Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File: 7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier: M95awcMZxzNHLLtzjPjhcuKK29cx7z7PFYpvIGhjPM4=
Subject key identifier: 60:B1:3B:0A:F8:26:EA:50:CE:8F:D4:C0:22:DE:6D:AD:BF:3D:E3:00
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial: 0198D5F1B86A84BB5052DB018F479A36F917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: CQUbbFmWwK2AC/NgWT9AGzdVRfM1TUuiXWnZBU6jJ+I=)
2: 9fGQxsuW9o57MuSnTQw97jZkBOE.roa (hash: YnRNIOwoiTRXwdxivY6tYKVNEPgEv0Qon+zlyQpniFM=)
3: QQXV9PR2UUw9UDrT_DWglwU8ZS8.roa (hash: uF9Uh/MfGV5Li33CKiFO0iwqxXl5ow/SpNSUJI6hYY8=)
4: _y3NM5_0f7MsfhtkcKzuJLDPoBk.roa (hash: bwtNcBrGNEEfhGhbBMEoAmqI9q4hwa8bfh0IBzWlro4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b8:6a:84:bb:50:52:db:01:8f:47:9a:36:f9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=60b13b0af826ea50ce8fd4c022de6dadbf3de300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:bd:fd:8d:38:22:22:82:a8:69:51:69:c3:
f7:67:bf:11:77:b7:2b:e8:6d:b2:41:47:a6:4d:9e:
af:4c:15:3e:89:91:21:5e:58:84:eb:ec:53:ce:ed:
1f:ac:0d:e4:88:04:9b:2c:8d:af:d2:ba:ea:7e:28:
18:61:25:33:0d:62:97:53:a6:bb:fb:1d:8c:f6:e9:
05:3c:a9:f1:d7:74:ba:7e:cd:58:dc:0a:50:ef:27:
40:01:70:1e:29:61:c1:95:79:08:34:b7:2b:61:05:
eb:d4:ce:d3:97:c7:04:55:d9:e6:01:6c:86:6d:8d:
62:9a:04:02:db:6f:28:30:c9:e6:da:90:f3:e7:44:
e5:1d:f1:05:43:89:3d:40:67:87:69:b3:6a:9e:83:
27:77:87:25:8a:29:20:5f:74:18:63:d5:b3:ab:0e:
9f:bb:3a:2f:83:09:a1:1f:1b:be:08:51:27:81:e2:
e2:cf:b3:2a:56:bd:cd:8f:22:d0:09:8e:3d:bd:31:
4a:d8:a0:04:50:e3:18:b5:b5:5c:5e:4c:52:29:53:
30:b9:7f:00:53:c0:5e:68:48:92:9d:64:b9:99:74:
2d:88:90:79:b8:f7:1a:f8:31:f1:d7:e6:b4:4b:f6:
b5:1a:71:a2:69:84:6d:30:73:37:f5:37:d2:dd:44:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B1:3B:0A:F8:26:EA:50:CE:8F:D4:C0:22:DE:6D:AD:BF:3D:E3:00
X509v3 Authority Key Identifier:
keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:df:ac:20:a8:50:f5:0c:8e:32:3b:74:14:9c:84:7f:01:1a:
36:70:09:6f:6b:e3:0f:01:b1:6c:d5:06:37:d4:a2:cd:27:4f:
36:24:9b:f8:ac:64:23:fe:3e:3b:1b:e3:73:05:3d:7c:b8:9b:
df:df:c6:0b:13:c9:60:0f:6d:7b:90:1d:92:48:7e:f7:c8:92:
b1:61:08:f1:f3:c0:27:91:b8:ce:9f:a2:c2:d6:3f:eb:cd:97:
79:1f:c3:da:91:49:a6:d7:64:55:77:fd:05:a1:2b:f5:22:7f:
21:3f:24:6b:5e:81:e9:19:25:d4:3a:d9:a0:69:9b:b6:94:16:
db:04:23:49:17:b8:36:8b:04:96:46:2b:c4:92:12:d6:f9:29:
80:0b:2c:6a:5b:52:04:d5:f9:f6:7f:af:8b:e3:1c:f4:dd:cf:
33:0b:b1:22:67:3f:9a:aa:81:69:f7:67:6c:58:3c:00:00:88:
1d:1c:58:e7:e6:43:30:1e:6e:b6:47:c4:d4:c5:77:33:73:51:
b0:d4:86:a7:93:46:de:4c:3d:7e:9c:a4:a2:45:3d:02:c2:90:
97:ef:d5:96:98:bc:6c:cd:7c:be:9b:c0:ec:b1:56:a7:2b:03:
31:3b:d8:ac:bd:4a:bd:2b:27:25:7c:7d:55:4d:18:c0:fc:67:
45:7c:5e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8bhqhLtQUtsBj0eaNvkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz
MGY4ZDgwHhcNMjUwODIzMDgwMDQ1WhcNMjUwODI0MDgwMDQ1WjAzMTEwLwYDVQQD
Eyg2MGIxM2IwYWY4MjZlYTUwY2U4ZmQ0YzAyMmRlNmRhZGJmM2RlMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2me9/Y04IiKCqGlRacP3Z78Rd7cr
6G2yQUemTZ6vTBU+iZEhXliE6+xTzu0frA3kiASbLI2v0rrqfigYYSUzDWKXU6a7
+x2M9ukFPKnx13S6fs1Y3ApQ7ydAAXAeKWHBlXkINLcrYQXr1M7Tl8cEVdnmAWyG
bY1imgQC228oMMnm2pDz50TlHfEFQ4k9QGeHabNqnoMnd4cliikgX3QYY9Wzqw6f
uzovgwmhHxu+CFEngeLiz7MqVr3NjyLQCY49vTFK2KAEUOMYtbVcXkxSKVMwuX8A
U8BeaEiSnWS5mXQtiJB5uPca+DHx1+a0S/a1GnGiaYRtMHM39TfS3UQ0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCxOwr4JupQzo/UwCLeba2/PeMAMB8GA1UdIwQY
MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt
ODIxNzA3ZTJjMDAyLzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy
LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9+sIKhQ
9QyOMjt0FJyEfwEaNnAJb2vjDwGxbNUGN9SizSdPNiSb+KxkI/4+OxvjcwU9fLib
39/GCxPJYA9te5Adkkh+98iSsWEI8fPAJ5G4zp+iwtY/682XeR/D2pFJptdkVXf9
BaEr9SJ/IT8ka16B6Rkl1DrZoGmbtpQW2wQjSRe4NosElkYrxJIS1vkpgAssaltS
BNX59n+vi+Mc9N3PMwuxImc/mqqBafdnbFg8AACIHRxY5+ZDMB5utkfE1MV3M3NR
sNSGp5NG3kw9fpykokU9AsKQl+/Vlpi8bM18vpvA7LFWpysDMTvYrL1KvSsnJXx9
VU0YwPxnRXxelQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:20 2025 by rpki-client