Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: 3534xUqyOYYUGhGWB5IAm+E8RscQhCZJ76a7A7PgY7w=
Subject key identifier: B6:CB:4F:C5:CF:4A:4D:A4:FA:BB:FF:E5:0C:0D:49:EE:16:CD:B1:E1
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 0197B6A1B5DF839544AB3DFB3977E9AA6870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0C35
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: 8OkLdkNVV6LdjWuIWJGR3Qn+uDazGoDiMlKaqPIr0jQ=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b5:df:83:95:44:ab:3d:fb:39:77:e9:aa:68:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=b6cb4fc5cf4a4da4fabbffe50c0d49ee16cdb1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:81:80:e9:2e:f8:83:06:51:99:96:6e:7e:
fc:2e:68:4a:6a:23:73:25:3c:30:d6:c1:72:bb:e0:
6b:58:d4:6c:c4:05:bf:eb:2c:a8:25:05:6e:96:fd:
33:88:8a:a7:56:8e:2b:1d:12:10:c6:41:94:62:f1:
e0:cb:49:3c:54:21:3e:47:ff:ef:82:90:ed:3f:ca:
bf:d1:13:74:1a:76:f6:75:e2:a2:97:f1:2a:67:8a:
d6:df:56:e9:9e:7b:e9:5a:a0:fc:35:14:59:80:1e:
ed:03:2e:b5:8f:14:b0:bc:c4:75:0a:e6:57:1a:46:
2a:b9:7c:f2:27:28:68:e6:c0:bd:38:a7:03:9d:7d:
83:bc:fe:80:f3:83:20:a1:41:09:be:2c:ea:fb:79:
4f:fb:36:3c:1f:30:45:ce:93:68:21:96:e9:f5:57:
03:2d:f4:8e:6d:96:1a:6e:b3:d0:56:70:4b:04:fb:
c4:c4:eb:07:53:2f:76:99:e4:df:e6:6d:59:e5:67:
f9:28:fb:3a:ad:51:43:08:12:cc:f2:f7:f4:22:82:
0d:26:a9:7c:f7:0a:12:1d:bf:6c:c4:41:34:87:35:
95:c3:99:0f:58:53:99:0a:db:94:3b:7a:51:1c:e3:
ae:e8:94:a5:23:60:39:e4:f1:2d:7f:51:b7:d2:9a:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:4F:C5:CF:4A:4D:A4:FA:BB:FF:E5:0C:0D:49:EE:16:CD:B1:E1
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:91:78:40:f4:22:8f:6f:a9:99:a2:0e:7f:c3:b1:22:f2:2f:
dd:43:c9:74:3b:38:21:48:90:fb:70:1c:df:5b:01:a8:f4:d3:
80:92:d8:ae:3c:5e:3a:e8:7b:17:15:44:46:ea:bc:fe:8b:c5:
ac:fa:ce:0f:e0:ca:ed:f8:30:94:57:69:25:8e:db:d4:2c:7d:
18:29:16:3f:10:a4:12:4f:f7:7c:8c:0d:15:8f:91:84:91:86:
45:ae:db:0b:a6:18:c9:f4:50:ff:36:9a:c3:77:a8:01:38:fc:
a7:a9:6a:49:ba:43:a2:07:07:70:dd:2a:90:70:af:f3:03:42:
4e:4a:d4:32:4a:05:be:7f:0a:3b:81:42:aa:a7:4f:4b:a6:4f:
8e:55:3a:43:72:4d:33:d2:c5:39:12:b0:88:93:fd:d7:47:43:
ba:d5:07:d5:ce:94:9e:8a:1a:90:eb:a1:8c:99:25:57:81:09:
c3:d7:f1:d5:cc:25:4e:1c:a9:cc:91:46:96:4b:a0:34:30:99:
d0:f4:88:3d:26:1c:37:72:ba:d8:04:2d:14:74:ca:ef:60:fc:
b4:df:de:4e:57:2c:c0:79:9a:0e:37:e8:dd:0a:ed:f6:1d:c5:
37:85:52:d0:2e:28:7c:3f:da:9a:02:c6:1a:50:f4:05:fd:ec:
64:16:15:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obXfg5VEqz37OXfpqmhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGRkZjgyMTIwOGEzNzBlM2E1YjdlZjhjZDQ3OTdjZmM1
Nzc0ODIwHhcNMjUwNjI4MTMwMjIwWhcNMjUwNjI5MTMwMjIwWjAzMTEwLwYDVQQD
EyhiNmNiNGZjNWNmNGE0ZGE0ZmFiYmZmZTUwYzBkNDllZTE2Y2RiMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN+BgOku+IMGUZmWbn78LmhKaiNz
JTww1sFyu+BrWNRsxAW/6yyoJQVulv0ziIqnVo4rHRIQxkGUYvHgy0k8VCE+R//v
gpDtP8q/0RN0Gnb2deKil/EqZ4rW31bpnnvpWqD8NRRZgB7tAy61jxSwvMR1CuZX
GkYquXzyJyho5sC9OKcDnX2DvP6A84MgoUEJvizq+3lP+zY8HzBFzpNoIZbp9VcD
LfSObZYabrPQVnBLBPvExOsHUy92meTf5m1Z5Wf5KPs6rVFDCBLM8vf0IoINJql8
9woSHb9sxEE0hzWVw5kPWFOZCtuUO3pRHOOu6JSlI2A55PEtf1G30pprxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbLT8XPSk2k+rv/5QwNSe4WzbHhMB8GA1UdIwQY
MBaAFO2N34ISCKNw46W374zUeXz8V3SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMt
ZTlkODFlM2Q4YjU0LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMtZTlkODFlM2Q4YjU0
LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJF4QPQi
j2+pmaIOf8OxIvIv3UPJdDs4IUiQ+3Ac31sBqPTTgJLYrjxeOuh7FxVERuq8/ovF
rPrOD+DK7fgwlFdpJY7b1Cx9GCkWPxCkEk/3fIwNFY+RhJGGRa7bC6YYyfRQ/zaa
w3eoATj8p6lqSbpDogcHcN0qkHCv8wNCTkrUMkoFvn8KO4FCqqdPS6ZPjlU6Q3JN
M9LFORKwiJP910dDutUH1c6UnooakOuhjJklV4EJw9fx1cwlThypzJFGlkugNDCZ
0PSIPSYcN3K62AQtFHTK72D8tN/eTlcswHmaDjfo3Qrt9h3FN4VS0C4ofD/amgLG
GlD0Bf3sZBYV5g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:33 2025 by rpki-client