Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: DVphzWsZQg3lkFrzGmlstzK0CoNa0Wu9FIh8aVwToR8=
Subject key identifier: F6:2A:39:B2:2A:40:98:52:CD:A6:D2:E1:99:B0:34:FA:AD:87:4C:63
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 0197B88F47F5D178AA9051553A0C80799BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 0C22
Signing time: Sat 28 Jun 2025 22:01:27 +0000
Manifest this update: Sat 28 Jun 2025 22:01:27 +0000
Manifest next update: Sun 29 Jun 2025 22:01:27 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: 7l9p4XdVQO9ctGCpa2zYxOwghQLvBvKUSuF6IZjFF/k=)
2: SKNwRQHq8FB4J3GiSrqdAZqx9XI.roa (hash: YDB6Pr5yEfHTfF51Rh24jRXxG46u/SVtTDlhp5pda68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:47:f5:d1:78:aa:90:51:55:3a:0c:80:79:9b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Jun 28 22:01:27 2025 GMT
Not After : Jun 29 22:01:27 2025 GMT
Subject: CN=f62a39b22a409852cda6d2e199b034faad874c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:55:6e:03:57:3c:b7:dc:56:0f:89:54:4a:
79:ab:8e:81:3d:d7:6d:75:6e:82:d0:4b:4c:4d:73:
ae:27:7f:99:cc:0b:cf:61:a6:49:96:18:25:b8:58:
0a:84:21:a3:ef:f1:23:09:a2:b8:3d:84:31:c0:f9:
4c:b3:fe:3b:b0:f9:cf:0d:94:11:0c:c0:04:34:7b:
02:a1:5c:13:6c:89:20:71:19:0d:15:94:ad:0c:b4:
a6:fb:de:e5:c0:a1:61:21:d8:09:85:14:ec:de:92:
99:bf:d9:a7:1c:90:d1:f8:b7:d8:0e:99:6d:5a:b4:
fb:8c:85:d6:e9:79:3c:55:23:71:94:e5:cb:34:a3:
63:99:64:bd:74:fe:51:a4:1c:32:44:08:8d:89:a3:
9d:b1:be:28:ee:17:64:35:cd:6e:9a:5a:64:9b:b7:
b3:ca:d8:c2:55:fe:67:8b:d9:4a:f8:58:52:ad:e4:
c4:5a:b9:64:ac:a8:81:a6:10:bf:71:04:f9:1c:93:
5e:36:80:ad:5e:eb:5e:68:54:d4:fa:f5:4c:7d:95:
85:d8:10:71:99:78:f3:c4:24:d8:2f:30:32:bd:e3:
06:11:18:89:d5:34:d8:03:3b:0f:0f:da:25:73:5c:
92:aa:0c:79:a8:58:e9:02:be:7a:f2:ae:67:1a:cf:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:39:B2:2A:40:98:52:CD:A6:D2:E1:99:B0:34:FA:AD:87:4C:63
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1c:20:9d:7b:41:66:33:cc:93:ce:99:35:3b:6c:84:73:c7:
08:a3:85:ec:b9:1d:6b:c5:f9:5b:2b:2b:f9:b7:b2:bf:db:a5:
e8:99:ad:c0:35:2c:88:32:e8:eb:59:40:14:c6:06:04:b5:aa:
af:c2:1d:b6:0b:67:bc:89:14:5d:b6:42:a9:30:1d:fa:c0:8e:
3f:18:ae:44:59:ab:09:d3:a0:c7:e4:7d:e5:ac:db:b3:11:a8:
0b:2a:6b:27:8e:f0:ef:40:95:8a:15:92:e5:d4:0f:4e:c8:f3:
13:f2:89:bd:22:9d:a2:81:25:49:be:db:46:f9:c9:1d:f1:26:
4c:7d:05:c1:20:70:7d:5c:c0:17:ae:35:b2:38:bf:32:79:10:
25:43:3b:55:65:ae:e9:ff:3b:30:8c:ee:b2:60:79:9c:88:36:
88:39:fb:fb:8a:92:b9:b4:7b:93:72:b3:60:98:82:4b:fa:29:
9c:6d:f8:e1:0f:8b:48:24:77:ab:9c:38:fd:47:f4:a1:05:aa:
93:82:0c:6b:9f:e1:ab:12:7c:90:e5:98:7e:26:bf:e0:0a:f5:
78:ab:53:99:f0:38:74:8f:31:a0:3d:1a:6c:c5:e7:e9:7d:e7:
77:71:65:e1:4d:b2:46:a2:fb:00:af:c9:a3:24:b5:84:18:f5:
99:e6:01:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j0f10XiqkFFVOgyAeZvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMjkxODA2OWIyMWUxNjVmOGNjOTQyYTY3OTNmZGU1YjE2
NTViZTYwHhcNMjUwNjI4MjIwMTI3WhcNMjUwNjI5MjIwMTI3WjAzMTEwLwYDVQQD
EyhmNjJhMzliMjJhNDA5ODUyY2RhNmQyZTE5OWIwMzRmYWFkODc0YzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQtVbgNXPLfcVg+JVEp5q46BPddt
dW6C0EtMTXOuJ3+ZzAvPYaZJlhgluFgKhCGj7/EjCaK4PYQxwPlMs/47sPnPDZQR
DMAENHsCoVwTbIkgcRkNFZStDLSm+97lwKFhIdgJhRTs3pKZv9mnHJDR+LfYDplt
WrT7jIXW6Xk8VSNxlOXLNKNjmWS9dP5RpBwyRAiNiaOdsb4o7hdkNc1umlpkm7ez
ytjCVf5ni9lK+FhSreTEWrlkrKiBphC/cQT5HJNeNoCtXuteaFTU+vVMfZWF2BBx
mXjzxCTYLzAyveMGERiJ1TTYAzsPD9olc1ySqgx5qFjpAr568q5nGs9dkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYqObIqQJhSzabS4ZmwNPqth0xjMB8GA1UdIwQY
MBaAFOwpGAabIeFl+MyUKmeT/eWxZVvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5Mzkt
NWY2OTgwYjhjNDY3LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5MzktNWY2OTgwYjhjNDY3
LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRwgnXtB
ZjPMk86ZNTtshHPHCKOF7Lkda8X5Wysr+beyv9ul6JmtwDUsiDLo61lAFMYGBLWq
r8IdtgtnvIkUXbZCqTAd+sCOPxiuRFmrCdOgx+R95azbsxGoCyprJ47w70CVihWS
5dQPTsjzE/KJvSKdooElSb7bRvnJHfEmTH0FwSBwfVzAF641sji/MnkQJUM7VWWu
6f87MIzusmB5nIg2iDn7+4qSubR7k3KzYJiCS/opnG344Q+LSCR3q5w4/Uf0oQWq
k4IMa5/hqxJ8kOWYfia/4Ar1eKtTmfA4dI8xoD0abMXn6X3nd3Fl4U2yRqL7AK/J
oyS1hBj1meYBOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:40 2025 by rpki-client