Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: sTG6fnmVik8wlRH/WVWJYRNklYljF6qmcQpKb4Ag/yY=
Subject key identifier: B8:51:EE:D5:FA:36:6D:14:D5:20:1C:5D:81:28:A1:42:5B:C1:9B:A0
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 0197B89016C3B9BB9532048FDFC04A66F2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 13BB
Signing time: Sat 28 Jun 2025 22:02:20 +0000
Manifest this update: Sat 28 Jun 2025 22:02:20 +0000
Manifest next update: Sun 29 Jun 2025 22:02:20 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: jriyJemQc6jyFpOZKMG0JSogGWnOVEbs0snng+YQN0I=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:16:c3:b9:bb:95:32:04:8f:df:c0:4a:66:f2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Jun 28 22:02:20 2025 GMT
Not After : Jun 29 22:02:20 2025 GMT
Subject: CN=b851eed5fa366d14d5201c5d8128a1425bc19ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:b1:47:b9:d6:40:1a:7f:e2:dd:74:7f:65:
37:68:e4:d2:cc:f1:63:64:23:f6:6c:2f:ae:f1:e7:
bf:12:70:07:45:b4:94:d8:88:e2:22:a3:a1:90:f2:
7c:ee:ec:ce:2f:04:7b:0c:40:01:d2:af:56:69:0d:
ab:ce:72:3f:02:ef:df:8b:8c:9e:90:16:2d:9d:09:
92:61:bd:88:d8:e3:ea:ea:00:ea:9b:cf:ca:21:45:
c8:71:3b:72:47:41:5f:70:bc:da:75:9a:f8:d1:7d:
64:82:1b:87:b0:ff:2b:82:0c:07:38:71:50:10:f0:
51:43:4f:04:1a:0d:30:9a:27:86:0e:67:94:ea:ae:
6b:68:fe:3f:1a:62:be:75:39:34:bb:e1:ba:94:48:
ff:f8:e1:7b:5c:47:39:e5:1b:ac:e4:59:61:ed:4a:
6b:0f:2b:53:94:d4:4e:f2:30:c2:73:90:c0:72:23:
e9:38:fe:2d:d7:f4:58:9d:cd:1c:93:94:57:df:91:
28:e9:bc:db:19:75:ee:6d:34:a1:36:4a:24:d4:ef:
f9:b2:5b:de:7a:06:42:26:b0:5b:7a:f3:44:af:f1:
36:2c:c5:21:7d:91:81:cc:4b:12:fd:23:8d:07:97:
27:9d:ad:d6:1b:1b:04:9a:fe:4c:fa:25:da:22:31:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:EE:D5:FA:36:6D:14:D5:20:1C:5D:81:28:A1:42:5B:C1:9B:A0
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3a:f2:3b:b3:2b:37:49:1f:9a:cf:4f:92:93:55:cb:2b:fb:
5c:1a:b9:75:1e:4f:88:67:6b:81:6c:d7:41:16:5a:f2:ee:df:
bd:78:ec:85:4e:02:7f:42:9e:11:70:b0:13:70:5b:3c:9b:cd:
44:15:eb:ff:2c:7a:fa:cb:81:db:69:17:f0:bd:6a:29:7c:72:
d8:a1:38:ab:a1:99:1f:51:7d:8f:54:ee:41:91:b0:d1:00:8a:
75:cb:8e:1a:40:ab:f3:c8:40:43:63:d9:01:87:c6:db:63:16:
74:0a:79:8a:3d:b3:73:53:90:2d:19:cd:ed:59:a8:8a:16:ab:
d8:97:86:e1:60:23:4d:77:b3:e1:cd:1f:b6:50:97:e5:95:8a:
0a:df:2a:d9:54:f1:95:84:92:7b:08:20:a4:a6:18:43:16:fc:
1e:3f:b0:04:b0:82:69:09:b6:b4:3f:04:71:88:5e:12:83:c3:
13:28:66:a5:76:c2:8e:76:16:cb:5a:1b:ad:f4:26:c4:74:56:
92:f2:ad:ce:35:aa:0c:92:19:ad:db:85:29:53:02:29:f1:94:
e2:8f:f6:7f:44:4f:9c:dd:ac:1c:4b:1a:30:92:be:79:20:30:
84:d4:3f:9d:c5:d8:8e:24:7a:92:22:8a:25:22:75:09:cb:2d:
d1:e3:22:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kBbDubuVMgSP38BKZvKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3
OWFkNzcwHhcNMjUwNjI4MjIwMjIwWhcNMjUwNjI5MjIwMjIwWjAzMTEwLwYDVQQD
EyhiODUxZWVkNWZhMzY2ZDE0ZDUyMDFjNWQ4MTI4YTE0MjViYzE5YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0uxR7nWQBp/4t10f2U3aOTSzPFj
ZCP2bC+u8ee/EnAHRbSU2IjiIqOhkPJ87uzOLwR7DEAB0q9WaQ2rznI/Au/fi4ye
kBYtnQmSYb2I2OPq6gDqm8/KIUXIcTtyR0FfcLzadZr40X1kghuHsP8rggwHOHFQ
EPBRQ08EGg0wmieGDmeU6q5raP4/GmK+dTk0u+G6lEj/+OF7XEc55Rus5Flh7Upr
DytTlNRO8jDCc5DAciPpOP4t1/RYnc0ck5RX35Eo6bzbGXXubTShNkok1O/5slve
egZCJrBbevNEr/E2LMUhfZGBzEsS/SONB5cnna3WGxsEmv5M+iXaIjFi+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhR7tX6Nm0U1SAcXYEooUJbwZugMB8GA1UdIwQY
MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt
M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4
LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzryO7Mr
N0kfms9PkpNVyyv7XBq5dR5PiGdrgWzXQRZa8u7fvXjshU4Cf0KeEXCwE3BbPJvN
RBXr/yx6+suB22kX8L1qKXxy2KE4q6GZH1F9j1TuQZGw0QCKdcuOGkCr88hAQ2PZ
AYfG22MWdAp5ij2zc1OQLRnN7Vmoihar2JeG4WAjTXez4c0ftlCX5ZWKCt8q2VTx
lYSSewggpKYYQxb8Hj+wBLCCaQm2tD8EcYheEoPDEyhmpXbCjnYWy1obrfQmxHRW
kvKtzjWqDJIZrduFKVMCKfGU4o/2f0RPnN2sHEsaMJK+eSAwhNQ/ncXYjiR6kiKK
JSJ1Ccst0eMiVA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:44 2025 by rpki-client