Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier: FD1Gc23J+NZeyJ9qjtBJEUs87GKC8s6oJwgWCUsUciY=
Subject key identifier: B6:4D:91:10:CF:35:BD:A3:5F:CF:55:04:94:7E:5A:B7:5C:04:AB:E5
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 019923D5FFCF7A1030FB1CAE30222247034E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number: 01CB
Signing time: Sun 07 Sep 2025 11:00:51 +0000
Manifest this update: Sun 07 Sep 2025 11:00:51 +0000
Manifest next update: Mon 08 Sep 2025 11:00:51 +0000
Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: JuYzZIvUazdZF4hKZi2wlI9n57DGJyZ7phFF88Pm5I4=)
2: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (hash: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ff:cf:7a:10:30:fb:1c:ae:30:22:22:47:03:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Sep 7 11:00:51 2025 GMT
Not After : Sep 8 11:00:51 2025 GMT
Subject: CN=b64d9110cf35bda35fcf5504947e5ab75c04abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:2b:d2:cd:6f:08:21:f9:86:e6:83:c5:52:
80:a9:63:a5:d5:ec:96:ba:01:27:92:af:25:e0:f9:
da:7f:48:f1:82:fb:31:53:01:77:f2:d1:67:95:73:
02:20:b5:c0:3f:b7:2e:d5:0c:65:06:5b:94:2a:13:
cc:58:bd:a8:d4:1f:5d:ba:1c:98:b9:7d:e3:42:c8:
38:5c:bb:be:d9:24:86:d0:c5:8d:96:b3:3c:42:5d:
82:2a:31:c8:d8:97:c8:d1:2e:b1:39:27:4d:76:1f:
ba:ab:45:69:5a:3f:73:83:a4:bb:93:d9:5b:82:e1:
0d:8e:e1:04:89:7a:8a:78:1c:ed:1e:59:36:7f:67:
cf:6d:17:4b:9a:6c:51:25:8c:9c:10:76:90:8b:d3:
6f:8f:40:3f:a2:ee:67:d2:7f:d2:d2:f8:f9:6d:0c:
15:18:d8:de:6d:ca:df:c1:b6:20:33:ed:ee:27:6f:
fd:a4:34:2b:15:41:42:69:e3:6f:f7:d1:98:a2:68:
0c:8e:cf:73:9e:0d:a0:4f:4d:8c:c4:f8:8b:e2:de:
1e:1c:a7:37:cc:6e:f4:2c:b0:d4:8c:06:a5:b4:c5:
44:78:3e:03:e9:9e:73:9e:12:7a:23:be:71:98:36:
ca:6a:f3:99:e6:6e:3f:45:a3:d3:5c:6e:da:20:09:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:91:10:CF:35:BD:A3:5F:CF:55:04:94:7E:5A:B7:5C:04:AB:E5
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:79:83:d2:1e:19:0a:42:b6:ea:46:bb:04:5e:64:c8:de:44:
36:96:26:2e:c6:fb:49:01:c6:46:5d:95:c4:ea:f6:b3:a9:f1:
98:2d:0f:a3:02:a2:70:de:fd:2e:6b:3b:80:41:05:57:30:b4:
90:05:14:25:40:bc:ca:a9:59:92:ef:62:1f:79:76:62:bd:69:
d8:62:ae:ba:64:aa:4d:c9:62:b5:60:8d:b9:12:74:7e:6c:4d:
66:59:4a:24:2d:3e:fa:c3:9a:49:be:f1:64:09:53:29:8d:7c:
de:3e:a9:cd:11:eb:5f:83:d7:ea:3e:1f:8b:dc:dd:3c:43:18:
98:7c:51:22:fb:91:c1:c9:fe:24:a8:8b:f2:00:99:6a:1c:74:
b7:98:4f:98:34:34:bf:d2:36:a1:8a:b2:6d:55:bb:f0:0d:d7:
8c:29:b0:8a:81:98:67:19:ad:d7:a5:07:66:ef:7b:98:80:f9:
e1:a0:ff:5e:e5:86:45:60:3b:79:48:11:a7:e9:76:f2:c3:7c:
bf:62:28:a0:fd:5e:d0:d3:d3:47:f7:2e:b9:94:99:02:a6:0c:
7f:f9:19:ac:c3:21:7a:b2:0e:37:cb:ae:09:fd:96:1c:9a:5b:
a2:77:53:b4:5a:b4:3b:95:a0:b9:10:24:57:f6:ab:6e:df:a9:
b4:9e:26:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1f/PehAw+xyuMCIiRwNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGYzYTRhMDVmMzcwNTBmN2MwMzc5ZDM0ZjRmNDgxNGJk
MjA5ZGYwHhcNMjUwOTA3MTEwMDUxWhcNMjUwOTA4MTEwMDUxWjAzMTEwLwYDVQQD
EyhiNjRkOTExMGNmMzViZGEzNWZjZjU1MDQ5NDdlNWFiNzVjMDRhYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZor0s1vCCH5huaDxVKAqWOl1eyW
ugEnkq8l4Pnaf0jxgvsxUwF38tFnlXMCILXAP7cu1QxlBluUKhPMWL2o1B9duhyY
uX3jQsg4XLu+2SSG0MWNlrM8Ql2CKjHI2JfI0S6xOSdNdh+6q0VpWj9zg6S7k9lb
guENjuEEiXqKeBztHlk2f2fPbRdLmmxRJYycEHaQi9Nvj0A/ou5n0n/S0vj5bQwV
GNjebcrfwbYgM+3uJ2/9pDQrFUFCaeNv99GYomgMjs9zng2gT02MxPiL4t4eHKc3
zG70LLDUjAaltMVEeD4D6Z5znhJ6I75xmDbKavOZ5m4/RaPTXG7aIAmZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZNkRDPNb2jX89VBJR+WrdcBKvlMB8GA1UdIwQY
MBaAFOzfOkoF83BQ98A3nTT09IFL0gnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTkt
ZWY4NzQwNWY5YTExLzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTktZWY4NzQwNWY5YTEx
LzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHmD0h4Z
CkK26ka7BF5kyN5ENpYmLsb7SQHGRl2VxOr2s6nxmC0PowKicN79Lms7gEEFVzC0
kAUUJUC8yqlZku9iH3l2Yr1p2GKuumSqTclitWCNuRJ0fmxNZllKJC0++sOaSb7x
ZAlTKY183j6pzRHrX4PX6j4fi9zdPEMYmHxRIvuRwcn+JKiL8gCZahx0t5hPmDQ0
v9I2oYqybVW78A3XjCmwioGYZxmt16UHZu97mID54aD/XuWGRWA7eUgRp+l28sN8
v2IooP1e0NPTR/cuuZSZAqYMf/kZrMMherION8uuCf2WHJpbondTtFq0O5WguRAk
V/arbt+ptJ4mmw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:19 2025 by rpki-client