Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier: hrXjhUJgBg8nIKxcsvohQj7B+H42jiHODEZlKfzGKQk=
Subject key identifier: 33:CB:F5:72:EC:DA:11:D0:59:75:DC:F8:A1:2A:A9:6A:D0:3B:D6:8A
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 0199247B50DFA705D8F8259F9D7B639EABBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number: 04C6
Signing time: Sun 07 Sep 2025 14:01:25 +0000
Manifest this update: Sun 07 Sep 2025 14:01:25 +0000
Manifest next update: Mon 08 Sep 2025 14:01:25 +0000
Files and hashes: 1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=)
2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: SUGAZ0ode0210ToNyP+G3zUQAtTcvz4VlcS98TCw1+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7b:50:df:a7:05:d8:f8:25:9f:9d:7b:63:9e:ab:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Sep 7 14:01:25 2025 GMT
Not After : Sep 8 14:01:25 2025 GMT
Subject: CN=33cbf572ecda11d05975dcf8a12aa96ad03bd68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8e:23:4a:72:eb:86:07:b5:fd:d2:13:16:fb:
4f:36:7b:51:22:a1:61:30:0d:86:93:e8:f6:8a:2c:
b1:f1:90:5c:b0:bf:d7:bf:87:46:7a:3f:5f:0d:cd:
03:a1:c0:ba:98:27:27:55:a0:21:7b:14:46:aa:a8:
c1:10:bd:1d:e9:5c:18:28:ef:9a:94:65:b7:52:d6:
dc:2b:0d:83:4b:98:77:84:27:4c:d6:42:13:af:7d:
c2:a6:03:c6:1b:16:23:08:04:bd:a3:53:da:e4:cf:
8c:d1:d6:95:7e:5e:f2:4e:95:85:fa:ab:0d:f3:c4:
79:5e:2e:5c:e0:8f:78:ba:06:83:98:e1:a3:d9:e0:
20:03:7a:f4:44:a4:a0:d8:31:86:97:7d:2e:de:fb:
f0:b9:97:9d:a8:2c:9b:3b:5f:65:8d:0d:0c:4b:53:
e0:62:e6:55:b5:9c:c3:87:44:ce:74:c3:81:db:69:
74:4f:0d:a7:2f:b8:1f:c6:50:b5:83:f0:30:24:42:
8d:af:b6:3f:a5:9d:b9:21:3a:45:d6:2e:45:c8:25:
b8:84:9f:22:f6:0d:fe:77:74:81:36:2d:56:4a:77:
98:ad:33:0b:b7:af:ec:f4:be:70:12:76:09:7f:1e:
0f:c1:c0:be:61:76:a8:e7:b1:d1:24:6f:3f:04:14:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CB:F5:72:EC:DA:11:D0:59:75:DC:F8:A1:2A:A9:6A:D0:3B:D6:8A
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:67:52:45:5d:3a:df:be:e7:cd:f8:29:ed:f4:93:aa:61:
2e:49:29:b1:03:6a:74:f1:f4:2a:d2:4c:ca:1a:84:89:b6:5b:
ca:4b:ed:95:96:80:64:60:a7:7f:68:d9:8e:40:88:8d:25:c5:
00:38:46:35:44:69:0b:f7:1f:a0:0e:ab:9c:5b:be:77:b6:f8:
f4:fb:4a:0d:97:01:ee:e7:c6:9f:61:4b:72:bf:15:d8:c1:e7:
43:d4:66:c9:89:d6:2c:f2:62:59:bf:6d:03:f5:2b:17:79:ab:
db:ce:49:12:3e:e0:90:1e:b2:cc:5d:c1:38:f8:d7:05:6d:9c:
70:76:8a:63:31:b4:1b:41:fc:59:ac:8a:fd:ca:89:e1:bc:9d:
34:72:09:bb:e5:9c:cb:fe:39:9e:45:80:45:3e:5e:1b:47:02:
d2:10:02:aa:57:fd:a8:f7:a9:09:e8:92:a2:35:48:8e:80:11:
f4:ba:e3:82:36:e5:a8:be:3f:91:20:52:a4:22:67:0d:cf:68:
26:03:5d:c1:84:d1:2d:29:90:01:15:fc:a2:b7:ba:fc:68:c9:
79:47:eb:c7:74:29:17:16:09:e4:06:d8:9c:c2:fa:9e:87:e3:
9a:a5:be:d0:d5:98:59:1e:cf:96:f2:c7:bc:e4:e5:90:30:89:
2e:a5:e6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkke1DfpwXY+CWfnXtjnqu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YjkyYmRlYTViOTdhY2FiYzJmNjU4YzQxMmJmNzQ2ZWUw
ZTIwN2QwHhcNMjUwOTA3MTQwMTI1WhcNMjUwOTA4MTQwMTI1WjAzMTEwLwYDVQQD
EygzM2NiZjU3MmVjZGExMWQwNTk3NWRjZjhhMTJhYTk2YWQwM2JkNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA244jSnLrhge1/dITFvtPNntRIqFh
MA2Gk+j2iiyx8ZBcsL/Xv4dGej9fDc0DocC6mCcnVaAhexRGqqjBEL0d6VwYKO+a
lGW3UtbcKw2DS5h3hCdM1kITr33CpgPGGxYjCAS9o1Pa5M+M0daVfl7yTpWF+qsN
88R5Xi5c4I94ugaDmOGj2eAgA3r0RKSg2DGGl30u3vvwuZedqCybO19ljQ0MS1Pg
YuZVtZzDh0TOdMOB22l0Tw2nL7gfxlC1g/AwJEKNr7Y/pZ25ITpF1i5FyCW4hJ8i
9g3+d3SBNi1WSneYrTMLt6/s9L5wEnYJfx4PwcC+YXao57HRJG8/BBQJlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPL9XLs2hHQWXXc+KEqqWrQO9aKMB8GA1UdIwQY
MBaAFLe5K96luXrKvC9ljEEr90buDiB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODIt
ZGQ5MDA5YjMzMTdkLzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODItZGQ5MDA5YjMzMTdk
LzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOepnUkVd
Ot++5834Ke30k6phLkkpsQNqdPH0KtJMyhqEibZbykvtlZaAZGCnf2jZjkCIjSXF
ADhGNURpC/cfoA6rnFu+d7b49PtKDZcB7ufGn2FLcr8V2MHnQ9RmyYnWLPJiWb9t
A/UrF3mr285JEj7gkB6yzF3BOPjXBW2ccHaKYzG0G0H8WayK/cqJ4bydNHIJu+Wc
y/45nkWART5eG0cC0hACqlf9qPepCeiSojVIjoAR9LrjgjblqL4/kSBSpCJnDc9o
JgNdwYTRLSmQARX8ore6/GjJeUfrx3QpFxYJ5AbYnML6nofjmqW+0NWYWR7PlvLH
vOTlkDCJLqXmfQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:12:22 2025 by rpki-client