Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: PkH9shSSPiLlLuw8yjH+WH7uqj5hEFPfzW6WpZ5zFgA=
Subject key identifier: DA:54:49:B6:1E:E8:97:A3:F8:C4:47:07:DF:7E:41:EB:10:56:84:3E
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019931C8558E5ABD7CE38A0910EDB21D86A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 1443
Signing time: Wed 10 Sep 2025 04:00:36 +0000
Manifest this update: Wed 10 Sep 2025 04:00:36 +0000
Manifest next update: Thu 11 Sep 2025 04:00:36 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: lqReN9WBrjwawsfjgqoo3z3EJZqwbgKhh7aHTxDiKIc=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:55:8e:5a:bd:7c:e3:8a:09:10:ed:b2:1d:86:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Sep 10 04:00:36 2025 GMT
Not After : Sep 11 04:00:36 2025 GMT
Subject: CN=da5449b61ee897a3f8c44707df7e41eb1056843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:cc:d9:8b:95:7c:dd:67:c0:1a:d4:c4:48:
0b:ab:be:38:36:78:32:6b:c6:4e:b4:b9:f7:6e:93:
50:7c:62:ea:08:45:cc:69:d9:95:0d:2b:e2:36:08:
56:8f:3f:29:33:9f:34:9f:da:c7:9b:81:3e:eb:58:
15:bc:26:0a:f6:77:f8:9e:12:70:0f:c1:0e:45:0c:
8c:76:d3:ee:23:29:90:05:cd:b3:6e:96:74:a2:93:
dd:a4:c6:e3:6a:65:d3:3d:bd:8f:61:3b:8d:1e:6c:
65:96:fc:50:5b:1d:f6:8a:a2:00:0b:5c:31:ec:2a:
da:51:b8:a4:26:3f:8a:85:2a:0a:43:f1:34:d2:ae:
bb:f0:6e:ce:68:1f:b0:05:01:ea:e8:cc:63:58:96:
68:55:fc:74:f4:72:3a:19:61:88:c6:25:0a:f5:98:
4d:1d:7d:4b:e4:47:4c:c8:ac:cb:10:48:cf:96:2b:
9c:5b:e1:2e:43:f2:47:ab:4f:f5:29:fb:56:2a:52:
ca:b6:08:68:6a:08:e0:f7:90:a3:62:b5:88:58:51:
d7:1e:96:cd:ea:e1:78:4e:99:48:fc:ff:e0:b6:8f:
db:28:19:e0:8b:5d:a0:22:c8:31:a2:c2:70:85:b9:
dd:dd:a0:ec:4e:05:b5:42:71:ed:84:2c:68:5b:e7:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:49:B6:1E:E8:97:A3:F8:C4:47:07:DF:7E:41:EB:10:56:84:3E
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5a:75:02:0f:4d:33:a6:d6:f5:06:f3:05:d5:7e:e3:6d:c5:
34:f2:ca:0f:e9:25:2c:5a:7c:3c:13:0d:c1:7a:a6:90:53:1f:
51:11:ef:14:39:05:40:dc:24:c5:a5:59:6b:e2:ce:16:79:a2:
22:42:08:48:b6:0f:7e:4b:08:ea:5e:27:29:b7:44:49:e5:ef:
cc:2b:10:b8:95:db:e6:4c:4d:be:ac:54:b9:dd:66:6b:75:42:
7b:36:cb:1f:2a:2c:9e:c8:a0:a2:16:d9:11:28:6d:e6:25:42:
40:ee:f2:03:04:1b:e6:e5:bc:a2:5f:5a:2a:85:26:ce:b6:8e:
3d:3f:c0:d7:03:83:51:8d:c9:a2:7a:22:09:21:4c:6a:d9:df:
a9:2c:fb:e2:ea:65:6f:6a:01:57:d9:10:86:ff:16:54:ba:44:
8b:5a:25:ee:6e:3b:4a:70:c9:5e:6e:a3:3c:44:3f:ed:8f:78:
b9:be:52:01:04:57:89:d6:13:73:4b:88:12:05:b5:40:dd:2e:
db:94:3e:f2:f8:52:3c:3f:1b:96:89:ed:fe:e4:3d:c3:16:e8:
6f:4e:5e:9a:9e:07:d2:3c:0b:f9:60:96:ef:8d:e3:e3:bb:c6:
b0:97:a0:5f:b9:e3:97:00:50:6b:d5:83:d8:52:26:36:48:db:
fa:05:14:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyFWOWr1844oJEO2yHYaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMmU4MjFkODhkZTdhMDExMzQxNzA0MjAyMzQ2ZjdjMmJi
OWViY2YwHhcNMjUwOTEwMDQwMDM2WhcNMjUwOTExMDQwMDM2WjAzMTEwLwYDVQQD
EyhkYTU0NDliNjFlZTg5N2EzZjhjNDQ3MDdkZjdlNDFlYjEwNTY4NDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0jM2YuVfN1nwBrUxEgLq744Nngy
a8ZOtLn3bpNQfGLqCEXMadmVDSviNghWjz8pM580n9rHm4E+61gVvCYK9nf4nhJw
D8EORQyMdtPuIymQBc2zbpZ0opPdpMbjamXTPb2PYTuNHmxllvxQWx32iqIAC1wx
7CraUbikJj+KhSoKQ/E00q678G7OaB+wBQHq6MxjWJZoVfx09HI6GWGIxiUK9ZhN
HX1L5EdMyKzLEEjPliucW+EuQ/JHq0/1KftWKlLKtghoagjg95CjYrWIWFHXHpbN
6uF4TplI/P/gto/bKBngi12gIsgxosJwhbnd3aDsTgW1QnHthCxoW+f+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpUSbYe6Jej+MRHB99+QesQVoQ+MB8GA1UdIwQY
MBaAFOwugh2I3noBE0FwQgI0b3wruevPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjkt
ZGZhMGI4MDUyNjE0LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjktZGZhMGI4MDUyNjE0
LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1p1Ag9N
M6bW9QbzBdV+423FNPLKD+klLFp8PBMNwXqmkFMfURHvFDkFQNwkxaVZa+LOFnmi
IkIISLYPfksI6l4nKbdESeXvzCsQuJXb5kxNvqxUud1ma3VCezbLHyosnsigohbZ
ESht5iVCQO7yAwQb5uW8ol9aKoUmzraOPT/A1wODUY3JonoiCSFMatnfqSz74upl
b2oBV9kQhv8WVLpEi1ol7m47SnDJXm6jPEQ/7Y94ub5SAQRXidYTc0uIEgW1QN0u
25Q+8vhSPD8blont/uQ9wxbob05emp4H0jwL+WCW743j47vGsJegX7njlwBQa9WD
2FImNkjb+gUUTw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:27:08 2025 by rpki-client