Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: 8yolb4ZyJSDQ2l0iCJBbSoGd9dXjEXd/8hS5HItE+BI=
Subject key identifier: 05:71:5B:04:CF:D0:FE:DF:F6:62:AB:90:AC:39:98:E3:F7:F9:9D:F8
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 0199228C80CF2FD0164BECF1A4DD3ECDFCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:00:57 +0000
Manifest this update: Sun 07 Sep 2025 05:00:57 +0000
Manifest next update: Mon 08 Sep 2025 05:00:57 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: UEoWkw1rftj5PjHuw73zhMJgWIJGxC3pS3zlVaxdUe8=)
2: b9uFZXxchqu_WU8UVL2lcEelg1M.roa (hash: NHGZBJUOGWUhtzmDGEI+zLtl0jv4NmQvyCdklZRG/7E=)
3: mGTK3wTvfhonNVwr6seWi2ASIP8.roa (hash: aYF3ywz/BlGpMX8QkbZOivZvZOPC3l60CNt4ow7w3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:80:cf:2f:d0:16:4b:ec:f1:a4:dd:3e:cd:fc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Sep 7 05:00:57 2025 GMT
Not After : Sep 8 05:00:57 2025 GMT
Subject: CN=05715b04cfd0fedff662ab90ac3998e3f7f99df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:7c:f6:a0:2f:86:a5:9c:69:04:18:e3:a7:
91:fe:c1:d6:f4:06:29:8c:14:2f:ea:82:49:cb:9a:
7a:28:2e:8e:8f:94:8d:af:b8:31:27:ce:2e:eb:2a:
0c:03:9d:98:16:9c:5c:c0:86:84:0d:6e:68:d7:fd:
aa:9b:ea:1b:8f:fc:0d:f7:1b:09:86:dd:41:72:e4:
2d:5b:3e:f4:c5:96:58:af:be:5f:1b:01:be:df:5d:
16:6b:2c:62:89:73:e4:da:6e:15:32:3d:d5:a2:ff:
7f:82:3e:70:3d:76:85:b9:d6:d9:f9:0b:26:ab:06:
83:49:81:31:15:18:fe:83:63:50:1e:ec:31:06:c0:
94:2e:96:c7:9f:bb:9c:65:e9:0c:2a:91:18:0b:28:
91:48:b9:e4:ab:62:54:01:b6:fa:3e:20:0d:46:1f:
46:f7:54:01:18:9b:10:b0:4c:02:f3:b6:4f:d3:df:
2b:bb:7a:e6:3a:1e:cd:02:93:94:8f:3b:c8:28:20:
17:64:29:da:5b:24:bc:be:51:61:5e:5a:9b:65:35:
84:b0:b9:03:42:a2:69:ee:ca:ca:89:d9:c6:2a:df:
f3:c2:9d:1a:05:30:40:73:42:67:56:cb:f1:34:49:
24:6e:d4:07:b0:d4:fa:3e:a4:5d:8b:07:db:9a:1b:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:5B:04:CF:D0:FE:DF:F6:62:AB:90:AC:39:98:E3:F7:F9:9D:F8
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6d:ef:93:93:53:2f:cb:3e:71:b1:3f:ad:e7:aa:9b:03:df:
e7:10:bf:1d:68:c5:32:ed:e6:62:e0:e1:56:4a:42:df:87:fd:
e9:2a:a8:b2:20:19:60:8b:7b:4c:05:eb:f6:16:c5:4d:93:3d:
b8:a3:36:bf:6c:b9:98:85:67:ee:27:8c:68:c8:91:7b:52:d4:
39:04:f1:f0:65:29:33:53:b2:f3:2a:2a:fa:28:04:a3:8b:cf:
b3:de:a5:d6:de:84:90:86:de:dd:4b:78:2e:cc:10:2c:0f:9d:
3d:a3:70:17:f4:67:cf:52:69:52:d0:fc:a6:c3:9d:67:ac:fc:
8f:8f:2c:70:38:7e:46:3a:64:bc:0a:f1:21:fe:78:ad:e4:2c:
4e:87:56:e7:4f:f2:61:6c:8b:9b:91:03:db:6d:04:bb:41:b2:
82:45:96:d5:d9:97:27:5f:5b:1d:93:53:88:1b:7f:16:69:b7:
16:25:80:c4:40:c7:5b:0a:e2:b8:d9:97:a9:d7:ce:42:65:69:
e9:bd:67:3b:9d:91:6b:cc:46:16:9f:d9:f5:56:72:49:de:04:
1f:59:63:a4:95:73:29:b8:55:75:3f:67:a3:1f:58:55:5b:0e:
6d:f0:9f:3e:10:73:4d:f8:68:d5:ac:fa:42:f9:56:8a:7f:9f:
68:5e:80:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijIDPL9AWS+zxpN0+zfyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTkwMmJkZmJkNzRjMzNlYTc2NDUzZDE0NWU3NmY2YWE4
NTdjNDEwHhcNMjUwOTA3MDUwMDU3WhcNMjUwOTA4MDUwMDU3WjAzMTEwLwYDVQQD
EygwNTcxNWIwNGNmZDBmZWRmZjY2MmFiOTBhYzM5OThlM2Y3Zjk5ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSB89qAvhqWcaQQY46eR/sHW9AYp
jBQv6oJJy5p6KC6Oj5SNr7gxJ84u6yoMA52YFpxcwIaEDW5o1/2qm+obj/wN9xsJ
ht1BcuQtWz70xZZYr75fGwG+310WayxiiXPk2m4VMj3Vov9/gj5wPXaFudbZ+Qsm
qwaDSYExFRj+g2NQHuwxBsCULpbHn7ucZekMKpEYCyiRSLnkq2JUAbb6PiANRh9G
91QBGJsQsEwC87ZP098ru3rmOh7NApOUjzvIKCAXZCnaWyS8vlFhXlqbZTWEsLkD
QqJp7srKidnGKt/zwp0aBTBAc0JnVsvxNEkkbtQHsNT6PqRdiwfbmhvIIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVxWwTP0P7f9mKrkKw5mOP3+Z34MB8GA1UdIwQY
MBaAFO1ZAr3710wz6nZFPRRedvaqhXxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDIt
NTAzMzZmNWQzNDBlLzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDItNTAzMzZmNWQzNDBl
LzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW3vk5NT
L8s+cbE/reeqmwPf5xC/HWjFMu3mYuDhVkpC34f96SqosiAZYIt7TAXr9hbFTZM9
uKM2v2y5mIVn7ieMaMiRe1LUOQTx8GUpM1Oy8yoq+igEo4vPs96l1t6EkIbe3Ut4
LswQLA+dPaNwF/Rnz1JpUtD8psOdZ6z8j48scDh+RjpkvArxIf54reQsTodW50/y
YWyLm5ED220Eu0GygkWW1dmXJ19bHZNTiBt/Fmm3FiWAxEDHWwriuNmXqdfOQmVp
6b1nO52Ra8xGFp/Z9VZySd4EH1ljpJVzKbhVdT9nox9YVVsObfCfPhBzTfho1az6
QvlWin+faF6AAg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:10 2025 by rpki-client