Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: 6AK3V5ss6+LPPw+mwtnyXOT77MTm2rq3kWvcyPyoNB8=
Subject key identifier: E7:03:16:C8:52:14:C3:10:9A:E1:BE:48:BD:AD:A7:50:70:B4:78:7C
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 0197B6326C88AC5096306DD61507EB490A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 12DE
Signing time: Sat 28 Jun 2025 11:00:47 +0000
Manifest this update: Sat 28 Jun 2025 11:00:47 +0000
Manifest next update: Sun 29 Jun 2025 11:00:47 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: unhuoAHeVaTKr/SHnDEk5Ohtd2gUGnEPT9H8w0fHgz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:6c:88:ac:50:96:30:6d:d6:15:07:eb:49:0a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Jun 28 11:00:47 2025 GMT
Not After : Jun 29 11:00:47 2025 GMT
Subject: CN=e70316c85214c3109ae1be48bdada75070b4787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:5e:16:ae:e8:01:8b:1e:94:ba:79:b5:5b:
1c:80:e3:ee:ba:85:21:8b:67:87:9c:74:52:f6:35:
48:2b:36:d5:d9:b9:ca:f6:ac:57:75:88:20:56:04:
83:47:3d:d1:d9:ba:56:0f:92:a1:6f:63:24:7a:ee:
89:0f:ee:54:5c:b8:27:16:db:72:57:e1:bf:1f:73:
7e:ee:36:65:77:b4:fd:07:47:dc:d0:06:29:c6:95:
cc:c2:dd:c3:7a:11:7a:97:ba:2a:a2:15:99:aa:8f:
16:88:b3:7f:51:b5:5d:b8:08:06:bc:8e:d5:04:be:
45:18:fd:7a:da:bb:e1:c9:5f:a7:5d:b0:36:32:00:
48:5b:0a:c4:42:77:ad:aa:f6:49:f7:b4:aa:31:62:
f9:30:b9:01:3b:e7:34:05:25:3a:8c:7a:fc:d7:0c:
30:61:42:4f:2a:2b:cd:7a:d9:83:2d:db:e7:02:66:
eb:31:2c:b8:49:82:49:45:00:89:e9:fa:13:5c:c4:
bb:92:4e:ae:76:cd:c1:47:e4:db:16:30:63:fb:37:
26:1a:d8:2a:35:6e:5b:09:98:7d:50:3b:6b:5d:52:
22:07:9f:2d:13:48:5c:05:01:16:0d:4f:02:33:1e:
a3:cb:28:5a:33:c2:90:5e:f5:f3:e4:48:f7:62:0e:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:16:C8:52:14:C3:10:9A:E1:BE:48:BD:AD:A7:50:70:B4:78:7C
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:42:03:80:95:a0:d8:17:36:71:d5:6e:a0:c1:13:35:a8:b7:
07:b9:c2:95:70:cc:d7:97:dd:7d:16:0e:43:8b:3d:62:de:90:
96:d5:36:55:ab:13:64:56:4b:4d:d6:75:e6:3c:5f:2a:5e:88:
c3:6d:92:60:f8:1c:28:20:43:5a:4a:fd:56:bd:ed:4e:a3:97:
0d:10:29:02:11:41:f5:df:e0:26:b2:2d:9a:75:d7:6e:0b:46:
3a:aa:5a:b6:fd:4a:86:82:5a:09:0d:f4:53:70:a2:dc:4e:6f:
36:a0:00:5f:79:e4:ba:90:5f:2a:fc:0b:43:d4:fc:2f:67:92:
72:84:96:04:9b:a3:ac:d9:69:29:2c:03:ea:1f:98:38:b9:73:
b8:89:3e:24:60:d5:64:e1:65:87:e2:ac:93:7a:45:f4:4e:0d:
d6:6f:d1:39:74:09:51:73:94:17:5c:e5:a5:7a:32:8f:4b:c8:
c7:f1:94:aa:f3:53:d2:cf:1d:18:d2:b8:bd:74:c5:fc:34:19:
51:9b:e3:ab:ab:2b:04:a5:f0:56:0f:0c:9d:0e:ff:35:72:12:
d3:29:30:7e:01:80:e9:97:7f:e7:01:ca:46:90:80:91:79:7c:
cd:ff:2c:93:e6:f1:5f:ed:4d:34:58:92:77:25:53:29:aa:c9:
40:a3:77:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MmyIrFCWMG3WFQfrSQpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjg3YTJjMzA5ZDc1NTUzYTQ2ZTEwMjU3NzVlOWFhNDFm
NmIzMzcwHhcNMjUwNjI4MTEwMDQ3WhcNMjUwNjI5MTEwMDQ3WjAzMTEwLwYDVQQD
EyhlNzAzMTZjODUyMTRjMzEwOWFlMWJlNDhiZGFkYTc1MDcwYjQ3ODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk09eFq7oAYselLp5tVscgOPuuoUh
i2eHnHRS9jVIKzbV2bnK9qxXdYggVgSDRz3R2bpWD5Khb2Mkeu6JD+5UXLgnFtty
V+G/H3N+7jZld7T9B0fc0AYpxpXMwt3DehF6l7oqohWZqo8WiLN/UbVduAgGvI7V
BL5FGP162rvhyV+nXbA2MgBIWwrEQnetqvZJ97SqMWL5MLkBO+c0BSU6jHr81www
YUJPKivNetmDLdvnAmbrMSy4SYJJRQCJ6foTXMS7kk6uds3BR+TbFjBj+zcmGtgq
NW5bCZh9UDtrXVIiB58tE0hcBQEWDU8CMx6jyyhaM8KQXvXz5Ej3Yg6UfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcDFshSFMMQmuG+SL2tp1BwtHh8MB8GA1UdIwQY
MBaAFC+4eiwwnXVVOkbhAld16apB9rM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMt
NzcxN2ViMzE5MTYwLzEvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMtNzcxN2ViMzE5MTYw
LzEvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0IDgJWg
2Bc2cdVuoMETNai3B7nClXDM15fdfRYOQ4s9Yt6QltU2VasTZFZLTdZ15jxfKl6I
w22SYPgcKCBDWkr9Vr3tTqOXDRApAhFB9d/gJrItmnXXbgtGOqpatv1KhoJaCQ30
U3Ci3E5vNqAAX3nkupBfKvwLQ9T8L2eScoSWBJujrNlpKSwD6h+YOLlzuIk+JGDV
ZOFlh+Ksk3pF9E4N1m/ROXQJUXOUF1zlpXoyj0vIx/GUqvNT0s8dGNK4vXTF/DQZ
UZvjq6srBKXwVg8MnQ7/NXIS0ykwfgGA6Zd/5wHKRpCAkXl8zf8sk+bxX+1NNFiS
dyVTKarJQKN31Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:18 2025 by rpki-client