Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: lRjFS+c1ddupxH1+dkZcRXXg2CqmVYw9kWdcCChSUs4=
Subject key identifier: 5E:97:02:D7:9B:65:5E:18:7A:2F:A8:9E:6E:97:33:C3:73:27:57:AA
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 0197B77C7CFF01C62C19138F150F5FBD460C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0A1B
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: 96ua7cqsVRZaTo3ddxIflRMx3kkys3xQ3plWLxeRCCw=)
2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7c:ff:01:c6:2c:19:13:8f:15:0f:5f:bd:46:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=5e9702d79b655e187a2fa89e6e9733c3732757aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:b3:60:80:9e:6a:18:51:e6:73:90:82:30:
2b:17:bd:3b:c0:76:33:e9:1c:e7:c6:7a:d8:53:0a:
5f:73:86:ef:b0:da:fd:0a:ee:a8:95:f3:80:5a:82:
ab:84:e2:32:38:cd:14:c7:a3:f3:ef:1a:9d:f5:fc:
49:57:e4:cf:31:17:ae:c1:36:71:ce:77:45:12:10:
87:28:75:b7:46:6d:5e:de:16:29:0f:2e:d6:da:05:
7e:25:22:a3:d6:ef:90:64:27:97:47:9a:c2:59:20:
c0:30:1d:5d:e7:49:15:0e:89:a1:f1:a6:58:31:a1:
af:4d:9c:b1:0e:b4:73:b7:16:48:0a:a0:03:89:a2:
31:2e:fd:77:b3:9a:8e:c9:cd:0d:3b:4f:f4:49:af:
42:19:ed:4f:ff:0f:43:b7:ce:99:05:f0:d6:c0:03:
78:f7:29:a0:e8:99:70:79:05:a1:ad:a3:74:b7:10:
75:cb:5e:26:0c:d7:61:a8:24:8e:b1:58:7d:e1:ee:
09:a1:0b:d3:6b:87:fc:5b:bb:9e:9b:92:5f:80:5b:
b3:1c:78:3b:68:32:de:04:63:86:f8:7d:f2:b6:9a:
59:11:b0:d8:29:70:af:5f:68:8d:14:8e:9f:56:a1:
eb:36:0b:54:e4:81:b1:24:a4:94:a5:b4:aa:58:6c:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:02:D7:9B:65:5E:18:7A:2F:A8:9E:6E:97:33:C3:73:27:57:AA
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:2b:9d:7a:0f:44:3e:13:2d:db:7c:ec:47:0a:1b:7b:7d:
c7:d6:63:1a:f1:87:4f:cf:61:c1:15:3c:73:fc:1e:19:47:2a:
e4:e2:e6:0e:12:50:a7:d6:de:29:7e:9b:40:3c:19:9d:9a:b2:
a5:8c:64:f5:34:fd:30:39:49:1e:73:ea:a2:63:d4:f7:a6:de:
a7:0e:91:25:d4:5a:93:bc:a3:8e:4b:a3:c2:bc:21:00:e6:bb:
24:75:70:0f:6c:af:7f:eb:1d:a1:4a:33:46:9e:68:aa:51:ca:
8b:59:07:24:49:29:58:ed:62:0d:bc:7e:f8:7e:a6:2d:0d:31:
e0:2e:6c:e1:7b:d5:13:d8:79:0f:42:cb:1c:e6:22:8c:62:54:
82:aa:d6:60:cb:fd:81:9d:53:bd:36:45:8b:6f:79:be:89:b6:
11:a5:e7:5c:6a:fe:8d:a0:a1:74:81:4b:5a:e5:36:2b:97:16:
39:a5:5d:63:1b:93:f8:09:c0:a0:95:5d:20:ad:25:d9:be:3c:
27:40:84:79:86:3e:68:6c:0b:62:3e:5e:af:45:50:8b:ec:74:
9d:dd:3a:80:63:6c:5b:1b:ab:ec:95:28:9e:7b:0b:bb:62:45:
bb:75:8c:0f:b7:a5:6b:a1:bd:4b:58:80:a8:ce:56:4d:41:9d:
d7:a7:4c:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fHz/AcYsGROPFQ9fvUYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWRhYTYzMzkxMDNiZGI1NTY2ZDgzMjcxZDNjNDdjMDA1
YzI1MGQwHhcNMjUwNjI4MTcwMTE4WhcNMjUwNjI5MTcwMTE4WjAzMTEwLwYDVQQD
Eyg1ZTk3MDJkNzliNjU1ZTE4N2EyZmE4OWU2ZTk3MzNjMzczMjc1N2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxazYICeahhR5nOQgjArF707wHYz
6RznxnrYUwpfc4bvsNr9Cu6olfOAWoKrhOIyOM0Ux6Pz7xqd9fxJV+TPMReuwTZx
zndFEhCHKHW3Rm1e3hYpDy7W2gV+JSKj1u+QZCeXR5rCWSDAMB1d50kVDomh8aZY
MaGvTZyxDrRztxZICqADiaIxLv13s5qOyc0NO0/0Sa9CGe1P/w9Dt86ZBfDWwAN4
9ymg6JlweQWhraN0txB1y14mDNdhqCSOsVh94e4JoQvTa4f8W7uem5JfgFuzHHg7
aDLeBGOG+H3ytppZEbDYKXCvX2iNFI6fVqHrNgtU5IGxJKSUpbSqWGwXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6XAtebZV4Yei+onm6XM8NzJ1eqMB8GA1UdIwQY
MBaAFO6tqmM5EDvbVWbYMnHTxHwAXCUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMt
MjE0MmMwYzQzODVmLzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMtMjE0MmMwYzQzODVm
LzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhsrnXoP
RD4TLdt87EcKG3t9x9ZjGvGHT89hwRU8c/weGUcq5OLmDhJQp9beKX6bQDwZnZqy
pYxk9TT9MDlJHnPqomPU96bepw6RJdRak7yjjkujwrwhAOa7JHVwD2yvf+sdoUoz
Rp5oqlHKi1kHJEkpWO1iDbx++H6mLQ0x4C5s4XvVE9h5D0LLHOYijGJUgqrWYMv9
gZ1TvTZFi295vom2EaXnXGr+jaChdIFLWuU2K5cWOaVdYxuT+AnAoJVdIK0l2b48
J0CEeYY+aGwLYj5er0VQi+x0nd06gGNsWxur7JUonnsLu2JFu3WMD7ela6G9S1iA
qM5WTUGd16dMlg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:23 2025 by rpki-client