Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier: VskPPg/6AzN2llcNwL9Vi/iEDBmcp2o+9UErOtcyZ2Q=
Subject key identifier: 71:89:73:4A:D0:79:23:AD:E8:48:27:16:D9:09:86:26:B2:8E:81:F0
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial: 0198D47440A955D74C9B7E771901CA4E4125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 01:04:05 +0000
Manifest this update: Sat 23 Aug 2025 01:04:05 +0000
Manifest next update: Sun 24 Aug 2025 01:04:05 +0000
Files and hashes: 1: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (hash: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=)
2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: obWq8CjI2vP7yFqn2f726WFA2vnmt4aCXGPkzbiA/jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:40:a9:55:d7:4c:9b:7e:77:19:01:ca:4e:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
Validity
Not Before: Aug 23 01:04:05 2025 GMT
Not After : Aug 24 01:04:05 2025 GMT
Subject: CN=7189734ad07923ade8482716d9098626b28e81f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:25:a5:e3:48:11:c5:1d:61:ef:59:d3:55:
a6:79:ad:a0:7f:ba:e6:4b:68:f4:ab:50:a1:8a:f5:
98:fb:b1:46:bf:96:67:e0:7d:07:4f:a6:3e:ea:bd:
e6:a4:e6:f7:5f:bd:4d:22:2f:f7:4e:19:ab:e5:2d:
fa:e2:16:c8:56:63:80:ae:64:0b:a9:7a:67:0d:05:
36:1f:61:f3:15:af:3a:2f:20:ef:12:29:66:62:52:
c2:79:a6:2a:d9:2a:f0:70:80:9b:90:22:97:97:99:
89:e2:79:46:eb:3c:18:6a:c1:14:9d:20:1c:97:29:
38:3f:a5:4d:40:2c:5d:a3:c9:b4:6c:ab:3c:f6:be:
cc:47:bf:e6:b2:84:3f:04:b7:bc:03:86:ce:6f:80:
40:8d:22:1d:7a:3f:ba:59:2a:38:d0:ad:ed:7f:00:
e1:10:cb:ea:20:41:62:fb:be:07:66:9b:fe:e6:f9:
6b:7d:8c:64:84:43:ec:4a:83:a5:98:94:48:a5:04:
9d:f9:58:e8:70:8b:d1:ff:e0:90:66:27:07:10:1c:
ab:fb:9e:9d:f2:03:72:8f:ec:66:ad:c6:2c:0e:6c:
05:b1:04:6c:9d:d6:51:c3:bf:d2:a7:3b:87:57:0e:
ee:80:bd:d7:fb:41:60:58:ad:7d:c9:42:df:ae:89:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:73:4A:D0:79:23:AD:E8:48:27:16:D9:09:86:26:B2:8E:81:F0
X509v3 Authority Key Identifier:
keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7a:b7:dc:4e:da:44:ef:a3:b5:3a:6b:aa:35:f3:e5:e3:23:
b2:0e:60:f9:b8:cc:7b:1a:e5:8a:d2:e3:cb:58:da:c3:16:69:
a8:75:5d:35:ad:c9:23:1e:e2:3f:59:08:42:5d:8b:db:88:ef:
7c:62:52:c4:15:cc:11:e0:d2:08:60:32:c2:4b:23:2e:82:4f:
10:12:40:63:8f:18:24:da:3c:93:c7:b5:8f:54:d4:b3:a6:22:
c2:b7:c3:a8:51:ee:ee:d7:97:e9:ac:dc:2c:f8:6b:95:30:73:
31:e9:3d:56:e8:b0:9e:b2:37:ad:6a:f7:7b:dd:8c:30:e3:da:
73:2b:16:58:bb:21:f7:e9:d9:99:a0:9e:07:fa:2c:b8:91:5a:
cb:ae:a1:51:3b:ef:bb:6f:11:14:09:e4:9f:be:27:df:23:52:
4a:84:2f:71:2a:d9:61:c4:cf:4e:a3:b7:6d:21:34:82:cf:d8:
3f:b2:e1:b8:86:a8:e7:73:27:5d:dc:20:8b:0a:2a:e0:0c:82:
b7:4d:9a:e1:f2:03:f2:c9:45:47:27:c3:d7:91:d5:f3:1e:31:
93:fc:1e:30:20:50:79:df:19:20:72:23:8e:9a:45:78:ef:fb:
df:bb:bf:c1:d8:b9:1a:6a:66:f6:0a:6f:2f:83:dc:6f:1f:d0:
e6:18:a3:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdECpVddMm353GQHKTkElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjMyMmI1OTA0OGUxMDdiOTRhNmRiMDY1NTdhZjVmMGM5
YzI5MGMwHhcNMjUwODIzMDEwNDA1WhcNMjUwODI0MDEwNDA1WjAzMTEwLwYDVQQD
Eyg3MTg5NzM0YWQwNzkyM2FkZTg0ODI3MTZkOTA5ODYyNmIyOGU4MWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5glpeNIEcUdYe9Z01Wmea2gf7rm
S2j0q1ChivWY+7FGv5Zn4H0HT6Y+6r3mpOb3X71NIi/3Thmr5S364hbIVmOArmQL
qXpnDQU2H2HzFa86LyDvEilmYlLCeaYq2SrwcICbkCKXl5mJ4nlG6zwYasEUnSAc
lyk4P6VNQCxdo8m0bKs89r7MR7/msoQ/BLe8A4bOb4BAjSIdej+6WSo40K3tfwDh
EMvqIEFi+74HZpv+5vlrfYxkhEPsSoOlmJRIpQSd+VjocIvR/+CQZicHEByr+56d
8gNyj+xmrcYsDmwFsQRsndZRw7/SpzuHVw7ugL3X+0FgWK19yULfrolK2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGJc0rQeSOt6EgnFtkJhiayjoHwMB8GA1UdIwQY
MBaAFJOzIrWQSOEHuUptsGVXr18MnCkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZmY1MjAtNzI3MC00YTk4LWFlYzkt
ZWY2MDRkNDE2YzM3LzEvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83ZmY1MjAtNzI3MC00YTk4LWFlYzktZWY2MDRkNDE2YzM3
LzEvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXq33E7a
RO+jtTprqjXz5eMjsg5g+bjMexrlitLjy1jawxZpqHVdNa3JIx7iP1kIQl2L24jv
fGJSxBXMEeDSCGAywksjLoJPEBJAY48YJNo8k8e1j1TUs6YiwrfDqFHu7teX6azc
LPhrlTBzMek9VuiwnrI3rWr3e92MMOPacysWWLsh9+nZmaCeB/osuJFay66hUTvv
u28RFAnkn74n3yNSSoQvcSrZYcTPTqO3bSE0gs/YP7LhuIao53MnXdwgiwoq4AyC
t02a4fID8slFRyfD15HV8x4xk/weMCBQed8ZIHIjjppFeO/737u/wdi5Gmpm9gpv
L4Pcbx/Q5hijGQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:55:07 2025 by rpki-client