Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File: 7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier: zkBjpgoi99Vceb3FKihTRNbb7uLzLW8SLnenxHShqU8=
Subject key identifier: FC:C8:5E:6F:B6:41:08:FD:85:BA:A7:9F:4C:BD:54:0F:E3:5F:34:36
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer: /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial: 0197B7B35AC07CE6D18D19EBBDFD03185294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number: 05A7
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: j/GA6TK1psTAz7X5dEoWLteSPQ1wQhGZTRpu8WfXtho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5a:c0:7c:e6:d1:8d:19:eb:bd:fd:03:18:52:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=fcc85e6fb64108fd85baa79f4cbd540fe35f3436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2e:ce:38:59:07:f0:de:b2:34:fa:cc:18:b1:
f7:40:19:7a:6c:0c:d7:16:cc:e1:c8:bd:ab:5a:5f:
bf:54:03:00:6d:78:97:93:52:0a:29:d8:c1:ae:f4:
0f:be:26:e2:af:57:77:83:05:98:88:5e:0c:ea:76:
16:08:cc:96:58:40:26:8e:3e:e0:11:40:c4:8e:3b:
31:3c:67:4c:d9:32:8e:2a:ef:7e:59:9f:87:c2:22:
d2:e6:86:57:aa:32:96:80:3f:98:7e:c5:3f:ff:e3:
a9:f5:89:ee:f2:69:d9:6f:98:62:69:58:e2:8d:85:
7a:d6:2c:59:27:ec:ca:08:51:b5:eb:38:ec:3a:e4:
97:96:ca:6b:62:48:d6:d7:4c:42:f4:cc:a9:a0:02:
41:81:eb:25:03:63:29:8c:d3:8c:29:65:04:87:33:
44:ca:b7:92:dd:79:34:05:75:06:e5:14:5e:61:17:
e3:3d:e1:0f:18:b2:e0:82:a4:47:67:44:7c:c9:48:
7b:f2:7f:2f:8a:50:e2:c2:d7:47:10:17:a2:ec:82:
76:84:a7:4c:3b:d2:0b:2e:cc:89:18:8b:11:64:86:
39:e6:93:59:6b:62:7e:62:df:cb:9d:1d:2f:3d:cb:
30:dd:f0:be:cd:1d:ae:7e:d1:05:0d:3e:4a:41:76:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:5E:6F:B6:41:08:FD:85:BA:A7:9F:4C:BD:54:0F:E3:5F:34:36
X509v3 Authority Key Identifier:
keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:00:ff:28:3a:6d:5b:e3:de:65:3d:4f:0c:47:bc:5f:4c:73:
5f:d9:f3:81:fd:20:0c:11:ae:87:73:41:28:58:f4:0e:bf:8e:
5a:83:94:1e:3c:01:07:95:a5:cf:3f:c6:d4:50:ae:3c:46:d0:
a0:f8:26:f2:c2:7c:05:c6:1c:7a:f9:61:4d:aa:04:b3:03:26:
70:dc:94:8f:7d:60:74:d6:71:f2:a0:be:a2:c2:2a:17:90:a3:
4b:c4:d5:d4:55:ae:4b:a6:89:bb:8a:88:d1:e6:60:2d:19:2a:
d1:4e:f8:ac:0c:f0:25:23:df:36:5f:1c:25:b3:d6:bf:68:28:
4b:64:61:91:3f:db:07:53:a7:74:28:3c:e7:07:3e:40:47:3a:
43:18:10:92:7a:87:1a:f8:25:19:1c:d3:c8:13:44:5e:a1:8a:
16:dc:f1:7f:d6:8a:b8:43:ff:a7:76:02:cc:b5:e9:72:26:98:
15:eb:9a:68:60:d2:07:1c:61:4c:88:8e:0a:b4:ab:eb:52:75:
0a:61:77:1a:eb:57:bd:fd:a0:5c:3e:40:21:3e:84:b8:08:1b:
9d:4d:a6:0d:2f:f6:6c:03:27:da:4d:27:39:bb:7c:09:34:b7:
3b:31:a0:c0:cd:7e:24:88:1b:9c:26:b8:95:5f:78:2e:9b:83:
24:9a:63:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1rAfObRjRnrvf0DGFKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjU3ZTg5ZGFiM2ZiMTVlM2JhZTBlYjFhYzdmYWM5M2Rm
NjM4NWQwHhcNMjUwNjI4MTgwMTE0WhcNMjUwNjI5MTgwMTE0WjAzMTEwLwYDVQQD
EyhmY2M4NWU2ZmI2NDEwOGZkODViYWE3OWY0Y2JkNTQwZmUzNWYzNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+y7OOFkH8N6yNPrMGLH3QBl6bAzX
FszhyL2rWl+/VAMAbXiXk1IKKdjBrvQPvibir1d3gwWYiF4M6nYWCMyWWEAmjj7g
EUDEjjsxPGdM2TKOKu9+WZ+HwiLS5oZXqjKWgD+YfsU//+Op9Ynu8mnZb5hiaVji
jYV61ixZJ+zKCFG16zjsOuSXlsprYkjW10xC9MypoAJBgeslA2MpjNOMKWUEhzNE
yreS3Xk0BXUG5RReYRfjPeEPGLLggqRHZ0R8yUh78n8vilDiwtdHEBei7IJ2hKdM
O9ILLsyJGIsRZIY55pNZa2J+Yt/LnR0vPcsw3fC+zR2uftEFDT5KQXZALwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzIXm+2QQj9hbqnn0y9VA/jXzQ2MB8GA1UdIwQY
MBaAFOxlfonas/sV47rg6xrH+sk99jhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOTFjNzAtYzNiYy00MDdmLTkzNWIt
ZmQ3MDg2N2JjMzM0LzEvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8zOTFjNzAtYzNiYy00MDdmLTkzNWItZmQ3MDg2N2JjMzM0
LzEvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgD/KDpt
W+PeZT1PDEe8X0xzX9nzgf0gDBGuh3NBKFj0Dr+OWoOUHjwBB5Wlzz/G1FCuPEbQ
oPgm8sJ8BcYcevlhTaoEswMmcNyUj31gdNZx8qC+osIqF5CjS8TV1FWuS6aJu4qI
0eZgLRkq0U74rAzwJSPfNl8cJbPWv2goS2RhkT/bB1OndCg85wc+QEc6QxgQknqH
GvglGRzTyBNEXqGKFtzxf9aKuEP/p3YCzLXpciaYFeuaaGDSBxxhTIiOCrSr61J1
CmF3GutXvf2gXD5AIT6EuAgbnU2mDS/2bAMn2k0nObt8CTS3OzGgwM1+JIgbnCa4
lV94LpuDJJpjMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:59 2025 by rpki-client