Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
File: 7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json)
Hash identifier: uePrpTLD5mXUmoLPDWDdDEFF7z32vefvTdH3OrbW/PQ=
Subject key identifier: BE:71:31:F2:2F:27:D4:41:E3:CA:26:24:EA:10:47:22:1B:57:9C:9E
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 0198D6605E3C464F5EE126FAAFBB57FE63A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
Manifest number: 1147
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: 1-YiE0zD6bdHHxyrrtrH0MPpWMjk.roa (hash: XJcU+t3QaDJvlCxOS1ialUKrIkBR/f23WGzBhACpW8s=)
2: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: FcwwfNbJO0sNbZLq3aMaJkUAt54oSQg5OFcRWPmt50I=)
3: 9qJ2qCMH8lpsE2-phq-dIrQ57CY.roa (hash: WdhyGpssttqpcG9ze4xYfPzeHqHFMaF5YOOXaKoHfJ8=)
4: rxB_SKD05flXCVb5a9Y1L-kYSOM.roa (hash: xxBSeAniUfhkRNjna0RuKk7EzeOrdkzGj8pWxibPVsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5e:3c:46:4f:5e:e1:26:fa:af:bb:57:fe:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=be7131f22f27d441e3ca2624ea1047221b579c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:91:59:6b:f7:3a:72:f9:81:34:a8:af:76:
9f:56:a2:5b:6f:f0:76:b8:74:f8:0f:36:79:22:6d:
cd:af:11:ad:dd:57:25:ea:fe:b4:09:ce:f0:78:af:
23:e0:b0:19:c3:ff:92:47:1b:22:e2:01:14:ea:bf:
c5:a8:fe:dd:8e:37:c5:29:1b:0f:11:73:c3:28:d1:
b2:24:67:bb:2a:75:fa:e4:7d:1e:ec:4d:68:8c:c4:
64:cc:a0:68:ee:77:fe:ba:00:cb:70:c5:35:40:2b:
a5:ec:60:7a:9e:69:18:6b:c7:4f:1f:ea:3b:b2:4b:
46:12:eb:45:de:a7:f1:f7:4e:95:d2:7c:df:48:27:
3c:16:3c:9a:30:3b:9d:d5:14:ba:98:fd:b9:39:bc:
ce:06:97:8c:21:1a:36:6b:5a:1a:e2:61:69:fa:cf:
0b:60:9c:78:52:7d:71:96:fa:f5:13:19:7b:b3:5a:
b0:96:9b:c5:ac:98:60:12:ff:eb:65:47:c6:c4:fe:
9b:c8:80:b2:95:53:7b:2c:36:8b:12:c8:df:e9:6a:
e6:9a:55:b8:c7:47:ac:1b:90:cc:2b:1a:6d:44:70:
43:e3:eb:d4:cc:56:26:41:dd:20:d2:e5:70:8b:b4:
d9:91:da:97:af:a1:53:7c:e9:92:e6:6d:73:23:60:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:31:F2:2F:27:D4:41:E3:CA:26:24:EA:10:47:22:1B:57:9C:9E
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:2c:0a:85:a0:fd:75:b2:d9:ba:69:29:9f:5d:77:62:6f:
ff:4f:40:2c:5f:3f:d6:01:4b:43:79:fb:5f:1a:9b:78:23:c8:
15:1e:f5:e1:13:e8:d2:e8:a5:26:4e:52:79:cc:b1:f2:4b:90:
fb:3c:d8:bc:d1:66:ba:1e:ac:7c:0e:b1:f2:6f:dc:9d:42:73:
43:5f:d4:6b:ca:aa:77:29:da:1d:22:b4:e8:42:47:92:28:cf:
d0:59:0b:f5:11:74:a4:1f:8d:ca:c6:f6:04:c3:73:eb:8c:52:
07:2d:24:d9:d2:66:4a:71:6e:bf:d8:c6:58:22:1a:a1:96:42:
ed:f8:ac:1a:f9:b3:a9:72:ba:99:fe:e6:54:e8:b1:c8:78:c3:
07:db:b6:19:ed:35:37:22:28:78:59:45:1e:bd:b8:41:65:dc:
bc:28:40:97:6c:48:ff:04:48:24:4d:5a:31:d4:da:a8:10:78:
f0:f9:72:35:96:12:56:91:ee:46:c6:37:8f:50:e3:87:e7:78:
b0:13:7d:13:3a:29:89:c2:8f:24:cb:88:c5:50:d9:b6:e9:48:
c3:c7:39:eb:f9:86:27:07:70:44:f2:a2:76:f9:8e:37:48:7e:
ab:62:d1:94:18:1a:cc:9a:54:5f:23:ef:54:46:1d:4a:90:8c:
9d:e2:13:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYF48Rk9e4Sb6r7tX/mOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjdjYTlmZmFmZTcyYTMwOTY2ZjdlNDNkOTJiNThlNzc0
Y2U3NDEwHhcNMjUwODIzMTAwMTM2WhcNMjUwODI0MTAwMTM2WjAzMTEwLwYDVQQD
EyhiZTcxMzFmMjJmMjdkNDQxZTNjYTI2MjRlYTEwNDcyMjFiNTc5YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGGRWWv3OnL5gTSor3afVqJbb/B2
uHT4DzZ5Im3NrxGt3Vcl6v60Cc7weK8j4LAZw/+SRxsi4gEU6r/FqP7djjfFKRsP
EXPDKNGyJGe7KnX65H0e7E1ojMRkzKBo7nf+ugDLcMU1QCul7GB6nmkYa8dPH+o7
sktGEutF3qfx906V0nzfSCc8FjyaMDud1RS6mP25ObzOBpeMIRo2a1oa4mFp+s8L
YJx4Un1xlvr1Exl7s1qwlpvFrJhgEv/rZUfGxP6byICylVN7LDaLEsjf6WrmmlW4
x0esG5DMKxptRHBD4+vUzFYmQd0g0uVwi7TZkdqXr6FTfOmS5m1zI2DLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5xMfIvJ9RB48omJOoQRyIbV5yeMB8GA1UdIwQY
MBaAFOz3yp/6/nKjCWb35D2StY53TOdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUt
OTgxZmJiMzQ0MmRkLzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUtOTgxZmJiMzQ0MmRk
LzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVosCoWg
/XWy2bppKZ9dd2Jv/09ALF8/1gFLQ3n7XxqbeCPIFR714RPo0uilJk5Secyx8kuQ
+zzYvNFmuh6sfA6x8m/cnUJzQ1/Ua8qqdynaHSK06EJHkijP0FkL9RF0pB+Nysb2
BMNz64xSBy0k2dJmSnFuv9jGWCIaoZZC7fisGvmzqXK6mf7mVOixyHjDB9u2Ge01
NyIoeFlFHr24QWXcvChAl2xI/wRIJE1aMdTaqBB48PlyNZYSVpHuRsY3j1Djh+d4
sBN9EzopicKPJMuIxVDZtulIw8c56/mGJwdwRPKidvmON0h+q2LRlBgazJpUXyPv
VEYdSpCMneITZg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:05 2025 by rpki-client