Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: rlUMOyU77LN3NpyC+M949qf+S+nzVHWHp426ks2urwk=
Subject key identifier: A7:B8:8B:97:5A:EE:02:B2:61:F7:9E:28:19:F3:9F:FA:A3:22:E7:C4
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 0197B6A0AC8487C7B60F96441FD403E758B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: 2MNoHrX6Hd6/eVdfqvW2U4ez17yk9+gn79a0BrTmJpo=)
4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ac:84:87:c7:b6:0f:96:44:1f:d4:03:e7:58:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=a7b88b975aee02b261f79e2819f39ffaa322e7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:96:d3:8a:f8:70:00:e5:7d:f0:cf:5e:8f:
e6:dc:1b:a8:9a:55:3d:40:ed:52:3b:ad:fd:56:b0:
3f:44:69:42:51:81:ed:00:b2:80:5c:11:4f:70:34:
b3:d6:c4:10:a2:26:3c:27:c0:3a:c9:77:02:f6:c5:
8c:23:10:2e:95:2b:c7:fe:c6:f3:2b:d1:2a:a5:64:
94:6a:cc:2f:12:18:d6:fb:58:2a:a1:5f:43:cd:a7:
da:d2:eb:64:48:0e:81:fd:4a:9b:fb:44:99:dc:87:
e8:3f:a4:63:b7:da:d8:19:87:1b:1d:82:19:0c:51:
35:2a:4d:d7:a3:5b:7f:09:7e:79:98:e0:04:8b:04:
ee:a2:40:a8:f9:1c:c5:66:0a:d6:75:4d:79:15:02:
06:6f:69:21:55:8b:99:ff:00:2c:91:bc:8b:3f:ff:
90:e3:a8:33:d5:d4:c7:82:7d:cc:2a:90:3f:97:9c:
83:74:6b:f6:b1:bd:65:48:30:c6:8d:28:ac:57:72:
3f:db:d9:f4:42:6b:d7:d8:93:e4:98:13:c0:ed:5f:
53:3c:84:e3:ef:f9:ac:5d:08:5f:0a:ca:b6:64:b5:
d2:7a:88:04:7a:7c:ca:6c:79:df:9f:6a:a6:5d:e4:
66:bf:55:95:45:1e:8b:df:ed:6f:54:ad:76:b6:85:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:8B:97:5A:EE:02:B2:61:F7:9E:28:19:F3:9F:FA:A3:22:E7:C4
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:21:0b:63:22:1f:5b:e9:0d:df:59:da:26:3c:6c:16:1b:1d:
f4:c8:53:46:2a:ed:7a:1e:97:a6:7e:ba:1c:3b:8a:98:62:e0:
23:91:e7:ec:bd:7c:70:e3:b6:df:f9:d8:1d:ba:e5:61:5a:3c:
e8:79:1c:d2:7b:97:7c:2a:49:a4:33:06:3f:66:f8:81:e9:c3:
2e:b7:72:7d:86:67:3d:59:fb:f6:d6:10:85:41:f1:aa:8e:52:
b6:01:80:65:22:a4:b5:94:b5:9e:d5:7d:6b:0e:9c:7f:de:7d:
ba:08:2d:77:0b:30:cb:2e:a9:f0:99:0a:fa:4a:af:49:c5:61:
3e:fe:b6:97:37:aa:b2:9f:09:9e:47:29:ef:5d:70:49:65:51:
b2:5a:84:9d:d7:2d:f5:4a:95:ae:ce:dd:84:d1:4c:91:56:94:
de:2e:7b:49:58:6c:2a:99:25:ca:a2:92:53:70:01:0e:c0:65:
45:be:4c:b9:e0:49:ba:aa:a6:6e:e6:df:17:52:54:ed:04:94:
70:ce:e5:2d:29:61:77:dd:73:66:b2:19:58:9b:f5:aa:66:77:
d6:e0:4e:53:f1:fc:55:18:a5:47:91:ee:ac:f6:0a:0c:18:5f:
6e:8b:54:2f:2b:e7:81:9f:58:dc:32:16:e9:c0:45:19:4e:82:
c7:ef:90:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKyEh8e2D5ZEH9QD51izMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjVkMzE0NDBiZjc1ZDI1YzYwNmY3OTE1YzIzNmNhNjE0
NDY0YTIwHhcNMjUwNjI4MTMwMTEyWhcNMjUwNjI5MTMwMTEyWjAzMTEwLwYDVQQD
EyhhN2I4OGI5NzVhZWUwMmIyNjFmNzllMjgxOWYzOWZmYWEzMjJlN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31WW04r4cADlffDPXo/m3BuomlU9
QO1SO639VrA/RGlCUYHtALKAXBFPcDSz1sQQoiY8J8A6yXcC9sWMIxAulSvH/sbz
K9EqpWSUaswvEhjW+1gqoV9Dzafa0utkSA6B/Uqb+0SZ3IfoP6Rjt9rYGYcbHYIZ
DFE1Kk3Xo1t/CX55mOAEiwTuokCo+RzFZgrWdU15FQIGb2khVYuZ/wAskbyLP/+Q
46gz1dTHgn3MKpA/l5yDdGv2sb1lSDDGjSisV3I/29n0QmvX2JPkmBPA7V9TPITj
7/msXQhfCsq2ZLXSeogEenzKbHnfn2qmXeRmv1WVRR6L3+1vVK12toVbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe4i5da7gKyYfeeKBnzn/qjIufEMB8GA1UdIwQY
MBaAFOxl0xRAv3XSXGBveRXCNsphRGSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzkt
ZTI5NTg5ZTg5NjRhLzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzktZTI5NTg5ZTg5NjRh
LzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSELYyIf
W+kN31naJjxsFhsd9MhTRirteh6Xpn66HDuKmGLgI5Hn7L18cOO23/nYHbrlYVo8
6Hkc0nuXfCpJpDMGP2b4genDLrdyfYZnPVn79tYQhUHxqo5StgGAZSKktZS1ntV9
aw6cf959uggtdwswyy6p8JkK+kqvScVhPv62lzeqsp8Jnkcp711wSWVRslqEndct
9UqVrs7dhNFMkVaU3i57SVhsKpklyqKSU3ABDsBlRb5MueBJuqqmbubfF1JU7QSU
cM7lLSlhd91zZrIZWJv1qmZ31uBOU/H8VRilR5HurPYKDBhfbotULyvngZ9Y3DIW
6cBFGU6Cx++QRg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:47 2025 by rpki-client