:f4:74:9e:24:51:68:77:8d:7e:4f:a1:21:77:
cd:c1:b6:a7:57:9d:3b:bc:1a:4e:02:89:73:b8:f4:b2:11:fc:
e0:ef:3d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijG8nUzQmxJmL1gh3txUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2VlMzFkMmYwZWYxMDMyOTZkZGVjM2M2NmIwN2EzZjQ0
MmFjOTgwHhcNMjUwOTA3MDUwMDUyWhcNMjUwOTA4MDUwMDUyWjAzMTEwLwYDVQQD
EyhiY2FhNGNmMjgzMmQzZjg2N2IwZDQ2ZmU3OGQ4YzMxZWM5OTI1NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsylUoSlCHL4gKoVHNDOOINZBhvJe
69cOAgdgPgdSwm4QYwnweHYO7g+PgMNNZcqIvOQZ3xqw5yRLT9hKRtpd+bBKO3PX
N9xGy7nA9mH2wzBFsoh0khU8DSkzHiSp9gIFXTLGzPsiBUiyklk0A5UIrHq1EMD6
qnRgMCSKI5+Qy+5Ia7EulZDjCcmFStBv0QVcCl27hhiKTQjcDk00lh8Twaa0gg6T
KKsvHxi7ajOV4ulSmebfPFqUzflrP/WoiBT2nSuYaF6NVHRLv4vOznJXKXXtiJWf
CyxICbuOxwI8myjCoYYr29xNZYqaNpmvUpHOfeRTL20qevJeatCcT9C/WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyqTPKDLT+Gew1G/njYwx7JklXoMB8GA1UdIwQY
MBaAFO8+4x0vDvEDKW3ew8ZrB6P0QqyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMt
NzQ4ZDYxNzNiNmExLzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMtNzQ4ZDYxNzNiNmEx
LzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/ktiq8q
1Gz9C/sta32TrzlqS+sZTTgOUOr43AMEImgLd0oywS+Sjwx5rq18gdkvz+TriGx2
L7ZIIsJUrq+Xgl7XybElZ/8CkAExRZRWG1ONaWrJ+arexmiBHnyFgYyLSCFg17Ve
Lvp25yc/0Xf4i1EqcK+lFeHsdZcXjsB1OT/tPBcpqBfbqB1hObEchdj/OjRE1fbM
vHiuDuWYRkWtdde8xfpnYusKuf3kRbmGXjUtFB4ogK8M+eK6k9Eaa97DvCRVavOQ
K0cJu7OYIfJIaILajtWqef4jAERnnI30dJ4kUWh3jX5PoSF3zcG2p1edO7waTgKJ
c7j0shH84O89PQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:06 2025 by rpki-client