Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: blyElqS1hNv3KdIET3RNMH7hqlqTRAqWstC3/1uf+FI=
Subject key identifier: FF:B7:CA:CC:8B:5C:F8:7D:C0:27:C6:CC:B0:3A:4D:38:10:E3:9A:5B
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 0197BC6BF42E750CEB6F9FEFD8F571A684E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 06E7
Signing time: Sun 29 Jun 2025 16:01:20 +0000
Manifest this update: Sun 29 Jun 2025 16:01:20 +0000
Manifest next update: Mon 30 Jun 2025 16:01:20 +0000
Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: Hj+PVM8CdSB7nn7iM33YLNKBbeAI108tyxLJjLfzZDk=)
2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6b:f4:2e:75:0c:eb:6f:9f:ef:d8:f5:71:a6:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Jun 29 16:01:20 2025 GMT
Not After : Jun 30 16:01:20 2025 GMT
Subject: CN=ffb7cacc8b5cf87dc027c6ccb03a4d3810e39a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:e7:d2:66:ef:95:cc:ca:90:77:16:8c:f8:
f4:67:27:b0:6d:f2:9e:89:03:ae:50:e7:bd:6d:30:
52:c2:45:04:fa:1d:16:09:51:ef:a8:53:23:ac:bb:
a9:cb:73:07:85:ea:af:a4:eb:af:f0:08:55:c1:f9:
f7:0f:80:ce:2e:39:2b:43:54:fe:bd:1d:63:87:a3:
81:88:1c:18:4c:97:f5:f7:01:9f:19:9d:fe:bb:58:
f6:e5:5c:b9:c4:5d:ac:40:f4:f2:bc:49:25:b8:bb:
4c:02:c6:fb:cc:65:74:7e:7c:64:56:5c:3e:d0:b2:
42:ea:9a:8b:eb:53:1f:06:60:dc:ee:48:3b:f4:aa:
5b:ca:45:79:7d:73:ae:d9:b7:e4:4c:68:e8:1b:0a:
e9:47:0e:08:9f:da:13:0f:30:81:2d:46:52:27:47:
7b:7a:43:10:37:a6:ca:2e:6f:13:72:69:6d:30:eb:
99:3d:4a:21:74:d1:58:b1:22:88:f9:0d:55:5c:21:
3b:3c:c6:a2:c4:de:b8:ce:cf:8b:e5:b4:ae:ec:0f:
d6:13:91:43:79:7f:1d:5e:5d:6a:ae:92:12:9c:99:
59:89:79:96:52:f9:e3:b8:6c:6f:fe:4d:40:44:dc:
60:67:61:83:77:8a:74:4e:c4:32:c8:d9:bd:b7:a2:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B7:CA:CC:8B:5C:F8:7D:C0:27:C6:CC:B0:3A:4D:38:10:E3:9A:5B
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e6:9d:e3:63:cb:c7:21:4d:a3:ae:ba:48:9d:c9:bd:73:a2:
14:f7:8b:a7:ae:01:16:ce:23:35:38:ab:e7:03:b0:b2:31:f9:
16:47:a6:e1:e2:fc:f9:ca:50:9b:4d:0c:54:0f:55:97:e5:7c:
be:f5:fc:ac:0b:37:50:75:e7:f5:5a:37:d2:86:1f:01:b5:72:
de:b7:b6:cc:e4:d5:ae:00:08:b1:f0:d6:1a:f7:de:fd:b2:de:
96:b0:e2:b9:ab:33:1f:3f:cb:6d:14:f8:f1:85:d8:1e:81:66:
2f:69:7c:7e:57:31:69:dd:74:45:54:c6:4c:b4:a6:ca:97:3c:
f3:43:69:15:85:36:58:af:19:99:1f:b6:36:2c:51:47:56:57:
0e:6a:47:2f:33:f0:a3:24:05:d2:c6:f5:62:b8:f6:f7:03:8b:
ae:78:78:2d:cd:4a:46:bf:5f:c3:b7:25:90:b5:f8:06:79:f8:
2c:ec:3e:25:68:e2:59:a9:54:99:d7:57:64:46:8e:21:4c:c5:
a8:d6:2d:56:af:58:24:0a:53:92:e1:d7:d8:27:28:4d:18:5d:
67:ca:55:21:d5:8e:f7:7d:3c:fe:2f:69:0f:f6:23:52:07:ec:
ea:c4:c7:00:c3:1e:e5:2f:17:22:f9:46:2b:a9:12:cb:67:18:
fc:78:67:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe8a/QudQzrb5/v2PVxpoTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm
MjgyN2MwHhcNMjUwNjI5MTYwMTIwWhcNMjUwNjMwMTYwMTIwWjAzMTEwLwYDVQQD
EyhmZmI3Y2FjYzhiNWNmODdkYzAyN2M2Y2NiMDNhNGQzODEwZTM5YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiHn0mbvlczKkHcWjPj0ZyewbfKe
iQOuUOe9bTBSwkUE+h0WCVHvqFMjrLupy3MHheqvpOuv8AhVwfn3D4DOLjkrQ1T+
vR1jh6OBiBwYTJf19wGfGZ3+u1j25Vy5xF2sQPTyvEkluLtMAsb7zGV0fnxkVlw+
0LJC6pqL61MfBmDc7kg79KpbykV5fXOu2bfkTGjoGwrpRw4In9oTDzCBLUZSJ0d7
ekMQN6bKLm8TcmltMOuZPUohdNFYsSKI+Q1VXCE7PMaixN64zs+L5bSu7A/WE5FD
eX8dXl1qrpISnJlZiXmWUvnjuGxv/k1ARNxgZ2GDd4p0TsQyyNm9t6I9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+3ysyLXPh9wCfGzLA6TTgQ45pbMB8GA1UdIwQY
MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt
YmFiNDhkYWI0Y2Q2LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUtYmFiNDhkYWI0Y2Q2
LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROad42PL
xyFNo666SJ3JvXOiFPeLp64BFs4jNTir5wOwsjH5Fkem4eL8+cpQm00MVA9Vl+V8
vvX8rAs3UHXn9Vo30oYfAbVy3re2zOTVrgAIsfDWGvfe/bLelrDiuaszHz/LbRT4
8YXYHoFmL2l8flcxad10RVTGTLSmypc880NpFYU2WK8ZmR+2NixRR1ZXDmpHLzPw
oyQF0sb1Yrj29wOLrnh4Lc1KRr9fw7clkLX4Bnn4LOw+JWjiWalUmddXZEaOIUzF
qNYtVq9YJApTkuHX2CcoTRhdZ8pVIdWO9308/i9pD/YjUgfs6sTHAMMe5S8XIvlG
K6kSy2cY/HhncQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:44:35 2025 by rpki-client