Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: 3fsFydZrczPDmPFBUolML6m1hkID3aIZU31k2acWYi8=
Subject key identifier: 88:82:30:A6:5F:A7:D7:69:41:B0:6B:73:69:3D:B8:E7:B8:AD:E4:8C
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 0197CBE07B6DC22F025CBE745FA92A3F145C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 0CB4
Signing time: Wed 02 Jul 2025 16:02:55 +0000
Manifest this update: Wed 02 Jul 2025 16:02:55 +0000
Manifest next update: Thu 03 Jul 2025 16:02:55 +0000
Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: XDBGm/LKlq1Xy5XtAfwsnvzkoC4Jz/Hy4wkKoVzbSCE=)
2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:7b:6d:c2:2f:02:5c:be:74:5f:a9:2a:3f:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Jul 2 16:02:55 2025 GMT
Not After : Jul 3 16:02:55 2025 GMT
Subject: CN=888230a65fa7d76941b06b73693db8e7b8ade48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:19:a0:1f:d6:33:1e:4a:00:eb:b6:4d:47:
58:5f:a6:90:cc:5f:75:c3:2c:e5:2f:d2:5d:89:31:
7e:62:df:81:1a:f2:c2:38:7e:66:42:e6:3e:8a:a7:
fa:b6:d5:ec:29:9e:5c:d3:28:ed:4a:7d:57:5f:1f:
44:7a:6b:ba:32:d1:bb:44:f3:51:39:86:40:d8:6e:
09:10:11:98:50:72:e8:a7:0f:a3:ce:e4:37:90:02:
d0:a6:87:f0:26:74:ab:ab:ce:79:a9:bc:95:a6:d9:
1a:7f:5e:77:51:87:3d:f2:5c:a7:27:1f:5b:0e:89:
d3:61:5c:9f:ca:9d:83:ef:30:a9:dd:e3:a7:f7:df:
9d:87:cf:e6:74:91:a5:bd:19:a5:94:b5:90:d3:87:
3b:be:3e:c1:c7:db:0b:56:41:fd:99:17:98:12:80:
ad:06:13:79:31:fd:97:c6:a0:63:f7:75:a5:8e:bc:
2f:09:88:ed:34:4f:5f:1b:9a:e8:ec:ca:0b:45:b2:
fd:29:f7:b6:28:9e:30:39:97:fb:5e:66:4f:3a:6c:
96:f6:e0:68:00:72:59:ff:e5:ca:aa:f2:06:ee:25:
5c:94:a4:92:5d:31:3d:7e:65:39:5d:20:47:4b:e1:
d9:f9:2f:60:ac:03:7b:27:de:e5:a3:5c:a4:1b:20:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:30:A6:5F:A7:D7:69:41:B0:6B:73:69:3D:B8:E7:B8:AD:E4:8C
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:20:9e:09:da:7b:e3:59:3f:d4:9f:7e:f6:90:c0:c5:c6:ba:
1b:9a:0c:01:ef:56:63:dd:db:46:05:4f:54:a5:9c:0d:cd:b1:
04:8c:52:0d:e8:e0:36:50:f4:1b:c8:b3:39:60:42:38:ed:66:
18:89:22:f8:e0:90:d9:d9:2d:0c:9a:a8:50:62:68:e7:7b:30:
f4:39:a6:c4:95:f5:79:4b:3b:fd:99:28:a8:f1:ae:9d:dd:90:
14:cf:00:97:9d:99:af:8a:22:01:18:28:c6:19:3d:6f:25:44:
0f:e9:9b:3d:c8:04:52:53:cb:83:e8:d8:60:54:a3:c3:ce:eb:
c8:20:b7:b5:a7:4c:6f:c7:5a:f1:ee:6c:bb:c6:0a:f6:e6:d4:
67:7c:78:86:83:30:93:84:ce:df:8b:a6:0a:16:e6:7b:3f:dd:
ca:a0:04:fd:2c:6c:07:6d:6d:63:95:d6:48:7a:52:8f:cd:c1:
e3:68:11:f4:ea:00:17:4f:48:dd:2e:2a:6e:4d:40:dd:42:f2:
87:b9:4d:0b:33:f5:16:02:3d:83:53:ce:72:6d:4d:89:08:d5:
b9:d7:fe:57:cd:88:11:d6:90:74:91:1b:e2:9e:6e:78:02:0b:
a0:2a:f5:36:34:30:b5:6e:b3:91:9e:41:02:95:9c:97:f4:30:
ca:e8:9a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL4Httwi8CXL50X6kqPxRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi
Y2VmMzQwHhcNMjUwNzAyMTYwMjU1WhcNMjUwNzAzMTYwMjU1WjAzMTEwLwYDVQQD
Eyg4ODgyMzBhNjVmYTdkNzY5NDFiMDZiNzM2OTNkYjhlN2I4YWRlNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV0ZoB/WMx5KAOu2TUdYX6aQzF91
wyzlL9JdiTF+Yt+BGvLCOH5mQuY+iqf6ttXsKZ5c0yjtSn1XXx9Eemu6MtG7RPNR
OYZA2G4JEBGYUHLopw+jzuQ3kALQpofwJnSrq855qbyVptkaf153UYc98lynJx9b
DonTYVyfyp2D7zCp3eOn99+dh8/mdJGlvRmllLWQ04c7vj7Bx9sLVkH9mReYEoCt
BhN5Mf2XxqBj93WljrwvCYjtNE9fG5ro7MoLRbL9Kfe2KJ4wOZf7XmZPOmyW9uBo
AHJZ/+XKqvIG7iVclKSSXTE9fmU5XSBHS+HZ+S9grAN7J97lo1ykGyD5FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiCMKZfp9dpQbBrc2k9uOe4reSMMB8GA1UdIwQY
MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt
ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi
LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiCeCdp7
41k/1J9+9pDAxca6G5oMAe9WY93bRgVPVKWcDc2xBIxSDejgNlD0G8izOWBCOO1m
GIki+OCQ2dktDJqoUGJo53sw9DmmxJX1eUs7/ZkoqPGund2QFM8Al52Zr4oiARgo
xhk9byVED+mbPcgEUlPLg+jYYFSjw87ryCC3tadMb8da8e5su8YK9ubUZ3x4hoMw
k4TO34umChbmez/dyqAE/SxsB21tY5XWSHpSj83B42gR9OoAF09I3S4qbk1A3ULy
h7lNCzP1FgI9g1POcm1NiQjVudf+V82IEdaQdJEb4p5ueAILoCr1NjQwtW6zkZ5B
ApWcl/QwyuialA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:53:20 2025 by rpki-client