Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: cqFqb+V6VNUucjo/8RQ0kGWgWnnMlPYztLzWj96CcSE=
Subject key identifier: C0:A2:FC:E0:ED:3D:2F:75:8C:0E:B3:60:A4:95:7F:60:F9:FE:BC:8D
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 01993349634E20E8E5402846CA4366F07DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0B2D
Signing time: Wed 10 Sep 2025 11:01:11 +0000
Manifest this update: Wed 10 Sep 2025 11:01:11 +0000
Manifest next update: Thu 11 Sep 2025 11:01:11 +0000
Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=)
2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: caGqU9AaZVlt5PhiF7RiOzazRHtLcwUwQ23qRj3jbrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:63:4e:20:e8:e5:40:28:46:ca:43:66:f0:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Sep 10 11:01:11 2025 GMT
Not After : Sep 11 11:01:11 2025 GMT
Subject: CN=c0a2fce0ed3d2f758c0eb360a4957f60f9febc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:f2:bb:a1:c0:aa:13:88:7b:cd:a4:19:c5:
ef:04:21:2b:6c:59:d7:53:8d:02:01:b2:8d:02:af:
46:d4:bd:99:12:61:1d:b6:04:52:68:f8:57:25:92:
1f:7b:1b:1e:13:35:1f:9b:5b:ca:c6:12:c7:12:76:
46:d5:e7:f8:16:57:eb:ab:e0:72:c7:6d:cc:ef:03:
62:7e:bb:43:aa:6c:f5:5a:66:14:12:b4:63:4a:38:
4d:d3:e2:f4:98:ad:30:03:ea:b8:6a:07:d7:45:e8:
ba:00:b4:7e:eb:b6:01:e3:1d:4c:e1:b4:5b:d2:f8:
1c:0f:9f:62:48:d9:49:12:4c:d7:54:08:88:03:e0:
09:8e:b8:48:53:af:8e:3a:03:43:15:f8:e3:08:bf:
db:c5:e8:86:55:b9:5b:e8:e8:45:2c:e5:1c:cd:6f:
bc:57:59:c5:d8:fa:2f:6b:56:ba:3a:c0:a0:8d:32:
e4:9e:3c:15:d4:c4:b2:12:7a:d8:8d:80:75:f4:00:
34:94:e8:86:b3:18:ee:57:15:f5:3c:fd:f3:3a:1c:
85:36:03:b7:54:dc:15:ae:0f:52:24:da:b5:77:af:
b7:fa:92:60:49:c3:43:aa:18:f2:91:f9:9c:9d:77:
8f:31:61:05:83:cd:93:7f:c5:15:7e:42:ae:80:7f:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A2:FC:E0:ED:3D:2F:75:8C:0E:B3:60:A4:95:7F:60:F9:FE:BC:8D
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:61:b6:13:53:df:f1:fe:97:9e:29:3c:5f:b8:fd:08:d4:
52:99:c0:fa:2e:5f:a3:fc:02:ec:53:91:aa:ed:3e:63:96:7b:
c4:af:f0:e4:5e:80:4a:5a:43:c2:74:6f:97:e1:f0:7f:33:88:
21:4b:9a:b7:c3:5a:62:58:51:aa:22:ea:9b:bf:ea:ce:56:ec:
b9:19:e5:e2:f0:24:06:88:97:28:b9:7d:00:2e:97:80:cc:d1:
e6:33:e3:07:83:03:02:3e:cb:ed:6a:2b:69:72:53:45:3b:9d:
9b:4e:36:f1:aa:a5:8b:c9:62:33:cc:de:09:85:51:98:17:8f:
b7:48:d9:cb:04:10:45:93:b5:34:66:87:4a:9b:f5:f8:98:25:
b7:78:4e:b9:bf:d2:5f:84:48:38:e8:f2:36:e6:2c:2f:32:8b:
d0:b4:e7:b8:e0:24:07:d5:5f:58:da:6f:58:99:0c:56:20:19:
78:6d:28:43:32:f1:13:07:b5:11:50:9a:17:35:18:a5:7d:c2:
3f:81:7c:0a:a8:3b:2a:d3:db:74:e8:d9:c0:9c:93:9e:2c:24:
23:94:ea:ec:95:9c:d4:44:0b:29:3e:aa:0c:fb:ef:41:5c:99:
04:19:a5:aa:83:4a:81:88:1d:2f:dc:d4:52:87:6c:7d:26:f3:
fb:b0:ac:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzSWNOIOjlQChGykNm8H3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0
MzVlY2UwHhcNMjUwOTEwMTEwMTExWhcNMjUwOTExMTEwMTExWjAzMTEwLwYDVQQD
EyhjMGEyZmNlMGVkM2QyZjc1OGMwZWIzNjBhNDk1N2Y2MGY5ZmViYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Dyu6HAqhOIe82kGcXvBCErbFnX
U40CAbKNAq9G1L2ZEmEdtgRSaPhXJZIfexseEzUfm1vKxhLHEnZG1ef4Flfrq+By
x23M7wNifrtDqmz1WmYUErRjSjhN0+L0mK0wA+q4agfXRei6ALR+67YB4x1M4bRb
0vgcD59iSNlJEkzXVAiIA+AJjrhIU6+OOgNDFfjjCL/bxeiGVblb6OhFLOUczW+8
V1nF2Pova1a6OsCgjTLknjwV1MSyEnrYjYB19AA0lOiGsxjuVxX1PP3zOhyFNgO3
VNwVrg9SJNq1d6+3+pJgScNDqhjykfmcnXePMWEFg82Tf8UVfkKugH+XOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCi/ODtPS91jA6zYKSVf2D5/ryNMB8GA1UdIwQY
MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt
OTU4MTdlZTk0NGNlLzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl
LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL91hthNT
3/H+l54pPF+4/QjUUpnA+i5fo/wC7FORqu0+Y5Z7xK/w5F6ASlpDwnRvl+HwfzOI
IUuat8NaYlhRqiLqm7/qzlbsuRnl4vAkBoiXKLl9AC6XgMzR5jPjB4MDAj7L7Wor
aXJTRTudm0428aqli8liM8zeCYVRmBePt0jZywQQRZO1NGaHSpv1+Jglt3hOub/S
X4RIOOjyNuYsLzKL0LTnuOAkB9VfWNpvWJkMViAZeG0oQzLxEwe1EVCaFzUYpX3C
P4F8Cqg7KtPbdOjZwJyTniwkI5Tq7JWc1EQLKT6qDPvvQVyZBBmlqoNKgYgdL9zU
UodsfSbz+7Cssg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:18:42 2025 by rpki-client