Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: KZn270XrCLxvvlLWV02Gtcq1CCisUy9HUuk3n8DZF0o=
Subject key identifier: 7B:A4:4F:52:CD:69:56:F2:A6:AC:A1:F6:92:2D:AD:29:7F:A8:D6:76
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 0197B6A09B1CFC7DC1F97E4CD6569F762BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: DD
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: 6ec900ZcY8ji//JGM3qYfH4/vj6v5vMuQaEKX1bkmUs=)
2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9b:1c:fc:7d:c1:f9:7e:4c:d6:56:9f:76:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=7ba44f52cd6956f2a6aca1f6922dad297fa8d676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:02:95:a6:42:8c:8f:41:e6:75:a7:bb:1c:
17:72:08:fd:0b:a9:0c:b2:a4:ba:8a:ca:30:49:95:
b6:b2:15:58:d5:89:51:21:53:e6:50:c9:25:ff:6d:
1b:db:9b:64:d5:ff:ee:e8:1b:30:92:70:a1:ae:e3:
59:4f:bd:46:8e:e4:54:7b:ac:2c:21:60:5a:7b:b1:
b0:75:f8:12:75:41:5b:81:9e:0c:40:46:ec:20:70:
52:7c:41:da:d5:fa:fd:16:fa:a6:8d:e4:77:a9:c1:
14:d3:de:42:bd:2c:78:4f:0d:9b:a3:b1:80:ca:ce:
e7:07:f5:50:b0:4a:38:3b:8a:cf:05:3b:c3:68:57:
a9:5c:d3:ad:5c:34:34:dc:6d:ea:1e:7d:7f:da:0e:
8a:1f:2f:57:d1:3c:4f:d2:0e:3c:c9:a4:02:73:fc:
5d:d1:1e:31:70:64:bb:d0:aa:a4:92:d8:a0:68:5c:
b5:a4:9f:10:6c:13:06:5d:8b:d8:3b:7a:b5:88:4d:
e5:49:1b:12:91:7a:e9:0a:7d:73:a6:23:e0:10:cb:
3b:18:7e:a1:80:0e:f2:25:6e:70:1b:7b:29:c1:58:
3d:cc:6d:bd:3f:77:59:7b:4f:fa:dc:33:9d:4c:ba:
42:9d:95:fb:5c:2a:f0:ce:04:23:54:a8:6b:07:35:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:4F:52:CD:69:56:F2:A6:AC:A1:F6:92:2D:AD:29:7F:A8:D6:76
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1a:fb:b0:a2:24:7c:76:25:58:fe:60:9f:d6:47:e6:ca:30:
70:bf:91:53:33:54:7b:c9:fc:87:bd:a1:b0:98:0d:a0:c8:a5:
16:bb:36:3b:50:27:4d:3b:ce:5a:6e:cf:32:e0:6f:c8:26:38:
e2:cd:bc:de:be:35:80:e0:b8:72:b4:ec:04:c8:51:7e:34:3c:
bc:db:49:57:be:7a:3e:15:ca:d7:ec:c1:3f:ce:b4:ec:97:8c:
63:7a:4f:a2:ab:78:be:42:56:fb:e6:26:fa:9c:b7:f5:4a:4a:
81:46:11:a4:bf:30:ef:1a:3b:30:c0:25:9f:73:df:7c:41:fc:
02:0a:8e:1b:37:34:9f:8d:b3:56:4f:3d:51:2e:29:6c:21:9f:
10:1d:9d:98:19:43:d2:4d:de:ae:8a:0d:af:36:1a:2d:4f:fa:
1a:8b:25:84:5d:41:41:e0:91:c5:80:f5:4b:f0:bc:ac:c2:70:
e6:76:ba:39:5b:f7:67:70:fe:e9:a7:0f:fd:7d:12:2f:af:20:
02:a3:9d:4e:1f:0c:0b:64:66:a7:52:c1:da:e9:e6:4c:3f:61:
eb:bd:90:45:dc:54:84:02:3f:3b:9f:5d:48:4f:fd:ca:1c:20:
a9:f6:ad:c4:6f:82:77:11:4d:8d:d5:0f:e1:cb:70:20:85:a6:
a7:bf:cb:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oJsc/H3B+X5M1lafdivTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjQxZDI1MmYxMjBhY2IxNDBkMGZjODQzMzQxNTIxMTRi
NmM4MjYwHhcNMjUwNjI4MTMwMTA4WhcNMjUwNjI5MTMwMTA4WjAzMTEwLwYDVQQD
Eyg3YmE0NGY1MmNkNjk1NmYyYTZhY2ExZjY5MjJkYWQyOTdmYThkNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk4ClaZCjI9B5nWnuxwXcgj9C6kM
sqS6isowSZW2shVY1YlRIVPmUMkl/20b25tk1f/u6BswknChruNZT71GjuRUe6ws
IWBae7GwdfgSdUFbgZ4MQEbsIHBSfEHa1fr9FvqmjeR3qcEU095CvSx4Tw2bo7GA
ys7nB/VQsEo4O4rPBTvDaFepXNOtXDQ03G3qHn1/2g6KHy9X0TxP0g48yaQCc/xd
0R4xcGS70KqkktigaFy1pJ8QbBMGXYvYO3q1iE3lSRsSkXrpCn1zpiPgEMs7GH6h
gA7yJW5wG3spwVg9zG29P3dZe0/63DOdTLpCnZX7XCrwzgQjVKhrBzVchQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHukT1LNaVbypqyh9pItrSl/qNZ2MB8GA1UdIwQY
MBaAFJ+0HSUvEgrLFA0PyEM0FSEUtsgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUt
NjNlMWMxMDRhOGRiLzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUtNjNlMWMxMDRhOGRi
LzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBr7sKIk
fHYlWP5gn9ZH5sowcL+RUzNUe8n8h72hsJgNoMilFrs2O1AnTTvOWm7PMuBvyCY4
4s283r41gOC4crTsBMhRfjQ8vNtJV756PhXK1+zBP8607JeMY3pPoqt4vkJW++Ym
+py39UpKgUYRpL8w7xo7MMAln3PffEH8AgqOGzc0n42zVk89US4pbCGfEB2dmBlD
0k3erooNrzYaLU/6GoslhF1BQeCRxYD1S/C8rMJw5na6OVv3Z3D+6acP/X0SL68g
AqOdTh8MC2Rmp1LB2unmTD9h672QRdxUhAI/O59dSE/9yhwgqfatxG+CdxFNjdUP
4ctwIIWmp7/L7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:05 2025 by rpki-client