Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
File: r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json)
Hash identifier: QADBCZviEA6rejEIf0z4CzmbZnIhmYIaIWTSOC5LGN0=
Subject key identifier: 34:B2:A0:37:FA:6C:94:16:BF:9D:67:04:2D:5B:C7:62:38:75:F4:DD
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 0198D65F8F078E0F80BFF1AD46371F02E386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
Manifest number: 0EF7
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: CY3YIBeeXy7d304leRk_84B6aOw.roa (hash: a5cqctkZKmbgtiXrSitwhHqbpFExqVK4hQecaTEUPK8=)
2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: wSQFoAS1tzsPZCsG9Vzedh3Z9qY42x/4NuIljCZbOF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8f:07:8e:0f:80:bf:f1:ad:46:37:1f:02:e3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=34b2a037fa6c9416bf9d67042d5bc7623875f4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:ee:c0:05:4f:5b:0e:27:7b:10:20:e3:57:
60:5b:c9:24:d1:c0:e5:a7:fd:f4:8a:ad:1f:a6:fe:
50:84:b8:11:82:39:49:14:3f:06:f4:3a:dc:49:36:
95:21:00:47:fc:aa:03:b6:2f:39:c1:08:3d:83:e4:
05:3d:db:cb:62:ee:51:e3:aa:a6:42:79:3f:8a:c6:
09:f8:12:c3:de:05:6b:50:30:51:2d:97:1a:9c:a4:
f2:bb:fa:2d:84:08:9f:3b:8f:ef:c9:c7:12:f4:45:
00:13:d9:46:7b:ed:bf:7e:e9:4b:90:4a:4d:08:5c:
62:25:19:8e:9e:1d:c8:77:19:01:9e:2c:c7:bf:44:
88:9c:07:45:fd:c6:55:41:e7:08:ad:99:10:06:b1:
d4:17:1c:13:c1:f8:f3:95:63:4a:9a:9c:58:fe:51:
c7:45:06:e1:a1:fd:13:db:3c:ee:10:9d:24:e6:72:
e7:09:a0:65:f8:d8:8a:b5:c8:ed:3d:5e:b4:cc:79:
5d:c4:48:d8:d8:f3:2e:3d:cf:80:b1:b2:2d:ef:b1:
6c:a7:ac:5c:99:c4:63:d3:b9:6b:55:99:32:b5:55:
9f:f9:40:66:60:47:8b:35:f3:91:8a:4b:91:23:db:
4f:7e:59:8b:35:9e:19:63:2f:be:8b:68:a4:b9:3d:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B2:A0:37:FA:6C:94:16:BF:9D:67:04:2D:5B:C7:62:38:75:F4:DD
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3e:48:a5:96:7b:37:c2:4a:34:cb:25:41:56:f9:f6:57:a3:
4c:c5:85:57:3a:d2:d5:ec:27:ee:92:4c:82:fa:b0:10:92:2d:
88:d4:cb:08:bc:cb:62:94:fc:a6:7f:35:fc:cb:cd:cb:44:9a:
71:04:fa:e6:50:cd:8f:70:97:e5:45:59:f9:c6:4b:73:52:74:
25:8e:51:e6:39:5f:6c:3f:6e:ae:92:fa:7d:53:1d:f2:cb:c2:
66:bb:1f:d3:43:4c:e2:3d:9b:b2:62:83:df:55:50:7e:4c:81:
76:72:2f:53:bf:11:58:cf:cb:cb:b8:be:e1:df:66:ef:9a:ca:
f2:d0:31:64:1a:40:de:20:b5:54:39:36:28:9b:ec:0c:12:53:
36:f3:7b:13:cb:15:a0:8b:4c:3b:a4:c4:b6:63:f3:1a:84:f9:
54:8d:ff:a5:ff:5f:ca:6a:47:de:ce:a3:09:60:6a:ac:0f:36:
0e:f3:4c:cc:d1:e0:a7:71:6e:47:00:cc:59:21:de:19:2d:b0:
94:2f:7f:5b:63:b6:4d:23:8c:d3:86:b8:26:f1:21:74:bb:8d:
45:55:25:17:ed:66:7e:b9:a3:83:c8:29:b8:24:0a:5e:83:01:
50:51:a6:89:aa:e3:a8:e4:36:0f:e5:67:77:65:21:4a:49:0f:
5f:d6:a2:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX48Hjg+Av/GtRjcfAuOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjAwYjI5Mzk2ZTc4MDMzZWRiYWNhZmVmOTg1MGIxYjBl
MzUzMjMwHhcNMjUwODIzMTAwMDQzWhcNMjUwODI0MTAwMDQzWjAzMTEwLwYDVQQD
EygzNGIyYTAzN2ZhNmM5NDE2YmY5ZDY3MDQyZDViYzc2MjM4NzVmNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl/uwAVPWw4nexAg41dgW8kk0cDl
p/30iq0fpv5QhLgRgjlJFD8G9DrcSTaVIQBH/KoDti85wQg9g+QFPdvLYu5R46qm
Qnk/isYJ+BLD3gVrUDBRLZcanKTyu/othAifO4/vyccS9EUAE9lGe+2/fulLkEpN
CFxiJRmOnh3IdxkBnizHv0SInAdF/cZVQecIrZkQBrHUFxwTwfjzlWNKmpxY/lHH
RQbhof0T2zzuEJ0k5nLnCaBl+NiKtcjtPV60zHldxEjY2PMuPc+AsbIt77Fsp6xc
mcRj07lrVZkytVWf+UBmYEeLNfORikuRI9tPflmLNZ4ZYy++i2ikuT1htwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSyoDf6bJQWv51nBC1bx2I4dfTdMB8GA1UdIwQY
MBaAFK+wCyk5bngDPtusr++YULGw41MjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdBTEtUbHVlQU0tMjZ5djc1aFFzYkRqVXlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lNGNhNTYtMTM4Ni00MzJjLTk2Y2It
NjVhOWE0ZGZhZDllLzEvcjdBTEtUbHVlQU0tMjZ5djc1aFFzYkRqVXlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lNGNhNTYtMTM4Ni00MzJjLTk2Y2ItNjVhOWE0ZGZhZDll
LzEvcjdBTEtUbHVlQU0tMjZ5djc1aFFzYkRqVXlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkT5IpZZ7
N8JKNMslQVb59lejTMWFVzrS1ewn7pJMgvqwEJItiNTLCLzLYpT8pn81/MvNy0Sa
cQT65lDNj3CX5UVZ+cZLc1J0JY5R5jlfbD9urpL6fVMd8svCZrsf00NM4j2bsmKD
31VQfkyBdnIvU78RWM/Ly7i+4d9m75rK8tAxZBpA3iC1VDk2KJvsDBJTNvN7E8sV
oItMO6TEtmPzGoT5VI3/pf9fympH3s6jCWBqrA82DvNMzNHgp3FuRwDMWSHeGS2w
lC9/W2O2TSOM04a4JvEhdLuNRVUlF+1mfrmjg8gpuCQKXoMBUFGmiarjqOQ2D+Vn
d2UhSkkPX9ai1g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:00 2025 by rpki-client