Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: FLfqSo6EsI7scwjocJyvIatS3685UM/LYlOt3b9Bmbw=
Subject key identifier: A9:98:6F:99:90:7B:4D:47:3D:03:78:C1:A5:FC:CC:F9:19:2F:18:63
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 0198D6CDB98F0AB4EF94E9D2D769DB2CF944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1433
Signing time: Sat 23 Aug 2025 12:01:03 +0000
Manifest this update: Sat 23 Aug 2025 12:01:03 +0000
Manifest next update: Sun 24 Aug 2025 12:01:03 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: XhuRWM/ZFU3KJwZIotFKss13CzNmFDwFDTsg8pgXhFM=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b9:8f:0a:b4:ef:94:e9:d2:d7:69:db:2c:f9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Aug 23 12:01:03 2025 GMT
Not After : Aug 24 12:01:03 2025 GMT
Subject: CN=a9986f99907b4d473d0378c1a5fcccf9192f1863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:7b:53:07:16:80:0b:16:e8:ff:3a:3e:8e:
0e:4b:37:f7:08:b0:4c:17:20:0c:02:0a:ab:96:8c:
97:b6:0a:0e:f9:69:ef:a5:ac:06:cd:23:0e:b4:36:
fc:b4:08:17:30:e8:82:ec:83:6f:68:95:17:81:b0:
25:50:c7:a5:f0:70:2f:3e:a2:f4:da:c5:bc:1e:c0:
f5:b1:02:44:2c:8d:a6:b8:b3:78:69:78:85:aa:a4:
5d:df:4d:76:1b:cd:3e:84:fc:c4:67:52:c3:8e:40:
c9:a3:0a:08:cf:c5:35:a8:c7:4c:e7:9d:8f:2c:a1:
ec:43:b0:17:a0:a5:df:4b:21:f6:ca:e2:7a:d8:f3:
33:e3:e0:36:85:51:bd:57:08:20:42:bf:e1:00:58:
82:09:54:9b:c4:7b:26:b5:40:af:bf:ee:31:41:72:
11:ea:50:7d:0b:f8:ad:f0:95:bd:e9:38:c6:29:15:
56:1d:c9:2a:b0:7e:e7:0e:7d:1e:d7:cb:50:53:2e:
57:ad:42:79:e6:93:45:33:84:9d:3e:47:db:f9:b2:
31:2c:11:db:9d:43:7e:c6:15:1d:ee:54:b0:ca:8f:
82:c3:2a:a4:ab:ac:2a:27:b2:6a:14:47:63:76:4a:
d7:25:35:68:7f:69:e6:02:61:88:61:4d:3e:bd:de:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:6F:99:90:7B:4D:47:3D:03:78:C1:A5:FC:CC:F9:19:2F:18:63
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:63:bd:83:3c:58:fd:32:65:3e:4d:db:15:dd:4a:62:47:a5:
e2:22:6d:97:c5:29:47:b8:dd:8f:cc:cf:e5:ea:29:c1:40:08:
cd:b9:28:d9:09:a9:bf:97:38:c2:3c:c7:44:33:f0:c7:30:b5:
4a:e0:6c:26:51:8a:31:20:51:5f:1b:6b:3b:d5:4d:a0:4a:26:
8d:93:06:bd:b7:3e:13:9f:db:08:0d:e9:f0:c0:2a:8d:e9:13:
63:7c:ee:0f:95:e6:64:a3:34:c2:0b:6e:c9:55:9b:8f:69:87:
7a:c4:ed:ac:ee:a3:b7:c9:27:88:7f:e0:99:19:19:60:67:17:
a3:bd:f4:e5:5c:19:b1:ae:f4:d0:64:7d:18:38:89:e9:f3:8b:
77:cf:f4:d9:5c:c7:a3:e2:db:d3:54:b1:ea:ba:a2:5a:18:e7:
47:c8:2b:59:1a:2e:86:05:6b:5f:06:14:e8:d3:5d:9e:5c:a3:
2b:2b:ad:57:dd:6c:8f:e5:3d:03:bb:2e:74:7a:57:f2:a5:76:
4a:f3:b5:32:72:c3:be:35:b5:6d:18:18:c0:4e:34:15:42:34:
4a:5b:e1:38:e9:8e:30:6a:18:6b:0b:1b:47:97:73:99:5f:dc:
68:17:9c:09:fe:3c:eb:93:72:2d:f2:05:58:82:9c:36:5b:ba:
3c:b6:01:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzbmPCrTvlOnS12nbLPlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz
YmExMDAwHhcNMjUwODIzMTIwMTAzWhcNMjUwODI0MTIwMTAzWjAzMTEwLwYDVQQD
EyhhOTk4NmY5OTkwN2I0ZDQ3M2QwMzc4YzFhNWZjY2NmOTE5MmYxODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5N7UwcWgAsW6P86Po4OSzf3CLBM
FyAMAgqrloyXtgoO+WnvpawGzSMOtDb8tAgXMOiC7INvaJUXgbAlUMel8HAvPqL0
2sW8HsD1sQJELI2muLN4aXiFqqRd3012G80+hPzEZ1LDjkDJowoIz8U1qMdM552P
LKHsQ7AXoKXfSyH2yuJ62PMz4+A2hVG9VwggQr/hAFiCCVSbxHsmtUCvv+4xQXIR
6lB9C/it8JW96TjGKRVWHckqsH7nDn0e18tQUy5XrUJ55pNFM4SdPkfb+bIxLBHb
nUN+xhUd7lSwyo+Cwyqkq6wqJ7JqFEdjdkrXJTVof2nmAmGIYU0+vd5b6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmYb5mQe01HPQN4waX8zPkZLxhjMB8GA1UdIwQY
MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt
MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3
LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2O9gzxY
/TJlPk3bFd1KYkel4iJtl8UpR7jdj8zP5eopwUAIzbko2Qmpv5c4wjzHRDPwxzC1
SuBsJlGKMSBRXxtrO9VNoEomjZMGvbc+E5/bCA3p8MAqjekTY3zuD5XmZKM0wgtu
yVWbj2mHesTtrO6jt8kniH/gmRkZYGcXo7305VwZsa700GR9GDiJ6fOLd8/02VzH
o+Lb01Sx6rqiWhjnR8grWRouhgVrXwYU6NNdnlyjKyutV91sj+U9A7sudHpX8qV2
SvO1MnLDvjW1bRgYwE40FUI0SlvhOOmOMGoYawsbR5dzmV/caBecCf4865NyLfIF
WIKcNlu6PLYBhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:14 2025 by rpki-client