Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: B03cFOMEarD4hqYa18FLsKDIIpfM7tVSB6SDr9d3h94=
Subject key identifier: 41:7B:BA:21:51:F4:A0:D8:29:F8:64:C4:6C:8D:CD:7A:18:AB:5F:CF
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0197B77C46D88143CF9B4EEFEC2D82B82F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 15C3
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: fk8mopgYnEz1BUC9ikkk9xki+LIijOyI4O4CngiqKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:46:d8:81:43:cf:9b:4e:ef:ec:2d:82:b8:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=417bba2151f4a0d829f864c46c8dcd7a18ab5fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:9f:f6:2e:d4:dd:94:42:fd:34:ac:71:ea:
b2:af:ee:ed:d5:d6:19:2a:90:89:62:6f:60:5a:a7:
33:14:58:65:ab:00:61:7a:4b:c2:bf:b1:1f:c5:19:
be:a7:7a:3d:96:16:44:09:e4:16:3e:6a:49:51:86:
79:99:4a:ea:cb:c4:75:b6:34:45:b4:e1:0e:b0:03:
2b:ec:80:ad:1c:57:02:b3:bc:18:69:5b:5f:90:e7:
3f:75:84:4d:eb:15:a5:85:b3:4b:dc:e0:c4:c7:6e:
52:38:61:25:32:8f:00:bc:8d:4f:58:4e:dd:45:55:
f3:06:11:ed:29:01:f4:da:b2:98:40:ec:bd:95:ac:
cd:c7:5a:fa:c9:5b:ee:70:e5:15:ac:d2:33:fa:e7:
77:93:53:6e:12:37:f0:35:0a:85:5c:15:28:52:c4:
64:5c:e4:94:4b:2d:af:82:da:f5:bc:8e:31:41:3c:
da:42:48:1f:ee:3a:22:38:b2:f8:24:86:c3:19:15:
87:47:d6:78:d0:73:79:d1:93:af:2f:14:f7:0f:0b:
9e:07:fd:80:e6:8f:b7:7f:b7:cf:8f:c8:15:3b:b9:
c4:3f:3a:2e:a9:81:bb:ce:f6:9d:2f:0e:5a:df:54:
89:fc:91:42:6d:43:07:2b:4b:44:28:ab:3d:30:e9:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:BA:21:51:F4:A0:D8:29:F8:64:C4:6C:8D:CD:7A:18:AB:5F:CF
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:12:9a:3c:a9:91:84:9b:58:e1:f9:20:af:7d:f7:38:cf:
2b:56:9b:59:c3:bf:32:d8:4f:86:b8:0f:cf:40:ea:11:5d:27:
a1:11:64:52:a7:5a:da:47:ec:2c:81:3a:6f:36:8a:0a:3d:77:
ca:00:e3:e8:74:57:f9:33:98:80:af:ce:9e:f8:bb:94:a2:22:
37:81:56:cf:eb:c1:3f:19:bb:da:81:04:94:fc:b3:f5:17:56:
6b:35:c8:db:da:c0:51:3a:a3:87:8e:dc:60:3b:05:eb:6f:e0:
36:86:da:2e:23:32:3f:63:f4:19:a8:27:fb:d7:72:17:8f:d0:
1b:ba:53:2e:dd:61:43:db:9f:0a:b3:3e:fe:e5:5e:11:06:64:
59:01:aa:be:fd:b6:57:f9:0b:58:1d:81:58:7e:19:f4:3c:b9:
8f:4f:28:10:57:e7:99:ad:ad:5d:8a:4f:cb:10:25:4f:f4:b9:
2a:90:1d:37:d6:6e:f8:d2:0c:ed:45:fb:af:dc:3d:42:32:bf:
68:e5:73:80:a0:2e:23:5f:f7:4a:8a:aa:11:64:fe:b6:98:66:
87:57:11:2e:d3:ae:1a:cd:15:a4:e5:66:fd:d2:2b:36:a0:12:
d8:e8:04:dd:ba:e3:ee:99:a9:5f:ec:b1:e8:2b:1f:a0:84:c1:
9c:f7:58:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEbYgUPPm07v7C2CuC8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjEzMDhjNmE5NzdkNWNiOTAzYmYyNWE5NjMwOGIwZThj
ZTNiNDYwHhcNMjUwNjI4MTcwMTA0WhcNMjUwNjI5MTcwMTA0WjAzMTEwLwYDVQQD
Eyg0MTdiYmEyMTUxZjRhMGQ4MjlmODY0YzQ2YzhkY2Q3YTE4YWI1ZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eWf9i7U3ZRC/TSsceqyr+7t1dYZ
KpCJYm9gWqczFFhlqwBhekvCv7EfxRm+p3o9lhZECeQWPmpJUYZ5mUrqy8R1tjRF
tOEOsAMr7ICtHFcCs7wYaVtfkOc/dYRN6xWlhbNL3ODEx25SOGElMo8AvI1PWE7d
RVXzBhHtKQH02rKYQOy9lazNx1r6yVvucOUVrNIz+ud3k1NuEjfwNQqFXBUoUsRk
XOSUSy2vgtr1vI4xQTzaQkgf7joiOLL4JIbDGRWHR9Z40HN50ZOvLxT3DwueB/2A
5o+3f7fPj8gVO7nEPzouqYG7zvadLw5a31SJ/JFCbUMHK0tEKKs9MOnN3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF7uiFR9KDYKfhkxGyNzXoYq1/PMB8GA1UdIwQY
MBaAFIuxMIxql31cuQO/JaljCLDozjtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMt
MTAxYWJkNzM5MWE2LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMtMTAxYWJkNzM5MWE2
LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0USmjyp
kYSbWOH5IK999zjPK1abWcO/MthPhrgPz0DqEV0noRFkUqda2kfsLIE6bzaKCj13
ygDj6HRX+TOYgK/Onvi7lKIiN4FWz+vBPxm72oEElPyz9RdWazXI29rAUTqjh47c
YDsF62/gNobaLiMyP2P0Gagn+9dyF4/QG7pTLt1hQ9ufCrM+/uVeEQZkWQGqvv22
V/kLWB2BWH4Z9Dy5j08oEFfnma2tXYpPyxAlT/S5KpAdN9Zu+NIM7UX7r9w9QjK/
aOVzgKAuI1/3SoqqEWT+tphmh1cRLtOuGs0VpOVm/dIrNqAS2OgE3brj7pmpX+yx
6CsfoITBnPdYVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:21 2025 by rpki-client