Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: U6+MA3H2GsAQ7IrN6ycQRx/XOrCnz3GS/jj0fNLc1PA=
Subject key identifier: 36:C1:07:DC:F3:AB:84:A9:FB:76:BC:F7:9E:62:09:00:E4:41:3C:37
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 0197B82151A6718A9D29A6035B793C0AF0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0D83
Signing time: Sat 28 Jun 2025 20:01:20 +0000
Manifest this update: Sat 28 Jun 2025 20:01:20 +0000
Manifest next update: Sun 29 Jun 2025 20:01:20 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: guBB7sqzCD50fIp+9oUM+BRKAp+Zgr86r1bPy3UbxDk=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:51:a6:71:8a:9d:29:a6:03:5b:79:3c:0a:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jun 28 20:01:20 2025 GMT
Not After : Jun 29 20:01:20 2025 GMT
Subject: CN=36c107dcf3ab84a9fb76bcf79e620900e4413c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:d2:71:b9:30:f9:68:72:5d:02:3a:9b:55:
ec:8d:77:4f:01:b4:92:a8:94:93:f2:a9:bc:02:f1:
54:aa:d1:a0:d9:8d:b0:4d:22:6b:e6:a9:fb:52:23:
70:b6:c6:b1:cb:a8:71:14:ca:43:13:f5:01:58:5a:
1e:b4:61:13:96:81:5c:cb:b2:1d:9f:8b:9f:37:6a:
78:e4:2a:8e:91:7f:19:15:5b:80:77:56:a5:96:57:
79:d8:98:4d:f0:aa:37:9d:ef:d2:e0:5a:fa:a2:e7:
7b:03:1d:aa:ec:4d:8d:4c:da:64:02:55:51:26:0d:
16:a8:5c:67:f4:93:17:cd:5d:20:71:03:07:b1:e7:
f7:1b:59:8b:a8:47:40:aa:b2:9b:18:4f:92:2d:18:
38:c8:f4:c7:ea:d2:85:91:38:fc:08:1f:2e:80:6a:
2c:af:e0:33:2c:40:f5:9f:78:92:12:04:9a:4a:47:
28:c0:9a:cc:dc:a0:11:27:50:80:8b:2c:18:0c:4a:
f1:b6:f6:3c:4c:cc:21:09:b2:2a:5f:d4:4a:10:33:
67:fb:42:52:f2:39:50:75:19:88:be:fd:96:9a:cc:
f5:15:b0:30:ad:1c:96:d0:6d:36:57:37:a7:c6:79:
8b:e1:17:6f:5d:c2:75:c5:8b:6c:ed:be:48:b3:ef:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C1:07:DC:F3:AB:84:A9:FB:76:BC:F7:9E:62:09:00:E4:41:3C:37
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:b3:bc:f6:c4:7f:18:7b:60:80:0c:3c:27:33:60:93:3f:
52:c2:0f:0a:28:ac:97:00:b5:f6:53:44:74:63:ce:0d:11:b1:
43:03:d9:b8:b8:07:91:c7:e1:be:f1:24:bc:7e:e4:2e:87:50:
ec:04:19:d1:18:54:97:30:46:d0:ba:f6:86:03:27:8d:32:21:
0c:03:6b:f8:b8:ef:ec:b6:41:13:03:f8:22:38:dc:b8:b5:48:
2d:b6:fe:c9:d9:95:3c:38:09:e5:eb:8c:66:2b:57:fe:89:54:
a5:a4:97:a8:56:ee:98:b4:50:14:4b:e1:14:96:c4:bc:a8:c3:
b8:bf:6f:cf:cf:eb:20:e9:f0:ba:4a:25:4a:41:e6:fc:6a:91:
aa:1f:74:7d:26:d8:0e:b7:a7:9e:e5:b1:75:bd:a0:9b:71:dc:
2d:59:5f:8f:0e:3a:01:10:30:26:0e:98:4c:14:82:12:c5:20:
03:fc:72:5a:aa:3a:8d:86:83:1c:6e:b8:c5:66:a6:0c:4f:86:
82:db:06:eb:4e:04:7d:8b:7a:8b:9b:32:79:6f:b5:73:e7:09:
65:45:a7:b6:92:af:2a:8d:60:8c:d5:78:57:48:98:d4:09:c8:
7e:88:b3:2d:55:70:d4:29:55:6d:26:90:d9:f5:2e:6c:ee:bd:
fe:65:9c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IVGmcYqdKaYDW3k8CvC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4
YzEzNGYwHhcNMjUwNjI4MjAwMTIwWhcNMjUwNjI5MjAwMTIwWjAzMTEwLwYDVQQD
EygzNmMxMDdkY2YzYWI4NGE5ZmI3NmJjZjc5ZTYyMDkwMGU0NDEzYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lzScbkw+WhyXQI6m1XsjXdPAbSS
qJST8qm8AvFUqtGg2Y2wTSJr5qn7UiNwtsaxy6hxFMpDE/UBWFoetGETloFcy7Id
n4ufN2p45CqOkX8ZFVuAd1allld52JhN8Ko3ne/S4Fr6oud7Ax2q7E2NTNpkAlVR
Jg0WqFxn9JMXzV0gcQMHsef3G1mLqEdAqrKbGE+SLRg4yPTH6tKFkTj8CB8ugGos
r+AzLED1n3iSEgSaSkcowJrM3KARJ1CAiywYDErxtvY8TMwhCbIqX9RKEDNn+0JS
8jlQdRmIvv2Wmsz1FbAwrRyW0G02VzenxnmL4RdvXcJ1xYts7b5Is+/9WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbBB9zzq4Sp+3a8955iCQDkQTw3MB8GA1UdIwQY
MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt
MzU0MmY5OWJlNjNiLzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi
LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpmzvPbE
fxh7YIAMPCczYJM/UsIPCiislwC19lNEdGPODRGxQwPZuLgHkcfhvvEkvH7kLodQ
7AQZ0RhUlzBG0Lr2hgMnjTIhDANr+Ljv7LZBEwP4IjjcuLVILbb+ydmVPDgJ5euM
ZitX/olUpaSXqFbumLRQFEvhFJbEvKjDuL9vz8/rIOnwukolSkHm/GqRqh90fSbY
DrennuWxdb2gm3HcLVlfjw46ARAwJg6YTBSCEsUgA/xyWqo6jYaDHG64xWamDE+G
gtsG604EfYt6i5syeW+1c+cJZUWntpKvKo1gjNV4V0iY1AnIfoizLVVw1ClVbSaQ
2fUubO69/mWcFg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:28 2025 by rpki-client