Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier: /axAgcOQps1bl1Qf1I6zQpSiZYyAUYbNSUroUg8Q43s=
Subject key identifier: 31:9E:49:12:6E:AF:C1:DC:E3:11:23:8D:6E:A7:FE:14:BC:EA:80:7D
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial: 0197B6A119A6640A01A9585BB7B2CFB1200B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number: 0F7D
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: 6HyyC0t48uwHYqA+nzKmpFxcrGW3Et14H7wWi0AY9sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:19:a6:64:0a:01:a9:58:5b:b7:b2:cf:b1:20:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=319e49126eafc1dce311238d6ea7fe14bcea807d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:47:b8:09:01:e3:57:24:dc:4f:48:48:2a:
d6:c0:a1:b0:a9:d5:ce:e0:85:2a:83:3c:6f:02:49:
25:7a:e8:0f:15:95:5c:4d:3c:b3:7e:15:ff:b4:41:
bd:29:a4:75:62:8b:44:d6:27:2e:8c:8b:ec:e3:65:
af:c9:72:6f:71:a0:2a:46:ff:73:05:72:6e:b5:2d:
5c:d9:96:61:30:de:90:42:51:42:28:84:87:41:cb:
40:f1:e4:83:ac:6c:8a:2a:70:13:df:81:29:ec:7f:
66:b5:90:43:9d:1f:f1:7c:e5:ac:68:7a:d4:8b:75:
0f:84:6f:49:91:09:36:98:08:cb:66:4b:6f:11:00:
a7:fd:4a:80:5e:11:31:b4:be:b7:c8:05:7f:a9:bc:
d5:88:fb:6b:4e:3b:40:8a:8b:79:d5:be:14:0d:cc:
64:f3:d8:77:fd:62:6f:a3:2f:b6:49:95:e3:af:fd:
61:94:81:43:65:74:0e:65:5a:5e:c9:41:6f:04:6e:
b1:af:bf:19:03:c3:cd:1b:88:07:c0:f9:04:fc:44:
d5:c6:6f:0c:14:68:18:b9:e4:7c:6a:df:78:a5:87:
13:a8:41:ac:6b:21:15:5f:71:b8:46:e5:2b:b2:d1:
de:0b:9d:dd:7c:53:75:16:8c:7b:cd:81:22:2b:d1:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:49:12:6E:AF:C1:DC:E3:11:23:8D:6E:A7:FE:14:BC:EA:80:7D
X509v3 Authority Key Identifier:
keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ef:47:88:a3:50:e8:81:d2:0c:2e:03:db:24:70:55:2d:6a:
0b:e4:3d:e7:22:29:89:4b:dd:37:d2:7d:a0:a6:8d:ab:95:a6:
08:be:33:a4:cc:35:07:93:f7:03:d6:b4:5b:31:22:92:b7:17:
f7:9c:ec:da:fe:80:22:8c:73:48:8d:36:9b:b9:8c:07:1f:61:
e5:e3:ed:db:77:45:5d:20:4e:4e:8e:50:58:eb:e5:eb:79:86:
cf:ea:20:7f:2b:cd:2f:58:e9:47:a9:8c:81:02:a1:e4:86:08:
f0:be:95:36:e8:8d:19:5a:0c:17:87:1c:a3:4a:cf:5f:64:ef:
f0:f5:71:2e:71:8b:3b:db:d3:25:a1:7f:50:f2:7c:65:a0:78:
42:c2:de:69:e7:f9:80:b9:ea:55:38:fd:b2:94:e6:47:c3:84:
64:3b:db:cf:cd:cd:2b:bc:a3:39:d8:d5:67:83:74:a8:4a:67:
e0:d6:d9:58:d8:fc:8c:9f:f9:ac:b1:d3:24:34:f3:32:c0:8e:
16:e2:d3:f4:70:8d:fc:78:03:24:58:fd:66:65:d2:74:8a:7b:
cf:d6:56:97:21:33:da:d1:90:12:dd:9d:12:4a:79:55:4a:7a:
8b:94:ce:74:80:ba:c2:bc:e7:3f:a8:b7:ac:fe:f5:5b:c5:4d:
59:03:04:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRmmZAoBqVhbt7LPsSALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjJjYzQ0MDA2NjRiYWIwYjA5MWJjMzk5OGMwZGUxZmVm
NzE1OWIwHhcNMjUwNjI4MTMwMTQwWhcNMjUwNjI5MTMwMTQwWjAzMTEwLwYDVQQD
EygzMTllNDkxMjZlYWZjMWRjZTMxMTIzOGQ2ZWE3ZmUxNGJjZWE4MDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI5HuAkB41ck3E9ISCrWwKGwqdXO
4IUqgzxvAkkleugPFZVcTTyzfhX/tEG9KaR1YotE1icujIvs42WvyXJvcaAqRv9z
BXJutS1c2ZZhMN6QQlFCKISHQctA8eSDrGyKKnAT34Ep7H9mtZBDnR/xfOWsaHrU
i3UPhG9JkQk2mAjLZktvEQCn/UqAXhExtL63yAV/qbzViPtrTjtAiot51b4UDcxk
89h3/WJvoy+2SZXjr/1hlIFDZXQOZVpeyUFvBG6xr78ZA8PNG4gHwPkE/ETVxm8M
FGgYueR8at94pYcTqEGsayEVX3G4RuUrstHeC53dfFN1Fox7zYEiK9HydwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGeSRJur8Hc4xEjjW6n/hS86oB9MB8GA1UdIwQY
MBaAFOyyzEQAZkurCwkbw5mMDeH+9xWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEt
ODk4NDZkZGQ5NDFjLzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEtODk4NDZkZGQ5NDFj
LzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZO9HiKNQ
6IHSDC4D2yRwVS1qC+Q95yIpiUvdN9J9oKaNq5WmCL4zpMw1B5P3A9a0WzEikrcX
95zs2v6AIoxzSI02m7mMBx9h5ePt23dFXSBOTo5QWOvl63mGz+ogfyvNL1jpR6mM
gQKh5IYI8L6VNuiNGVoMF4cco0rPX2Tv8PVxLnGLO9vTJaF/UPJ8ZaB4QsLeaef5
gLnqVTj9spTmR8OEZDvbz83NK7yjOdjVZ4N0qEpn4NbZWNj8jJ/5rLHTJDTzMsCO
FuLT9HCN/HgDJFj9ZmXSdIp7z9ZWlyEz2tGQEt2dEkp5VUp6i5TOdIC6wrznP6i3
rP71W8VNWQMEXA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:16:11 2025 by rpki-client