Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
File: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft (raw, json)
Hash identifier: Yr8W0zEipkMZg+v04kQOqpPri43FfGurspSRT62zNSk=
Subject key identifier: FD:78:8C:DE:14:3C:17:50:43:93:FE:80:B6:7D:F4:98:78:88:4D:FB
Authority key identifier: EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD
Certificate issuer: /CN=ef0f20533dcc7995a28cf67767a041698667c4cd
Certificate serial: 0197B6A1682FADB86186F1A8B3131BFB763B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
Manifest number: 0AFC
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl (hash: P94jbdbPYKRb/3PniRTsdWWKPb3UzqBpSnWkEvkIJ5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:68:2f:ad:b8:61:86:f1:a8:b3:13:1b:fb:76:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0f20533dcc7995a28cf67767a041698667c4cd
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=fd788cde143c17504393fe80b67df49878884dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:02:6f:ec:5a:e8:8e:c9:a4:4c:d5:61:1e:
4e:e0:d2:8e:93:0c:c7:3d:c9:f8:06:02:5c:f3:2f:
cd:5e:1e:be:4a:d6:60:54:19:07:05:8b:24:56:8b:
d3:19:02:85:78:5d:54:e1:cf:fb:4e:f0:b9:01:6a:
64:22:bf:1c:9b:e4:21:36:22:45:4a:f5:35:8b:ab:
c4:38:7d:cb:cc:f9:5d:60:87:6e:c7:38:dc:cc:ec:
5f:68:e1:72:8f:10:09:32:a0:66:8e:fc:1e:2b:0a:
a4:4f:cc:01:d9:03:1f:8d:5c:25:ac:78:ad:07:bb:
8e:98:dd:f8:9c:d6:2d:5d:0a:d1:a5:c6:1a:a8:e4:
b9:69:d9:4f:37:93:44:99:47:70:88:59:1e:01:b8:
41:69:b8:3c:b7:ac:b3:e5:ef:3d:09:91:9d:64:b5:
4b:51:32:1c:57:7a:d6:7f:0c:37:b0:3b:30:ba:39:
0c:2d:c6:10:08:54:36:8c:b1:35:0d:ca:b5:20:72:
78:42:db:62:cc:e7:a5:19:7a:72:0d:13:65:99:69:
6a:2e:a5:fc:c1:bb:33:34:72:12:9e:63:4c:29:54:
38:fb:9a:1c:5f:97:a0:f6:c4:74:74:3c:db:55:fc:
40:15:53:e3:b1:f6:cd:77:d0:b4:9e:93:ae:50:5d:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:8C:DE:14:3C:17:50:43:93:FE:80:B6:7D:F4:98:78:88:4D:FB
X509v3 Authority Key Identifier:
keyid:EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:59:de:20:26:cd:57:6c:5e:a2:5f:c9:a6:8b:f9:6f:d5:
d6:29:db:6b:a6:07:dc:98:08:40:f8:cb:14:fe:07:fd:82:d9:
ba:f4:2d:5e:9f:fc:0b:d2:f0:8f:ea:d2:1d:ba:e7:03:ce:c1:
12:bc:c9:9b:d1:e9:ad:ef:40:7c:ff:46:4c:48:bf:1d:ea:73:
83:1a:ad:b3:d6:d7:b2:72:ff:71:9a:c1:b7:f6:61:41:27:1a:
30:f2:e2:fa:c8:9b:f6:bc:7b:d2:b2:08:35:ea:c3:a9:0e:79:
dc:d0:0e:18:cd:ba:6d:d4:7b:f9:93:86:0e:c2:40:22:67:32:
ab:d1:45:01:e4:14:ea:81:13:8c:a8:3b:79:6d:72:86:ce:01:
24:b6:a1:7b:70:91:aa:9e:18:09:ca:3f:26:93:67:8e:1e:9f:
1f:79:84:71:da:37:3c:28:66:99:78:e8:61:95:db:ab:fa:8e:
82:21:1f:5a:51:b2:27:89:fe:6e:90:04:5a:d9:d9:e0:14:50:
a6:00:b1:e9:4d:b1:b2:e7:28:40:db:c1:45:5d:ab:b8:17:de:
a0:87:72:48:e4:f2:61:13:a6:a2:88:12:9d:35:04:dc:1a:4c:
3a:ef:1f:bd:f6:c4:fa:42:c5:bb:d7:27:6b:45:ff:f7:2c:e2:
0a:af:39:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWgvrbhhhvGosxMb+3Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGYyMDUzM2RjYzc5OTVhMjhjZjY3NzY3YTA0MTY5ODY2
N2M0Y2QwHhcNMjUwNjI4MTMwMjAwWhcNMjUwNjI5MTMwMjAwWjAzMTEwLwYDVQQD
EyhmZDc4OGNkZTE0M2MxNzUwNDM5M2ZlODBiNjdkZjQ5ODc4ODg0ZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3gCb+xa6I7JpEzVYR5O4NKOkwzH
Pcn4BgJc8y/NXh6+StZgVBkHBYskVovTGQKFeF1U4c/7TvC5AWpkIr8cm+QhNiJF
SvU1i6vEOH3LzPldYIduxzjczOxfaOFyjxAJMqBmjvweKwqkT8wB2QMfjVwlrHit
B7uOmN34nNYtXQrRpcYaqOS5adlPN5NEmUdwiFkeAbhBabg8t6yz5e89CZGdZLVL
UTIcV3rWfww3sDswujkMLcYQCFQ2jLE1Dcq1IHJ4QttizOelGXpyDRNlmWlqLqX8
wbszNHISnmNMKVQ4+5ocX5eg9sR0dDzbVfxAFVPjsfbNd9C0npOuUF1m8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP14jN4UPBdQQ5P+gLZ99Jh4iE37MB8GA1UdIwQY
MBaAFO8PIFM9zHmVooz2d2egQWmGZ8TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZDg4M2QtZDI0My00YjFlLWEzMmEt
ZDE0OTQ2ZTRmNWNkLzEvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZDg4M2QtZDI0My00YjFlLWEzMmEtZDE0OTQ2ZTRmNWNk
LzEvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuZZ3iAm
zVdsXqJfyaaL+W/V1inba6YH3JgIQPjLFP4H/YLZuvQtXp/8C9Lwj+rSHbrnA87B
ErzJm9Hpre9AfP9GTEi/Hepzgxqts9bXsnL/cZrBt/ZhQScaMPLi+sib9rx70rII
NerDqQ553NAOGM26bdR7+ZOGDsJAImcyq9FFAeQU6oETjKg7eW1yhs4BJLahe3CR
qp4YCco/JpNnjh6fH3mEcdo3PChmmXjoYZXbq/qOgiEfWlGyJ4n+bpAEWtnZ4BRQ
pgCx6U2xsucoQNvBRV2ruBfeoIdySOTyYROmoogSnTUE3BpMOu8fvfbE+kLFu9cn
a0X/9yziCq852A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:21 2025 by rpki-client