Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: nARFpOfJOHlpTsjlHAcHr4ywo1S2wHZLF8sKkui0H5w=
Subject key identifier: 8E:2A:64:B5:C8:7F:92:E2:06:D1:33:A2:15:46:11:A4:57:2E:11:76
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 0197B58DFC00ECC063B5DF02E3116F368DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 07FD
Signing time: Sat 28 Jun 2025 08:01:10 +0000
Manifest this update: Sat 28 Jun 2025 08:01:10 +0000
Manifest next update: Sun 29 Jun 2025 08:01:10 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: 4W21P+VYANa7OTjerrVO1SIzxqss9+vkejatdS0SPr8=)
2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:fc:00:ec:c0:63:b5:df:02:e3:11:6f:36:8d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Jun 28 08:01:10 2025 GMT
Not After : Jun 29 08:01:10 2025 GMT
Subject: CN=8e2a64b5c87f92e206d133a2154611a4572e1176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:18:02:81:45:63:32:d1:5b:97:11:79:98:
03:53:a5:95:1c:3e:41:69:97:ff:a7:df:98:07:a6:
a3:9a:1b:d8:7a:1d:0f:09:8b:71:00:4b:8a:43:96:
ac:a5:0e:a5:aa:f9:ef:d3:df:06:c1:9a:ba:b9:82:
5e:bc:91:58:af:b4:c4:f0:3c:b8:be:e1:6e:02:72:
7c:5e:4b:de:a5:52:87:fa:cf:a7:06:84:22:30:a4:
9f:62:63:ff:a9:96:f7:a0:70:bf:b8:52:a6:5e:ab:
bb:03:00:93:35:46:ab:34:97:14:01:1f:3c:84:4d:
ec:6b:7c:f5:11:df:2a:9a:c8:42:d1:e5:01:b9:76:
da:22:2b:86:b3:ce:fe:ee:bd:9f:04:33:26:cc:a9:
ba:9b:04:fa:21:74:b7:29:bb:fa:a1:ba:bc:79:fe:
aa:57:88:bf:2c:c2:d2:ef:92:d6:70:4b:51:29:4b:
65:3b:bb:c4:34:b3:95:0d:bb:d9:72:1c:e6:c2:64:
44:54:7b:d0:c9:ed:8c:f4:20:37:95:29:b7:e0:ed:
62:ce:55:d8:18:e5:d7:3b:bb:7f:06:5d:e6:09:91:
78:37:0b:2b:7c:b4:e0:97:72:ea:91:7d:d2:8c:ee:
a1:4f:bf:d0:b5:00:bf:92:63:29:33:01:e8:66:1b:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:64:B5:C8:7F:92:E2:06:D1:33:A2:15:46:11:A4:57:2E:11:76
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f4:77:34:76:ad:39:7b:29:ac:69:bf:f8:7a:78:48:15:13:
1e:e7:f1:72:b5:db:53:50:5a:d3:da:78:1b:24:be:af:17:f2:
03:7c:fc:24:10:d8:02:35:b4:e4:7c:57:a4:a0:0a:1a:23:55:
4c:f4:1d:b3:50:03:50:0e:a6:83:92:87:00:d8:9c:a3:eb:e9:
63:c4:ae:9b:d2:79:0a:b2:75:57:1c:01:c1:59:8f:e0:ff:2c:
61:1d:89:b8:2a:db:3d:bd:fd:17:75:e9:25:d9:c9:a7:7e:61:
93:ad:20:94:30:d9:8c:13:d4:b6:55:a3:2f:be:3b:8c:12:32:
50:cf:84:2f:b5:ea:ff:5a:e8:21:b6:cc:81:b4:b2:d0:52:b9:
69:e0:73:d7:b4:01:ef:da:03:ce:0c:cb:4e:10:4d:62:b0:44:
82:93:36:10:e8:af:c6:af:80:cb:cf:7b:a7:aa:64:e7:75:19:
01:be:8b:dd:19:01:51:94:7a:9e:27:a4:2e:f7:65:3e:95:e8:
63:3a:4b:18:68:8a:2f:cd:a5:67:b0:eb:61:a0:23:d7:a2:de:
c5:e3:96:fe:48:04:7c:42:87:7b:ec:5c:de:1f:ee:65:ab:fe:
36:33:45:3c:87:90:3d:23:6b:0a:19:2f:8d:ea:24:69:b7:53:
8b:60:23:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1jfwA7MBjtd8C4xFvNo2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYjVmYzNkODk4MzQ4ZDM1Yzc3YmYxNmMzZWQ5Y2ZlODE1
OTU1YjQwHhcNMjUwNjI4MDgwMTEwWhcNMjUwNjI5MDgwMTEwWjAzMTEwLwYDVQQD
Eyg4ZTJhNjRiNWM4N2Y5MmUyMDZkMTMzYTIxNTQ2MTFhNDU3MmUxMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mIYAoFFYzLRW5cReZgDU6WVHD5B
aZf/p9+YB6ajmhvYeh0PCYtxAEuKQ5aspQ6lqvnv098GwZq6uYJevJFYr7TE8Dy4
vuFuAnJ8XkvepVKH+s+nBoQiMKSfYmP/qZb3oHC/uFKmXqu7AwCTNUarNJcUAR88
hE3sa3z1Ed8qmshC0eUBuXbaIiuGs87+7r2fBDMmzKm6mwT6IXS3Kbv6obq8ef6q
V4i/LMLS75LWcEtRKUtlO7vENLOVDbvZchzmwmREVHvQye2M9CA3lSm34O1izlXY
GOXXO7t/Bl3mCZF4NwsrfLTgl3LqkX3SjO6hT7/QtQC/kmMpMwHoZhserwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4qZLXIf5LiBtEzohVGEaRXLhF2MB8GA1UdIwQY
MBaAFB+1/D2Jg0jTXHe/FsPtnP6BWVW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTct
ZGVkZWEzYWIwZDNiLzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTctZGVkZWEzYWIwZDNi
LzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPR3NHat
OXsprGm/+Hp4SBUTHufxcrXbU1Ba09p4GyS+rxfyA3z8JBDYAjW05HxXpKAKGiNV
TPQds1ADUA6mg5KHANico+vpY8Sum9J5CrJ1VxwBwVmP4P8sYR2JuCrbPb39F3Xp
JdnJp35hk60glDDZjBPUtlWjL747jBIyUM+EL7Xq/1roIbbMgbSy0FK5aeBz17QB
79oDzgzLThBNYrBEgpM2EOivxq+Ay897p6pk53UZAb6L3RkBUZR6niekLvdlPpXo
YzpLGGiKL82lZ7DrYaAj16LexeOW/kgEfEKHe+xc3h/uZav+NjNFPIeQPSNrChkv
jeokabdTi2AjzA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:46 2025 by rpki-client