Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier: I/4SNO632EDqSZpe89wRyqIn1yBdr9ZoxaRvPw5p+Y8=
Subject key identifier: C0:07:9C:AC:5B:CC:BC:7C:77:EC:B1:B5:CD:68:5E:8B:E3:A5:57:94
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer: /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial: 0198D5BC5CCD78106B850E4547A6DD740C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number: 0520
Signing time: Sat 23 Aug 2025 07:02:28 +0000
Manifest this update: Sat 23 Aug 2025 07:02:28 +0000
Manifest next update: Sun 24 Aug 2025 07:02:28 +0000
Files and hashes: 1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: ycF2CK6IfRcGidz9H2wi4mOW9+4F+VObbkDT7GenXGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:5c:cd:78:10:6b:85:0e:45:47:a6:dd:74:0c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Validity
Not Before: Aug 23 07:02:28 2025 GMT
Not After : Aug 24 07:02:28 2025 GMT
Subject: CN=c0079cac5bccbc7c77ecb1b5cd685e8be3a55794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:a8:21:1c:3e:c3:bd:4f:08:2d:2d:3a:72:
75:16:8f:35:44:7e:7b:11:8a:d2:6d:e4:5c:5c:59:
cb:cc:43:c3:9f:3c:93:5c:70:55:1a:9b:29:08:ac:
55:65:c7:4e:cb:11:bc:43:64:e8:64:1d:52:01:3b:
d5:25:fe:9b:92:59:35:00:3e:c2:07:60:b1:3a:85:
f7:7f:eb:7f:8c:26:cd:52:9a:f8:de:9c:36:44:e6:
6d:2b:47:6f:13:52:cb:72:85:4c:5c:1f:ae:86:13:
03:9c:33:7a:eb:20:ad:5c:0c:ec:c7:85:d9:70:11:
d4:3b:c7:52:4d:f9:92:2a:d6:77:ec:85:26:30:7b:
8e:54:b3:8e:87:32:73:c3:e3:7e:d8:fb:76:5f:b2:
ae:d5:91:6b:6d:5a:ed:dd:2f:cd:ee:8c:3c:fd:6a:
05:2f:6b:02:3a:a5:df:1f:6f:59:1e:a5:d5:17:d7:
68:61:e1:b0:c1:67:88:75:aa:07:32:1f:6b:a6:25:
dd:b0:a9:22:42:6d:8f:33:2b:03:ca:f4:da:25:cc:
79:5d:d8:49:59:e5:2c:d9:e2:92:18:01:7a:90:7d:
25:08:18:b3:f3:0d:18:dd:bd:99:1c:d8:9c:17:39:
36:7f:e2:e3:ff:54:9c:29:96:12:09:92:39:42:4f:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:9C:AC:5B:CC:BC:7C:77:EC:B1:B5:CD:68:5E:8B:E3:A5:57:94
X509v3 Authority Key Identifier:
keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:78:f9:b1:fd:b6:90:5d:e1:5f:db:c2:d9:cb:70:7f:30:c4:
74:09:2d:f4:e4:b0:3d:4e:62:25:d5:f7:4b:ec:0a:c0:bb:34:
72:ce:6b:76:21:f7:6a:65:99:ab:39:c9:96:78:13:4b:7a:5d:
f4:3b:33:f9:f2:5b:7b:04:2e:c4:bc:34:14:fe:9b:17:80:f2:
5c:9e:21:78:c8:5f:a9:5c:1d:80:35:db:19:65:27:b7:e5:a9:
88:f0:8a:fe:5e:90:07:e9:78:00:55:e9:78:17:61:39:79:75:
07:75:15:0b:c4:66:4d:e5:be:ae:60:db:fd:f6:ad:51:7c:5a:
00:2f:ba:33:8c:75:9a:81:f8:e8:0f:c7:a7:24:ef:2e:7d:29:
f5:6a:59:b3:28:73:e1:74:23:31:1d:e1:9f:44:f5:f5:00:dd:
62:05:e5:db:47:df:67:83:49:46:b1:ef:e7:24:c9:30:4e:58:
fc:df:19:ee:c6:4c:40:b6:89:4e:24:b5:f5:2a:91:c4:d7:40:
3c:b4:c4:2b:99:f4:8d:01:36:c6:74:3a:24:3f:01:4b:da:97:
ae:3a:35:24:be:20:23:76:5f:bf:f6:77:86:dc:60:e0:71:ed:
70:29:72:62:6b:54:2d:69:f7:b8:02:f2:d2:07:c7:1b:c3:3e:
26:07:e8:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvFzNeBBrhQ5FR6bddAw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOWEzZWM3Y2IzYjE5MGU3MjEzMDk5ZGUxNjcxYmVhMmQz
MjhhOTUwHhcNMjUwODIzMDcwMjI4WhcNMjUwODI0MDcwMjI4WjAzMTEwLwYDVQQD
EyhjMDA3OWNhYzViY2NiYzdjNzdlY2IxYjVjZDY4NWU4YmUzYTU1Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63+oIRw+w71PCC0tOnJ1Fo81RH57
EYrSbeRcXFnLzEPDnzyTXHBVGpspCKxVZcdOyxG8Q2ToZB1SATvVJf6bklk1AD7C
B2CxOoX3f+t/jCbNUpr43pw2ROZtK0dvE1LLcoVMXB+uhhMDnDN66yCtXAzsx4XZ
cBHUO8dSTfmSKtZ37IUmMHuOVLOOhzJzw+N+2Pt2X7Ku1ZFrbVrt3S/N7ow8/WoF
L2sCOqXfH29ZHqXVF9doYeGwwWeIdaoHMh9rpiXdsKkiQm2PMysDyvTaJcx5XdhJ
WeUs2eKSGAF6kH0lCBiz8w0Y3b2ZHNicFzk2f+Lj/1ScKZYSCZI5Qk+fNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAHnKxbzLx8d+yxtc1oXovjpVeUMB8GA1UdIwQY
MBaAFO2aPsfLOxkOchMJneFnG+otMoqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEt
YTQ0MmY0Nzc2NGQzLzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85Njk3M2UtMmJkYi00Mzk3LWFlMWEtYTQ0MmY0Nzc2NGQz
LzEvN1pvLXg4czdHUTV5RXdtZDRXY2I2aTB5aXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXj5sf22
kF3hX9vC2ctwfzDEdAkt9OSwPU5iJdX3S+wKwLs0cs5rdiH3amWZqznJlngTS3pd
9Dsz+fJbewQuxLw0FP6bF4DyXJ4heMhfqVwdgDXbGWUnt+WpiPCK/l6QB+l4AFXp
eBdhOXl1B3UVC8RmTeW+rmDb/fatUXxaAC+6M4x1moH46A/HpyTvLn0p9WpZsyhz
4XQjMR3hn0T19QDdYgXl20ffZ4NJRrHv5yTJME5Y/N8Z7sZMQLaJTiS19SqRxNdA
PLTEK5n0jQE2xnQ6JD8BS9qXrjo1JL4gI3Zfv/Z3htxg4HHtcClyYmtULWn3uALy
0gfHG8M+JgfoSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:20 2025 by rpki-client