Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
File: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json)
Hash identifier: X7ByfA5AllxtrNv6OG7aNRlt+OcZN2ACe3Kz8BTzKkI=
Subject key identifier: 2D:18:F2:CC:EE:FE:18:39:A8:98:86:38:E1:DF:22:86:8E:55:F3:1A
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial: 0197CCBA93A2E3F775FAB59DE34E72AC5E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
Manifest number: 04B9
Signing time: Wed 02 Jul 2025 20:01:08 +0000
Manifest this update: Wed 02 Jul 2025 20:01:08 +0000
Manifest next update: Thu 03 Jul 2025 20:01:08 +0000
Files and hashes: 1: 4VbWJVNiMGPo_kQuPLRCvD3mIqs.roa (hash: Q1EDGWxO124hc6aCjobmLg6QYopu1SoqLikDIBWxFXQ=)
2: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: u+upqFHOh73/iyTbkmZeQ3Lx8sn4FxAXW7+gRZ63OWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:93:a2:e3:f7:75:fa:b5:9d:e3:4e:72:ac:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Validity
Not Before: Jul 2 20:01:08 2025 GMT
Not After : Jul 3 20:01:08 2025 GMT
Subject: CN=2d18f2cceefe1839a8988638e1df22868e55f31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1f:61:ea:5a:26:81:b4:7c:d7:57:44:31:bd:
ad:60:97:3c:d1:a6:4c:c5:aa:0f:21:3c:e7:78:f6:
7d:2d:7a:84:a0:2e:e6:ad:dd:1b:71:e3:b6:22:88:
16:75:be:12:1c:67:20:48:da:12:7e:46:2c:81:38:
67:cd:73:92:03:1d:be:da:d8:8a:80:a8:0b:3b:36:
ba:48:85:e9:e7:d2:2f:16:df:c2:3c:56:f1:5e:b5:
40:ad:e3:be:1d:79:29:85:cd:fc:ba:24:e9:ed:69:
3f:ba:a2:fe:28:f6:a5:7f:d6:c1:09:8e:83:88:0d:
bf:37:e1:6a:d4:e4:d2:f1:68:ec:b0:67:cc:e6:bc:
8a:da:61:8a:a6:16:61:2a:bc:07:4c:aa:63:5e:f1:
fe:a7:64:2e:93:b7:af:b7:36:91:29:04:6b:dc:67:
cb:57:eb:10:2f:f4:fa:1d:fa:f9:30:86:b3:b1:a8:
21:26:be:35:a4:50:0e:85:d7:2e:37:8b:ad:06:70:
60:29:96:4a:12:c7:d6:89:8d:21:9c:5d:3a:07:9c:
03:c1:0b:90:b0:7e:13:bc:0b:b8:40:5f:17:d1:39:
29:28:b8:8e:c3:64:fe:8f:48:cd:27:60:d1:b4:61:
d3:8b:45:3c:84:0d:25:98:a4:24:92:8b:2a:2b:62:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:18:F2:CC:EE:FE:18:39:A8:98:86:38:E1:DF:22:86:8E:55:F3:1A
X509v3 Authority Key Identifier:
keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:be:a2:e2:97:79:36:a9:a0:be:8d:4f:3c:57:70:96:54:b3:
04:7f:70:41:f6:d6:e2:c3:69:1a:bc:fb:3b:3a:04:3a:a9:39:
57:fd:cc:85:17:0a:fe:0c:e8:09:54:be:02:5c:3c:81:10:6d:
49:43:71:b6:d8:58:37:3b:03:02:b4:57:d8:31:96:77:57:da:
ef:1c:87:ce:95:ee:fb:c3:a9:45:0c:7a:2e:09:17:0e:00:de:
92:b6:cc:95:c0:a6:d8:76:54:ad:60:31:6e:2e:92:16:2c:17:
1f:15:cd:44:bd:b8:29:16:cc:d7:9f:3d:f6:48:01:54:d7:da:
c5:88:e9:b2:28:83:09:89:b3:e3:d8:99:dd:b1:fd:11:77:d3:
68:6b:72:03:36:28:42:d8:2f:00:1f:0f:af:15:0e:8f:f6:da:
ea:bc:9f:bd:69:17:2c:92:0c:ab:6f:73:1d:b5:36:bd:93:27:
12:09:af:ee:b0:ac:7b:30:01:f4:96:e2:70:b7:8d:6d:20:10:
5d:d8:99:55:30:3f:e8:01:a5:f4:05:0f:b4:76:08:db:0a:2a:
36:32:e7:38:54:dc:b0:16:f7:31:43:db:c6:9c:22:dc:ca:9a:
6b:c4:2a:07:c5:77:74:6b:56:1f:37:96:44:99:73:22:46:13:
03:41:42:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMupOi4/d1+rWd405yrF42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjVmMjQ2YmZjMWVhOGZjMzg2Yzg2ZGQ0OWZiYWE4ZDg4
YzQ4ODEwHhcNMjUwNzAyMjAwMTA4WhcNMjUwNzAzMjAwMTA4WjAzMTEwLwYDVQQD
EygyZDE4ZjJjY2VlZmUxODM5YTg5ODg2MzhlMWRmMjI4NjhlNTVmMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h9h6lomgbR811dEMb2tYJc80aZM
xaoPITznePZ9LXqEoC7mrd0bceO2IogWdb4SHGcgSNoSfkYsgThnzXOSAx2+2tiK
gKgLOza6SIXp59IvFt/CPFbxXrVAreO+HXkphc38uiTp7Wk/uqL+KPalf9bBCY6D
iA2/N+Fq1OTS8WjssGfM5ryK2mGKphZhKrwHTKpjXvH+p2Quk7evtzaRKQRr3GfL
V+sQL/T6Hfr5MIazsaghJr41pFAOhdcuN4utBnBgKZZKEsfWiY0hnF06B5wDwQuQ
sH4TvAu4QF8X0TkpKLiOw2T+j0jNJ2DRtGHTi0U8hA0lmKQkkosqK2JfwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0Y8szu/hg5qJiGOOHfIoaOVfMaMB8GA1UdIwQY
MBaAFOxl8ka/weqPw4bIbdSfuqjYjEiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTkt
NzgxMjgwZmQyNDEyLzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTktNzgxMjgwZmQyNDEy
LzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASr6i4pd5
Nqmgvo1PPFdwllSzBH9wQfbW4sNpGrz7OzoEOqk5V/3MhRcK/gzoCVS+Alw8gRBt
SUNxtthYNzsDArRX2DGWd1fa7xyHzpXu+8OpRQx6LgkXDgDekrbMlcCm2HZUrWAx
bi6SFiwXHxXNRL24KRbM15899kgBVNfaxYjpsiiDCYmz49iZ3bH9EXfTaGtyAzYo
QtgvAB8PrxUOj/ba6ryfvWkXLJIMq29zHbU2vZMnEgmv7rCsezAB9JbicLeNbSAQ
XdiZVTA/6AGl9AUPtHYI2woqNjLnOFTcsBb3MUPbxpwi3Mqaa8QqB8V3dGtWHzeW
RJlzIkYTA0FCfA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 02:06:08 2025 by rpki-client