Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: Kq4uiC4uEZiNP/IBj8kcAxB0rVGtdtheYTvjGuxpRHw=
Subject key identifier: BE:C4:8F:51:95:93:DF:43:B2:68:D5:AA:3E:0E:AD:64:41:F6:0E:75
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 019922551E1E0B506C50752FF3B1124D53B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 03F5
Signing time: Sun 07 Sep 2025 04:00:27 +0000
Manifest this update: Sun 07 Sep 2025 04:00:27 +0000
Manifest next update: Mon 08 Sep 2025 04:00:27 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: rramebRZv0dwYFvg227WgEshp/6QKXisyEQrIzkE2DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:1e:1e:0b:50:6c:50:75:2f:f3:b1:12:4d:53:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Sep 7 04:00:27 2025 GMT
Not After : Sep 8 04:00:27 2025 GMT
Subject: CN=bec48f519593df43b268d5aa3e0ead6441f60e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:27:8e:01:15:dc:e1:85:03:61:cf:b0:62:
3b:3a:48:00:48:dd:69:97:9e:7b:47:e6:fa:36:43:
63:20:eb:fb:ca:88:93:59:34:90:f0:09:2e:22:46:
b7:bb:f4:a3:54:6f:80:f1:ee:d9:49:ee:c1:97:af:
71:7a:e5:92:7c:00:a9:fb:d4:29:5e:f5:fb:e8:a7:
26:85:5d:6e:4c:ea:a3:5a:40:20:d2:a0:ab:e3:4c:
ff:01:05:fe:3c:f6:49:a2:42:fa:18:00:8d:3b:64:
62:2f:b0:c3:b2:8e:44:fa:09:51:12:52:a7:83:50:
80:0f:e7:14:cc:b7:4e:1f:01:f0:ca:7f:4c:12:f8:
04:11:01:01:6c:7f:63:2c:30:38:80:a5:10:d6:13:
c7:44:71:6f:56:27:26:e2:dd:ec:c9:39:f2:a3:bf:
7a:f8:07:34:02:07:e5:8b:e8:33:18:0a:0c:9f:ed:
60:b6:3c:bb:13:74:91:15:69:5c:4e:f4:f7:78:ea:
12:a4:c8:17:80:bd:10:a0:56:99:90:45:73:20:d2:
74:c4:c6:19:87:a2:8d:19:43:03:42:ba:c7:05:48:
35:6d:9b:c4:10:2d:f0:e5:25:88:d8:7c:44:d0:38:
cd:5e:89:a2:df:58:66:8c:0d:0b:98:6b:58:5c:c2:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:8F:51:95:93:DF:43:B2:68:D5:AA:3E:0E:AD:64:41:F6:0E:75
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:91:a3:64:df:72:75:27:a9:8b:59:6c:04:3f:0e:32:ad:37:
a9:cb:88:5f:b6:43:75:0d:aa:59:d7:9b:a2:8d:00:4f:ca:c2:
6d:87:7c:c1:a6:63:17:bc:05:b2:d5:b6:d5:1e:00:c1:66:72:
1f:a1:ea:9e:e8:9e:01:9a:8b:c7:c2:1f:e6:a1:cb:1a:cb:40:
3f:d0:39:90:1b:43:47:3d:0a:d6:8a:44:21:fb:7d:98:cb:77:
f5:dd:2e:40:6f:78:a3:4d:84:53:d7:e8:9b:4b:45:47:04:fc:
5d:ce:d6:22:f9:2d:48:d0:85:a7:e8:af:7e:1f:e8:26:d2:fc:
2e:0f:8b:54:4a:3d:ef:1b:38:cc:6b:2d:62:39:d7:77:70:59:
7e:bf:40:80:70:a1:a0:e6:ab:f3:2f:1e:7b:9c:e8:64:ef:2b:
ce:8c:58:5a:99:65:38:b0:59:4f:8e:17:f4:88:7f:34:ce:87:
94:f3:13:fa:63:8d:f0:8d:c6:c1:94:57:63:85:72:83:11:e9:
06:38:7b:20:a1:fd:fc:ee:d9:ff:8b:70:5f:75:8c:e9:cb:df:
91:97:a5:91:30:13:55:d6:79:d6:8e:6c:55:11:ec:5f:a7:4c:
5b:fc:f8:19:9f:36:f7:fc:0e:2f:ae:1b:fb:41:38:ea:9f:b7:
2b:62:d9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVR4eC1BsUHUv87ESTVOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx
Y2E4ZTEwHhcNMjUwOTA3MDQwMDI3WhcNMjUwOTA4MDQwMDI3WjAzMTEwLwYDVQQD
EyhiZWM0OGY1MTk1OTNkZjQzYjI2OGQ1YWEzZTBlYWQ2NDQxZjYwZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/knjgEV3OGFA2HPsGI7OkgASN1p
l557R+b6NkNjIOv7yoiTWTSQ8AkuIka3u/SjVG+A8e7ZSe7Bl69xeuWSfACp+9Qp
XvX76KcmhV1uTOqjWkAg0qCr40z/AQX+PPZJokL6GACNO2RiL7DDso5E+glRElKn
g1CAD+cUzLdOHwHwyn9MEvgEEQEBbH9jLDA4gKUQ1hPHRHFvVicm4t3syTnyo796
+Ac0Agfli+gzGAoMn+1gtjy7E3SRFWlcTvT3eOoSpMgXgL0QoFaZkEVzINJ0xMYZ
h6KNGUMDQrrHBUg1bZvEEC3w5SWI2HxE0DjNXomi31hmjA0LmGtYXMLGIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7Ej1GVk99DsmjVqj4OrWRB9g51MB8GA1UdIwQY
MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt
NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk
LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJGjZN9y
dSepi1lsBD8OMq03qcuIX7ZDdQ2qWdeboo0AT8rCbYd8waZjF7wFstW21R4AwWZy
H6HqnuieAZqLx8If5qHLGstAP9A5kBtDRz0K1opEIft9mMt39d0uQG94o02EU9fo
m0tFRwT8Xc7WIvktSNCFp+ivfh/oJtL8Lg+LVEo97xs4zGstYjnXd3BZfr9AgHCh
oOar8y8ee5zoZO8rzoxYWpllOLBZT44X9Ih/NM6HlPMT+mON8I3GwZRXY4VygxHp
Bjh7IKH9/O7Z/4twX3WM6cvfkZelkTATVdZ51o5sVRHsX6dMW/z4GZ829/wOL64b
+0E46p+3K2LZaQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:14 2025 by rpki-client