Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: aQpQN+2BmpUANUH8YpZaTd9O0uqKINcyQZd3F89qltM=
Subject key identifier: 1D:E5:97:19:29:5D:4B:17:AA:33:24:0C:6B:93:46:8A:5A:D3:45:4A
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 0198D4A8190D775C25850EE89E73C7F64C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 05E6
Signing time: Sat 23 Aug 2025 02:00:42 +0000
Manifest this update: Sat 23 Aug 2025 02:00:42 +0000
Manifest next update: Sun 24 Aug 2025 02:00:42 +0000
Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: L5uGE9g3FbkZfBBYAtBShPzNlAeRqxayGHa02mTia4g=)
2: b0DuHL5Cx5oz0wmVPh9cLl0pYOs.roa (hash: 0vfXcmcuR2v9A+x1r5OGZhYbvc69ht+h4cnEKv+PZSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:19:0d:77:5c:25:85:0e:e8:9e:73:c7:f6:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Aug 23 02:00:42 2025 GMT
Not After : Aug 24 02:00:42 2025 GMT
Subject: CN=1de59719295d4b17aa33240c6b93468a5ad3454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:17:47:78:16:61:4c:bd:73:65:91:ea:b7:
46:e6:41:fc:fd:4f:4c:2a:39:bd:a8:7b:13:4f:d8:
ee:6a:d4:7e:7d:fb:46:c0:c8:cb:ff:c2:3f:e6:9d:
29:07:a4:48:31:30:c9:fa:2c:1a:f7:0c:c7:bd:03:
63:3e:f4:51:92:13:eb:26:47:0b:9c:b1:98:73:38:
43:76:c5:c7:88:5c:3f:4f:0e:bb:9d:80:d9:dd:96:
af:1a:6b:55:eb:0c:51:5a:96:9a:21:06:da:5d:f9:
28:d4:3c:c6:d4:f2:71:67:44:3a:76:5e:96:c6:5a:
07:d8:47:ec:01:0c:34:cf:50:f0:c7:f4:a2:02:f9:
7e:61:2e:c4:18:60:c0:0c:9c:20:2d:72:39:10:94:
30:96:dc:92:74:2c:d8:ac:eb:f8:3e:34:7d:a8:da:
8e:67:b5:f0:ed:20:19:63:57:b3:a1:82:59:6e:05:
d5:03:45:6e:b1:0a:cf:e8:ba:fc:9e:6a:a7:06:25:
c0:b7:c4:97:ed:21:28:71:4c:38:c6:fa:9b:15:3e:
61:03:0a:7e:6f:23:8a:14:6e:d4:2a:55:42:d2:be:
0e:b7:5b:3e:b2:38:17:84:f9:42:56:3e:84:7b:20:
c8:2e:2e:8a:c9:71:b9:7a:6c:96:2b:b0:c1:95:6c:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E5:97:19:29:5D:4B:17:AA:33:24:0C:6B:93:46:8A:5A:D3:45:4A
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e0:21:6b:09:79:7c:35:9e:7d:10:47:94:e1:12:5f:26:5e:
fd:58:9b:38:41:07:55:fb:90:43:0b:f3:18:6a:55:fc:bb:ad:
ce:e5:ba:d2:86:11:63:0b:a6:37:0d:a5:f3:fa:86:91:07:3f:
e3:39:01:7f:a0:1e:25:5b:bd:85:33:d1:ce:99:c6:3a:31:6f:
41:02:32:28:f4:0e:35:dc:78:31:6d:83:9a:8a:b4:bb:0d:f8:
95:f8:5b:6b:d6:e9:90:1e:46:06:7a:08:d9:60:08:1a:32:68:
ff:aa:b9:1c:8b:4e:f2:ce:03:4c:f5:09:26:77:c6:02:9d:cb:
e4:13:c6:ee:aa:7f:67:f9:ba:2d:cd:4d:0d:ee:2c:6a:80:ab:
be:1f:99:b0:59:d1:4e:77:66:5c:26:99:de:4f:fb:a4:3f:0a:
3b:69:da:63:6e:ab:17:42:5e:8b:fd:7f:68:a0:74:87:0f:e2:
8c:31:7f:e1:15:f6:ea:a7:23:71:b7:0e:06:e5:14:96:c9:2c:
e2:69:66:3a:1c:07:64:e0:35:f4:3b:0a:26:26:06:cc:53:09:
ef:fe:ce:05:3e:7e:a7:9e:e6:1d:48:e8:98:2f:ea:78:7d:19:
02:ef:b7:87:00:de:5f:c4:22:a9:c1:f5:8e:47:ea:66:b9:b2:
3a:37:b0:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBkNd1wlhQ7onnPH9kxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWVmZmMyNzE0NjI0YjkyMzdkYWRlNTNmYmQyNDQxZjQx
OTJhYzcwHhcNMjUwODIzMDIwMDQyWhcNMjUwODI0MDIwMDQyWjAzMTEwLwYDVQQD
EygxZGU1OTcxOTI5NWQ0YjE3YWEzMzI0MGM2YjkzNDY4YTVhZDM0NTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWMXR3gWYUy9c2WR6rdG5kH8/U9M
Kjm9qHsTT9juatR+fftGwMjL/8I/5p0pB6RIMTDJ+iwa9wzHvQNjPvRRkhPrJkcL
nLGYczhDdsXHiFw/Tw67nYDZ3ZavGmtV6wxRWpaaIQbaXfko1DzG1PJxZ0Q6dl6W
xloH2EfsAQw0z1Dwx/SiAvl+YS7EGGDADJwgLXI5EJQwltySdCzYrOv4PjR9qNqO
Z7Xw7SAZY1ezoYJZbgXVA0VusQrP6Lr8nmqnBiXAt8SX7SEocUw4xvqbFT5hAwp+
byOKFG7UKlVC0r4Ot1s+sjgXhPlCVj6EeyDILi6KyXG5emyWK7DBlWwWqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3llxkpXUsXqjMkDGuTRopa00VKMB8GA1UdIwQY
MBaAFEfu/8JxRiS5I32t5T+9JEH0GSrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMt
ZDQ5OTIzYTE1ZmQ5LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMtZDQ5OTIzYTE1ZmQ5
LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeAhawl5
fDWefRBHlOESXyZe/VibOEEHVfuQQwvzGGpV/LutzuW60oYRYwumNw2l8/qGkQc/
4zkBf6AeJVu9hTPRzpnGOjFvQQIyKPQONdx4MW2Dmoq0uw34lfhba9bpkB5GBnoI
2WAIGjJo/6q5HItO8s4DTPUJJnfGAp3L5BPG7qp/Z/m6Lc1NDe4saoCrvh+ZsFnR
TndmXCaZ3k/7pD8KO2naY26rF0Jei/1/aKB0hw/ijDF/4RX26qcjcbcOBuUUlsks
4mlmOhwHZOA19DsKJiYGzFMJ7/7OBT5+p57mHUjomC/qeH0ZAu+3hwDeX8QiqcH1
jkfqZrmyOjewxg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:22 2025 by rpki-client