Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: cd0+7zG2J5D47RzXSYK5stCJdBAWJpcw+5k32m+bvWI=
Subject key identifier: A1:A9:CA:2B:F1:EF:94:5D:69:3E:13:22:31:C6:EF:78:22:12:B2:11
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 0197B6A2191E1761083B64803D25AC05B12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 086E
Signing time: Sat 28 Jun 2025 13:02:45 +0000
Manifest this update: Sat 28 Jun 2025 13:02:45 +0000
Manifest next update: Sun 29 Jun 2025 13:02:45 +0000
Files and hashes: 1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: +C7UhKa6enVlXgjYNpPIJMLu0EPaSWlRlFM37gaSJWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:19:1e:17:61:08:3b:64:80:3d:25:ac:05:b1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Jun 28 13:02:45 2025 GMT
Not After : Jun 29 13:02:45 2025 GMT
Subject: CN=a1a9ca2bf1ef945d693e132231c6ef782212b211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:c2:b7:64:ad:0c:dd:ea:38:b2:b1:5a:bb:
70:04:bd:39:b9:00:cc:c7:c3:0f:d3:c7:19:0c:f9:
29:59:e2:eb:89:d0:10:35:9d:15:c0:59:4f:bd:fd:
15:b4:a3:03:09:8f:cc:9f:9b:25:53:8d:31:57:86:
6d:a7:92:6c:28:40:a0:29:ab:54:c6:f4:cb:2d:9d:
81:d1:51:67:de:a5:30:b0:7d:b3:0d:b9:89:59:1b:
ec:1c:2c:04:cc:b5:0a:d5:8d:7c:02:10:52:af:e3:
b5:4f:24:57:77:03:5c:98:47:17:bb:e1:ae:9d:36:
48:d3:77:17:4c:93:a8:34:82:b3:64:3b:ad:2c:9f:
69:ff:84:5b:ea:b4:8b:ec:fb:6d:cb:d3:08:cd:c9:
02:58:99:36:e2:eb:b2:30:51:40:4a:88:da:0e:90:
c5:5a:4f:0f:dd:16:5b:e9:f7:d0:17:a5:35:41:64:
9f:3c:d4:53:e0:67:89:ef:4d:31:77:17:e4:de:d6:
20:95:3c:78:52:ff:53:eb:9c:42:5d:01:58:e0:ad:
d7:92:c3:8e:62:ba:84:b3:2f:f3:66:65:36:cd:01:
9f:3f:b3:34:38:5b:b5:67:69:0f:3a:df:89:88:4a:
56:de:7e:05:8c:15:95:46:b4:11:f7:21:af:0b:65:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A9:CA:2B:F1:EF:94:5D:69:3E:13:22:31:C6:EF:78:22:12:B2:11
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a1:eb:76:82:d9:37:7a:aa:8f:08:8c:bb:ae:8f:28:59:71:
7c:d8:b0:7f:54:74:38:8a:f0:bf:8e:71:12:98:b8:33:46:de:
a8:c1:82:18:c7:c8:96:02:39:11:8c:2a:e4:ba:b3:d2:25:94:
3c:b6:f7:2a:46:b2:cb:39:cb:24:30:3c:c5:6b:47:32:c7:32:
17:33:5f:0b:02:c7:22:bf:71:3d:c5:f0:c8:16:94:4d:69:37:
dd:46:6a:f6:3d:99:7a:8a:4a:68:47:34:53:f8:b5:e7:e9:3f:
d2:a2:b4:94:b9:d4:a9:bd:63:a9:b7:3c:cf:3b:bc:94:c2:6c:
7a:61:08:95:44:c2:7f:9e:92:2d:43:c4:08:05:85:ce:eb:a0:
a1:4d:fb:15:bc:99:e6:b6:1a:46:6a:f2:d7:1e:d4:6f:bd:de:
1d:b8:6b:2d:8a:6e:31:f8:0e:4d:66:36:78:23:f9:64:83:47:
17:67:6a:e8:f5:40:72:dd:96:c5:eb:6f:a4:17:20:30:32:99:
4a:42:7f:1a:5d:4d:36:36:7a:1a:a6:d3:c3:07:7c:68:1d:0f:
dc:6e:cc:d4:f3:ba:67:6e:a5:f8:71:0d:51:0d:98:f6:c9:fb:
f4:e6:54:17:07:9f:0c:bb:ba:76:5c:91:37:73:72:b2:34:af:
76:bd:49:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ohkeF2EIO2SAPSWsBbEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjFkMGYyYzNkMjFlNTRjNGQxODEyNzYwNDQzNWE5MGYy
NGRiNTEwHhcNMjUwNjI4MTMwMjQ1WhcNMjUwNjI5MTMwMjQ1WjAzMTEwLwYDVQQD
EyhhMWE5Y2EyYmYxZWY5NDVkNjkzZTEzMjIzMWM2ZWY3ODIyMTJiMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMHCt2StDN3qOLKxWrtwBL05uQDM
x8MP08cZDPkpWeLridAQNZ0VwFlPvf0VtKMDCY/Mn5slU40xV4Ztp5JsKECgKatU
xvTLLZ2B0VFn3qUwsH2zDbmJWRvsHCwEzLUK1Y18AhBSr+O1TyRXdwNcmEcXu+Gu
nTZI03cXTJOoNIKzZDutLJ9p/4Rb6rSL7Ptty9MIzckCWJk24uuyMFFASojaDpDF
Wk8P3RZb6ffQF6U1QWSfPNRT4GeJ700xdxfk3tYglTx4Uv9T65xCXQFY4K3XksOO
YrqEsy/zZmU2zQGfP7M0OFu1Z2kPOt+JiEpW3n4FjBWVRrQR9yGvC2WLSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGpyivx75RdaT4TIjHG73giErIRMB8GA1UdIwQY
MBaAFAux0PLD0h5UxNGBJ2BENakPJNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQt
Nzk5ZjdmNDU2MTYwLzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQtNzk5ZjdmNDU2MTYw
LzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6HrdoLZ
N3qqjwiMu66PKFlxfNiwf1R0OIrwv45xEpi4M0beqMGCGMfIlgI5EYwq5Lqz0iWU
PLb3KkayyznLJDA8xWtHMscyFzNfCwLHIr9xPcXwyBaUTWk33UZq9j2ZeopKaEc0
U/i15+k/0qK0lLnUqb1jqbc8zzu8lMJsemEIlUTCf56SLUPECAWFzuugoU37FbyZ
5rYaRmry1x7Ub73eHbhrLYpuMfgOTWY2eCP5ZINHF2dq6PVAct2WxetvpBcgMDKZ
SkJ/Gl1NNjZ6GqbTwwd8aB0P3G7M1PO6Z26l+HENUQ2Y9sn79OZUFwefDLu6dlyR
N3NysjSvdr1JwA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:21 2025 by rpki-client