Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: qRnGJnwZklzi5eY/vnwDYdnpSVOPZNRknNWprhmJPMk=
Subject key identifier: 69:D4:A3:FA:48:57:25:49:3D:B5:34:73:F8:00:68:52:DB:F0:74:63
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 0198D8F27724CE238D57809ED85C334CDB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 22:00:25 +0000
Manifest this update: Sat 23 Aug 2025 22:00:25 +0000
Manifest next update: Sun 24 Aug 2025 22:00:25 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: RZrZjxomAu2rS350vAXsXax2JgnXaJGuqouRbxtAcPc=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:77:24:ce:23:8d:57:80:9e:d8:5c:33:4c:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Aug 23 22:00:25 2025 GMT
Not After : Aug 24 22:00:25 2025 GMT
Subject: CN=69d4a3fa485725493db53473f8006852dbf07463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:79:ef:1b:76:e7:f3:4a:ae:70:f9:44:f4:
53:9b:d0:73:69:40:bf:42:7b:c5:23:d7:c8:06:bf:
29:df:82:48:6f:d1:df:6f:5b:d4:70:64:e0:d3:db:
c0:f8:bb:34:b7:1e:94:49:2f:d5:1a:47:0c:03:89:
ec:e9:c0:42:51:6e:97:3b:a1:25:1a:b0:97:11:26:
ab:12:98:c1:c5:62:c8:73:c9:3f:93:de:31:6a:48:
d5:86:3c:aa:3f:ce:a8:66:26:42:f7:64:eb:74:20:
02:09:de:49:ee:d1:d1:d3:41:34:71:65:9b:37:c6:
f7:d4:eb:01:54:77:d6:fa:50:63:09:7e:24:b7:68:
04:33:dd:d7:cf:6d:14:a0:c8:a6:69:b9:a7:82:15:
cd:8f:1b:1c:82:ab:aa:be:33:ec:38:ad:58:de:aa:
dd:d1:34:93:eb:c9:96:8b:f3:77:71:bb:f9:99:21:
27:ba:50:26:48:c1:e8:ef:6d:01:8e:bf:42:73:52:
7d:6d:93:89:1a:2d:8c:77:71:17:3b:52:5f:aa:b3:
c5:eb:90:19:aa:44:88:e9:a6:7b:f4:ec:19:dd:26:
67:5a:5d:44:d5:59:bb:4a:31:a3:a6:dc:0d:b4:9f:
72:f8:e0:f0:59:47:a1:78:3a:66:ce:f6:02:62:88:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D4:A3:FA:48:57:25:49:3D:B5:34:73:F8:00:68:52:DB:F0:74:63
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0b:7d:21:35:b9:3a:91:65:de:0f:ef:c0:d1:43:7c:e5:a5:
5b:19:12:61:53:76:ee:07:9a:df:14:17:1c:51:95:08:23:b6:
07:00:0a:03:1d:79:fe:27:e1:f0:f4:1a:1e:29:ab:94:b3:c9:
f6:4c:c4:e1:dc:e2:9a:21:fa:d5:53:57:2d:04:d9:ce:e3:31:
0f:5a:8b:b4:52:4f:21:e1:f8:fa:3f:84:5f:f3:17:c8:57:df:
e7:72:6b:36:51:38:03:7a:69:3f:b8:c5:34:ec:00:60:4f:4e:
ec:7a:bf:6f:64:f3:62:a4:89:88:44:9c:23:90:43:98:c2:a7:
eb:b8:d3:18:d4:cb:07:50:61:91:54:88:a4:76:a2:3e:58:22:
a5:6f:30:fa:4d:61:10:3d:cb:9e:8a:13:c5:e1:c0:2d:a8:f8:
1c:66:fc:a5:65:13:11:73:43:b0:f1:e5:74:6f:7b:d0:3c:67:
f5:15:24:0f:a7:72:04:65:bc:f9:fa:28:9c:14:89:15:cc:9d:
28:72:95:8b:38:94:53:25:6d:12:29:6e:40:6e:d6:b6:44:95:
42:6c:89:91:21:87:b6:41:23:b1:78:50:d7:6f:76:0c:cb:66:
e4:ad:ca:65:79:ec:12:4e:99:ca:c4:23:a3:9c:38:5c:bc:7f:
8b:70:4a:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjY8nckziONV4Ce2FwzTNsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz
ZGU5NDgwHhcNMjUwODIzMjIwMDI1WhcNMjUwODI0MjIwMDI1WjAzMTEwLwYDVQQD
Eyg2OWQ0YTNmYTQ4NTcyNTQ5M2RiNTM0NzNmODAwNjg1MmRiZjA3NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXB57xt25/NKrnD5RPRTm9BzaUC/
QnvFI9fIBr8p34JIb9Hfb1vUcGTg09vA+Ls0tx6USS/VGkcMA4ns6cBCUW6XO6El
GrCXESarEpjBxWLIc8k/k94xakjVhjyqP86oZiZC92TrdCACCd5J7tHR00E0cWWb
N8b31OsBVHfW+lBjCX4kt2gEM93Xz20UoMimabmnghXNjxscgquqvjPsOK1Y3qrd
0TST68mWi/N3cbv5mSEnulAmSMHo720Bjr9Cc1J9bZOJGi2Md3EXO1JfqrPF65AZ
qkSI6aZ79OwZ3SZnWl1E1Vm7SjGjptwNtJ9y+ODwWUeheDpmzvYCYoizjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnUo/pIVyVJPbU0c/gAaFLb8HRjMB8GA1UdIwQY
MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt
MzViNTZjY2NhODQ5LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5
LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQt9ITW5
OpFl3g/vwNFDfOWlWxkSYVN27gea3xQXHFGVCCO2BwAKAx15/ifh8PQaHimrlLPJ
9kzE4dzimiH61VNXLQTZzuMxD1qLtFJPIeH4+j+EX/MXyFff53JrNlE4A3ppP7jF
NOwAYE9O7Hq/b2TzYqSJiEScI5BDmMKn67jTGNTLB1BhkVSIpHaiPlgipW8w+k1h
ED3LnooTxeHALaj4HGb8pWUTEXNDsPHldG970Dxn9RUkD6dyBGW8+foonBSJFcyd
KHKViziUUyVtEiluQG7WtkSVQmyJkSGHtkEjsXhQ1292DMtm5K3KZXnsEk6ZysQj
o5w4XLx/i3BKYw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:25:19 2025 by rpki-client