Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: wNCKECojvpwH2MPZhmTAC7Hba8pu85zswUaDnrCYZMU=
Subject key identifier: 72:E4:BB:32:EC:B7:5F:B9:CD:84:54:CA:44:55:33:EB:65:4E:70:08
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 0197B6A1BB34A48BF6130AC9FD4088D89A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:21 +0000
Manifest this update: Sat 28 Jun 2025 13:02:21 +0000
Manifest next update: Sun 29 Jun 2025 13:02:21 +0000
Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: lsfs7f3I4hRzTvfbBk+cqyv6vniWqIKkOphbIXOIlW0=)
2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:bb:34:a4:8b:f6:13:0a:c9:fd:40:88:d8:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Jun 28 13:02:21 2025 GMT
Not After : Jun 29 13:02:21 2025 GMT
Subject: CN=72e4bb32ecb75fb9cd8454ca445533eb654e7008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:0c:bd:b9:01:f9:77:30:20:78:f2:00:a8:
b0:39:39:f8:0b:17:35:38:3e:9e:fd:80:7d:c4:69:
e2:5a:a3:fa:ca:9b:e6:f1:01:83:8e:6d:95:99:89:
fe:f8:5c:00:06:7d:ba:44:ce:e0:dc:67:a3:17:9a:
dd:5b:1f:47:4e:a3:d6:b8:41:ae:12:ab:c7:c5:ae:
24:47:95:0b:43:da:50:23:14:56:29:56:42:c1:e9:
fa:90:54:51:2d:bd:d5:9f:75:fa:6d:83:27:d8:3f:
2d:5c:2e:5e:a7:33:2e:58:30:07:ad:93:f5:2c:38:
0e:cc:b6:28:d2:eb:da:ef:64:22:83:77:95:04:aa:
99:0a:dd:54:9c:5a:d1:0d:10:dc:99:14:69:eb:bc:
24:98:87:6e:22:d9:ae:55:57:60:a1:87:0a:48:c2:
7f:2a:73:a4:34:8e:eb:21:78:bb:cb:41:8e:28:bd:
e3:5b:b3:22:89:11:4b:43:64:32:a4:21:82:57:b7:
84:c9:ae:59:1e:c4:14:c0:82:91:c9:00:c3:8f:ce:
ab:c8:3c:0c:7c:4c:aa:5c:5b:28:b5:69:08:94:0e:
25:32:f6:4a:12:1a:a6:f0:32:d9:cb:94:03:04:71:
13:3e:8c:fe:38:aa:38:d9:4b:4e:fd:10:95:75:92:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E4:BB:32:EC:B7:5F:B9:CD:84:54:CA:44:55:33:EB:65:4E:70:08
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7e:0f:08:74:10:23:c6:89:c2:e9:41:a5:95:e4:29:08:7d:
4c:86:0f:37:9f:fe:9b:8a:6b:fd:84:ca:bc:42:78:69:4d:4e:
52:e6:ff:7e:87:79:6f:c4:69:4f:06:1a:f6:47:9f:c2:22:4c:
23:12:d2:c8:05:b0:b9:d0:9a:c2:48:67:13:4f:5d:b9:51:61:
51:d4:02:e0:e7:88:bd:66:d1:ee:f3:d2:35:24:14:a5:54:6f:
bf:c0:1d:2a:47:18:55:c0:cd:91:ba:45:78:e1:ca:59:53:27:
76:c9:af:13:6e:9e:b4:9c:6d:6c:df:17:7a:f7:f3:da:da:b9:
da:c8:57:7c:8e:94:54:ad:9a:e7:22:e9:0e:0a:ee:ff:0c:08:
49:0b:5b:43:4e:f4:75:7e:5a:b3:aa:67:b7:25:65:c4:a3:51:
77:57:13:5d:be:6b:01:6e:18:b9:f8:1b:8a:83:dc:5d:11:f0:
ba:5f:9b:9d:83:db:b0:88:a7:31:3f:04:20:b2:c0:45:19:e8:
55:39:65:08:c8:7d:94:b4:86:35:3c:73:e5:67:4b:ff:89:8d:
c9:f4:82:4f:aa:a3:17:eb:9c:c7:ff:d2:d1:e4:fd:e5:b4:fa:
55:19:cf:87:78:38:30:bd:ee:f9:f7:4f:8b:5a:0b:3c:ec:fe:
37:61:af:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obs0pIv2EwrJ/UCI2JpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5
YWFlNTEwHhcNMjUwNjI4MTMwMjIxWhcNMjUwNjI5MTMwMjIxWjAzMTEwLwYDVQQD
Eyg3MmU0YmIzMmVjYjc1ZmI5Y2Q4NDU0Y2E0NDU1MzNlYjY1NGU3MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7EMvbkB+XcwIHjyAKiwOTn4Cxc1
OD6e/YB9xGniWqP6ypvm8QGDjm2VmYn++FwABn26RM7g3GejF5rdWx9HTqPWuEGu
EqvHxa4kR5ULQ9pQIxRWKVZCwen6kFRRLb3Vn3X6bYMn2D8tXC5epzMuWDAHrZP1
LDgOzLYo0uva72Qig3eVBKqZCt1UnFrRDRDcmRRp67wkmIduItmuVVdgoYcKSMJ/
KnOkNI7rIXi7y0GOKL3jW7MiiRFLQ2QypCGCV7eEya5ZHsQUwIKRyQDDj86ryDwM
fEyqXFsotWkIlA4lMvZKEhqm8DLZy5QDBHETPoz+OKo42UtO/RCVdZIE6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLkuzLst1+5zYRUykRVM+tlTnAIMB8GA1UdIwQY
MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt
ZTI0MzM2ZWM4YTA4LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4
LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS34PCHQQ
I8aJwulBpZXkKQh9TIYPN5/+m4pr/YTKvEJ4aU1OUub/fod5b8RpTwYa9kefwiJM
IxLSyAWwudCawkhnE09duVFhUdQC4OeIvWbR7vPSNSQUpVRvv8AdKkcYVcDNkbpF
eOHKWVMndsmvE26etJxtbN8Xevfz2tq52shXfI6UVK2a5yLpDgru/wwISQtbQ070
dX5as6pntyVlxKNRd1cTXb5rAW4YufgbioPcXRHwul+bnYPbsIinMT8EILLARRno
VTllCMh9lLSGNTxz5WdL/4mNyfSCT6qjF+ucx//S0eT95bT6VRnPh3g4ML3u+fdP
i1oLPOz+N2Gvuw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:41 2025 by rpki-client