Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: gB4SYU0a+Awze4nGjGqw5yCWje+MyLuAuUhfl5abUO0=
Subject key identifier: C9:B7:E5:5B:DE:EB:0D:EA:81:AB:F8:FB:6E:E1:54:93:7D:43:3A:9E
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 0198C67F4BD53AB58A4D5EAC048CFBBE2E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 1641
Signing time: Wed 20 Aug 2025 08:01:27 +0000
Manifest this update: Wed 20 Aug 2025 08:01:27 +0000
Manifest next update: Thu 21 Aug 2025 08:01:27 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: mjg1MQTATP/QT394M+QSaCVQd1EYPyxV6qJO+PrNiPM=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:4b:d5:3a:b5:8a:4d:5e:ac:04:8c:fb:be:2e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Aug 20 08:01:27 2025 GMT
Not After : Aug 21 08:01:27 2025 GMT
Subject: CN=c9b7e55bdeeb0dea81abf8fb6ee154937d433a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:ea:f2:e2:e8:33:21:d2:b6:b4:39:2b:0c:
d5:b8:9e:94:8a:dc:85:60:37:09:7a:b7:b6:3c:f8:
70:63:5c:56:10:3b:8b:7b:b2:a4:80:ff:e9:fd:eb:
81:12:59:c7:3a:e5:0f:03:af:e7:68:26:7c:8e:02:
03:80:8d:5d:39:9e:3a:19:99:f1:bf:e3:a3:a5:60:
43:15:23:39:31:6f:79:1c:a3:c6:c2:a5:0c:f4:c6:
86:bc:d0:bb:ae:cc:e2:5b:c3:3b:29:66:91:17:46:
aa:31:71:ce:9e:ba:36:93:31:7e:86:e0:05:ca:8f:
62:06:1c:4e:f9:b7:c3:27:2c:e3:83:d6:c7:4f:42:
57:b1:f2:87:25:f3:18:c2:4f:5d:89:d8:25:0e:0a:
01:f9:e3:df:08:62:56:d0:32:17:7d:6e:a7:a2:fc:
b3:26:b7:af:67:34:aa:70:b8:e2:b4:92:f4:c2:b1:
6d:2d:52:61:50:ca:e9:ed:5c:33:1a:fd:a0:ec:e3:
ef:f4:94:42:7a:7a:34:d5:48:58:88:af:b7:6e:5f:
4b:4d:7d:d8:d0:89:8f:8e:18:df:ab:22:a0:b7:be:
a0:56:a0:32:5d:4d:91:e0:56:8e:c1:8e:1a:69:94:
a6:84:12:37:49:50:b3:bf:5a:82:c3:05:44:c2:65:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:E5:5B:DE:EB:0D:EA:81:AB:F8:FB:6E:E1:54:93:7D:43:3A:9E
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bd:a4:54:b7:3b:ac:3e:9e:f7:e9:e3:0c:11:0d:a2:d2:cc:
a7:5f:48:a4:44:28:dd:01:23:00:ea:65:bc:13:78:f8:2e:81:
97:ce:53:14:a4:89:52:91:a2:16:97:cc:d3:42:b8:93:53:8a:
70:6e:48:76:e7:d5:67:c4:a4:40:b1:7b:90:f8:21:c5:87:de:
bd:69:c9:a1:1f:8a:8d:80:69:ac:75:2e:03:11:4c:41:07:47:
72:32:66:fb:b7:86:e7:e6:1f:62:c7:73:a2:37:b9:e2:0f:1e:
ef:57:0f:c0:33:9d:8a:e1:31:1c:f1:9f:c5:df:46:50:ef:b0:
41:0d:58:d0:f9:02:05:dd:e0:bc:2b:84:99:3d:d7:c3:5e:1e:
99:50:2e:95:cb:aa:5f:98:d0:6c:b7:5f:dd:5d:76:7e:4f:d8:
e9:6b:9a:0e:40:99:bf:9f:c6:ad:b6:8c:f7:2a:62:a8:9a:e0:
d7:1e:ad:cd:76:21:d1:80:0d:d4:40:9d:19:05:36:b1:ad:97:
80:9b:60:16:88:51:e4:8e:49:86:7e:ad:02:e3:3c:c5:f9:60:
ff:52:14:2a:e4:6e:4f:9a:99:12:d0:d0:75:f7:33:7d:df:b8:
54:3e:d4:a2:68:e8:3f:70:0d:f1:64:6f:fa:d7:44:0e:3d:47:
30:88:21:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjGf0vVOrWKTV6sBIz7vi5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkM2ZmNzgzNjUzMGQxYzQ3NGY0ZDA4OGI2YjM2MjI0ZmJm
Njk4MmQwHhcNMjUwODIwMDgwMTI3WhcNMjUwODIxMDgwMTI3WjAzMTEwLwYDVQQD
EyhjOWI3ZTU1YmRlZWIwZGVhODFhYmY4ZmI2ZWUxNTQ5MzdkNDMzYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOPq8uLoMyHStrQ5KwzVuJ6UityF
YDcJere2PPhwY1xWEDuLe7KkgP/p/euBElnHOuUPA6/naCZ8jgIDgI1dOZ46GZnx
v+OjpWBDFSM5MW95HKPGwqUM9MaGvNC7rsziW8M7KWaRF0aqMXHOnro2kzF+huAF
yo9iBhxO+bfDJyzjg9bHT0JXsfKHJfMYwk9didglDgoB+ePfCGJW0DIXfW6novyz
JrevZzSqcLjitJL0wrFtLVJhUMrp7VwzGv2g7OPv9JRCeno01UhYiK+3bl9LTX3Y
0ImPjhjfqyKgt76gVqAyXU2R4FaOwY4aaZSmhBI3SVCzv1qCwwVEwmX/DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm35Vve6w3qgav4+27hVJN9QzqeMB8GA1UdIwQY
MBaAFO0/94NlMNHEdPTQiLazYiT79pgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDkt
ZjNlMjRlMDc1ZTM1LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDktZjNlMjRlMDc1ZTM1
LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaL2kVLc7
rD6e9+njDBENotLMp19IpEQo3QEjAOplvBN4+C6Bl85TFKSJUpGiFpfM00K4k1OK
cG5IdufVZ8SkQLF7kPghxYfevWnJoR+KjYBprHUuAxFMQQdHcjJm+7eG5+YfYsdz
oje54g8e71cPwDOdiuExHPGfxd9GUO+wQQ1Y0PkCBd3gvCuEmT3Xw14emVAulcuq
X5jQbLdf3V12fk/Y6WuaDkCZv5/GrbaM9ypiqJrg1x6tzXYh0YAN1ECdGQU2sa2X
gJtgFohR5I5Jhn6tAuM8xflg/1IUKuRuT5qZEtDQdfczfd+4VD7UomjoP3AN8WRv
+tdEDj1HMIghvQ==
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:10:55 2025 by rpki-client