Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: H/uwdZ+JmTi9GQyCaf3KVLtMITget1vKwGDWmWhuNa4=
Subject key identifier: 3F:1A:04:91:F4:A9:E6:EC:32:EC:CA:83:94:75:29:43:0F:27:4D:9C
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 0198D47402BB69B0D37040EC7E2F7F527AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:49 +0000
Manifest this update: Sat 23 Aug 2025 01:03:49 +0000
Manifest next update: Sun 24 Aug 2025 01:03:49 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: puEDko0VorpdI3XuP5jTpjZWRi0B7jdbS2cfpntHJNY=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:02:bb:69:b0:d3:70:40:ec:7e:2f:7f:52:7a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Aug 23 01:03:49 2025 GMT
Not After : Aug 24 01:03:49 2025 GMT
Subject: CN=3f1a0491f4a9e6ec32ecca83947529430f274d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:8c:c1:b5:6c:26:c2:9a:60:ce:6e:2d:48:
34:25:9b:52:83:1d:19:95:13:91:16:b3:5a:1d:e9:
da:6f:6b:90:48:d0:3b:f5:7f:22:ee:bf:8d:d1:0c:
08:13:6f:7c:3d:b7:f3:42:22:7a:81:39:d8:e3:5d:
3d:04:3d:5b:89:2e:98:ff:a8:9f:47:6b:b5:91:50:
4f:94:92:93:65:68:db:cb:a6:03:2f:6b:f2:4c:1f:
49:a4:c0:34:90:7d:68:74:8b:45:b2:59:74:18:95:
b4:3c:4f:56:49:19:2f:3f:a3:18:9a:11:e1:02:a0:
b8:2e:e1:ad:f1:fc:1d:19:c9:fd:a9:89:75:a5:78:
24:ac:b3:4d:71:71:de:e5:09:2a:0e:02:36:e3:49:
2f:dc:18:af:3f:c1:10:a2:76:21:f2:8f:9a:a4:cb:
5b:c3:ac:f0:4d:70:75:0b:41:12:4a:6f:bd:14:88:
6f:c9:48:93:a2:4c:75:88:46:64:ae:52:b2:ec:cc:
63:49:7a:d1:de:a7:2b:16:fb:56:87:fc:66:5a:27:
41:eb:29:58:13:2b:32:b0:44:e2:f4:74:65:e3:c5:
c5:70:96:66:f0:04:c5:db:7f:71:9b:60:64:99:d6:
7d:a5:fd:34:33:fe:6a:ae:53:5e:df:f4:80:05:69:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:04:91:F4:A9:E6:EC:32:EC:CA:83:94:75:29:43:0F:27:4D:9C
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:de:22:fd:52:ba:da:6c:b8:f2:91:af:2a:83:f5:75:69:91:
47:93:e7:02:f3:c7:40:4b:d4:67:cc:bb:ee:cc:98:bc:74:a4:
66:e1:31:ea:07:42:ea:d1:66:1a:0d:28:75:b6:5e:e6:72:7b:
1f:0f:67:67:c6:bc:ca:28:18:5d:31:57:2f:21:b4:d3:b1:70:
0d:00:e0:5e:84:1c:2c:2f:36:ad:81:90:fe:0b:e5:91:0d:ec:
9a:e6:ee:15:88:98:25:c6:42:9c:ed:72:fe:f6:7e:b4:31:28:
25:06:69:1e:56:65:25:16:b8:d3:f8:56:17:bc:b5:75:c5:a2:
fa:e5:32:8d:8f:7b:c3:a6:4d:85:01:b3:fd:40:ed:a2:cd:1d:
e4:f2:5d:5b:de:d9:f0:12:b5:92:e3:d7:ef:24:38:e8:af:a0:
4d:2a:ff:55:99:45:ef:89:f7:6d:46:5e:fd:e2:c1:78:13:76:
c9:ed:c2:d0:b0:c7:8b:c0:2d:af:23:43:d3:8f:21:3a:35:f1:
f0:99:9c:7d:a4:66:6c:01:d7:0f:f4:21:75:2e:08:f3:ce:4c:
2f:7b:ba:68:6f:dc:7b:f7:3c:fb:c7:a7:e4:2e:cf:e6:ab:4f:
30:39:81:ce:0d:ad:bb:e2:15:f2:9d:97:6c:82:ea:c3:4e:c8:
2b:16:bd:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdAK7abDTcEDsfi9/UnqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzIyMTM4YzBhZjgxYzVjYmY0M2E0ZjhkZGQ3YzhkZTEz
YzcyMzAwHhcNMjUwODIzMDEwMzQ5WhcNMjUwODI0MDEwMzQ5WjAzMTEwLwYDVQQD
EygzZjFhMDQ5MWY0YTllNmVjMzJlY2NhODM5NDc1Mjk0MzBmMjc0ZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtCMwbVsJsKaYM5uLUg0JZtSgx0Z
lRORFrNaHenab2uQSNA79X8i7r+N0QwIE298PbfzQiJ6gTnY4109BD1biS6Y/6if
R2u1kVBPlJKTZWjby6YDL2vyTB9JpMA0kH1odItFsll0GJW0PE9WSRkvP6MYmhHh
AqC4LuGt8fwdGcn9qYl1pXgkrLNNcXHe5QkqDgI240kv3BivP8EQonYh8o+apMtb
w6zwTXB1C0ESSm+9FIhvyUiTokx1iEZkrlKy7MxjSXrR3qcrFvtWh/xmWidB6ylY
EysysETi9HRl48XFcJZm8ATF239xm2BkmdZ9pf00M/5qrlNe3/SABWn9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8aBJH0qebsMuzKg5R1KUMPJ02cMB8GA1UdIwQY
MBaAFO3CITjAr4HFy/Q6T43dfI3hPHIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYt
NTUzOGRjMGJiMDk5LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYtNTUzOGRjMGJiMDk5
LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAld4i/VK6
2my48pGvKoP1dWmRR5PnAvPHQEvUZ8y77syYvHSkZuEx6gdC6tFmGg0odbZe5nJ7
Hw9nZ8a8yigYXTFXLyG007FwDQDgXoQcLC82rYGQ/gvlkQ3smubuFYiYJcZCnO1y
/vZ+tDEoJQZpHlZlJRa40/hWF7y1dcWi+uUyjY97w6ZNhQGz/UDtos0d5PJdW97Z
8BK1kuPX7yQ46K+gTSr/VZlF74n3bUZe/eLBeBN2ye3C0LDHi8AtryND048hOjXx
8JmcfaRmbAHXD/QhdS4I885ML3u6aG/ce/c8+8en5C7P5qtPMDmBzg2tu+IV8p2X
bILqw07IKxa9BQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:46 2025 by rpki-client