
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier: NquiGNGKs+uI5rIQ3aGTBxjvo6hMpqar2/YHK/iXU0Q=
Subject key identifier: 38:12:36:8B:E7:82:72:6E:B5:E3:9E:62:08:65:3A:C4:89:4C:EA:13
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial: 0A31F2746DD1BDF41B2C202D6384DDF9DE93CD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number: 01EF
Signing time: Sat 23 Aug 2025 01:04:17 +0000
Manifest this update: Sat 23 Aug 2025 00:59:17 +0000
Manifest next update: Sun 24 Aug 2025 01:32:17 +0000
Files and hashes: 1: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: YZ15tZ/sIKYicjY7NX6aAsDpNKtkLDsh4HDrvUEsZ3M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:31:f2:74:6d:d1:bd:f4:1b:2c:20:2d:63:84:dd:f9:de:93:cd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
Validity
Not Before: Aug 23 00:59:17 2025 GMT
Not After : Aug 24 01:32:17 2025 GMT
Subject: CN=3812368BE782726EB5E39E6208653AC4894CEA13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:bb:6b:70:3e:9f:fa:26:f2:7e:cc:24:08:
b0:4c:12:8f:c3:a6:f4:28:c0:c2:d4:0f:5a:26:5b:
0e:b5:63:b5:f9:f1:97:49:c0:6b:1f:f1:64:4b:55:
2b:43:fe:c1:9c:41:9f:0e:b5:27:39:19:17:e5:5e:
7d:6b:30:a0:70:30:68:d9:21:83:b4:46:6f:03:80:
dd:b3:f1:1f:c9:e1:5a:a8:7c:4d:22:c6:26:0a:87:
3c:1c:32:55:60:ba:f8:6c:9a:bc:cb:50:8d:20:47:
db:11:ca:85:5a:e5:9a:aa:11:3f:6e:61:b0:6d:78:
ab:e4:ac:bc:f3:24:c4:0a:40:97:fa:41:71:41:22:
78:0e:2c:e8:63:63:31:56:7c:b0:d2:c6:d2:e3:c6:
78:b4:7b:43:33:15:6a:95:40:d8:3c:af:5d:3f:79:
e0:0a:6a:53:0f:68:85:d7:87:9e:9b:ab:9e:f6:2f:
35:1a:c5:9b:db:c4:a1:09:64:e1:9c:ee:9b:20:23:
f5:b3:b2:43:99:f8:f6:76:09:78:9b:e1:d1:0f:d4:
67:f5:eb:2b:1d:cc:4a:8f:b5:5c:d0:ec:f1:ce:e6:
12:58:eb:b4:84:41:54:ea:5f:70:0a:ab:1d:6b:e8:
f1:6f:2a:03:65:45:2f:8a:d3:94:55:ef:2e:3c:45:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:36:8B:E7:82:72:6E:B5:E3:9E:62:08:65:3A:C4:89:4C:EA:13
X509v3 Authority Key Identifier:
keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b8:8b:75:5c:cc:eb:a7:20:b1:b8:09:59:45:64:0d:bb:db:
d0:fe:aa:f8:0b:71:35:e0:6e:ed:dd:4c:05:f7:dd:a2:f4:a4:
19:ae:5f:02:d9:95:01:7e:35:be:24:d8:33:49:dd:03:b2:68:
00:d3:6b:76:0b:8e:50:f4:60:4a:27:13:ba:2e:29:d9:41:64:
aa:32:89:99:58:73:9a:f6:e4:0c:1a:88:24:3a:95:e1:c8:a6:
36:31:dc:34:45:e2:bc:bb:9d:3a:36:91:85:37:cd:fe:87:88:
b1:10:a8:3f:66:88:67:81:5b:a0:74:24:f7:70:2b:4b:74:2b:
cb:c9:76:b7:a5:72:43:f1:68:94:e0:2d:be:6a:ef:15:1d:cb:
15:52:38:78:f5:55:e1:c6:05:80:04:9b:4d:37:91:3b:73:97:
97:44:47:31:68:e2:9b:27:5b:f2:c9:df:95:73:b6:cf:cb:65:
80:85:28:c7:f2:d8:92:59:fb:df:e1:2e:a3:e0:73:9d:c0:39:
d3:ce:9a:ac:c0:d4:58:7b:3d:a7:72:12:cc:dd:d5:7d:bd:56:
a3:e7:17:66:c9:17:46:d1:2b:ae:86:b9:11:91:5a:3c:2f:68:
cf:12:07:6b:e1:c7:e0:ef:a2:8d:6c:16:b4:cf:3d:7f:1c:3c:
03:3f:c1:90
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCjHydG3RvfQbLCAtY4Td+d6TzVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2Q3MDU5NjM4NDExZTMyMzFlNzU5ZTc0YTgxM2JmOTM3
NjIwOWU3NzAeFw0yNTA4MjMwMDU5MTdaFw0yNTA4MjQwMTMyMTdaMDMxMTAvBgNV
BAMTKDM4MTIzNjhCRTc4MjcyNkVCNUUzOUU2MjA4NjUzQUM0ODk0Q0VBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYbtrcD6f+ibyfswkCLBMEo/D
pvQowMLUD1omWw61Y7X58ZdJwGsf8WRLVStD/sGcQZ8OtSc5GRflXn1rMKBwMGjZ
IYO0Rm8DgN2z8R/J4VqofE0ixiYKhzwcMlVguvhsmrzLUI0gR9sRyoVa5ZqqET9u
YbBteKvkrLzzJMQKQJf6QXFBIngOLOhjYzFWfLDSxtLjxni0e0MzFWqVQNg8r10/
eeAKalMPaIXXh56bq572LzUaxZvbxKEJZOGc7psgI/WzskOZ+PZ2CXib4dEP1Gf1
6ysdzEqPtVzQ7PHO5hJY67SEQVTqX3AKqx1r6PFvKgNlRS+K05RV7y48RXWpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUOBI2i+eCcm61455iCGU6xIlM6hMwHwYDVR0j
BBgwFoAUfXBZY4QR4yMedZ50qBO/k3YgnncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzYvN0Q3MDU5NjM4NDExRTMyMzFFNzU5RTc0QTgxM0JGOTM3NjIwOUU3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZYQlpZNFFSNHlNZWRaNTBxQk9fazNZ
Z25uYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvNi83RDcwNTk2Mzg0MTFFMzIzMUU3
NTlFNzRBODEzQkY5Mzc2MjA5RTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7iLdVzM66cgsbgJWUVk
Dbvb0P6q+AtxNeBu7d1MBffdovSkGa5fAtmVAX41viTYM0ndA7JoANNrdguOUPRg
SicTui4p2UFkqjKJmVhzmvbkDBqIJDqV4cimNjHcNEXivLudOjaRhTfN/oeIsRCo
P2aIZ4FboHQk93ArS3Qry8l2t6VyQ/FolOAtvmrvFR3LFVI4ePVV4cYFgASbTTeR
O3OXl0RHMWjimydb8snflXO2z8tlgIUox/LYkln73+Euo+BzncA5086arMDUWHs9
p3ISzN3Vfb1Wo+cXZskXRtErroa5EZFaPC9ozxIHa+HH4O+ijWwWtM89fxw8Az/B
kA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:39 2025 by rpki-client