Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: 3trvr436gyMux16x7ljtmiZNaPyaGWtrgMEfE5nDc34=
Subject key identifier: 62:A1:AA:0B:61:FA:49:B5:85:57:E5:DC:F4:B9:25:C7:77:53:CB:7D
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 0197CEDFB22F3C338EF20777DAF846543E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 15C1
Signing time: Thu 03 Jul 2025 06:00:56 +0000
Manifest this update: Thu 03 Jul 2025 06:00:56 +0000
Manifest next update: Fri 04 Jul 2025 06:00:56 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: uPA2AVEIDD0vqnGInLvOBNjAWYva0a8++rjeuG9GKuk=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:b2:2f:3c:33:8e:f2:07:77:da:f8:46:54:3e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Jul 3 06:00:56 2025 GMT
Not After : Jul 4 06:00:56 2025 GMT
Subject: CN=62a1aa0b61fa49b58557e5dcf4b925c77753cb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0a:dd:cf:34:9f:04:7d:28:4f:30:8f:aa:92:
44:e2:ab:0d:c4:b7:7b:bb:94:da:9a:61:02:a0:e9:
8d:8a:9f:77:34:ae:34:6e:e8:f8:6d:90:09:ca:33:
42:11:75:12:68:4f:c1:1b:79:ff:09:29:0c:ca:7e:
ed:74:98:79:2d:d5:e7:c6:0a:54:b8:69:a1:58:ae:
b6:10:1c:9d:ae:1f:f2:f9:34:7a:1a:db:32:c4:61:
67:21:5f:43:b0:b1:18:2e:1f:7f:bb:ea:f2:f7:74:
1c:c3:d7:d7:15:80:aa:f9:d4:6e:b9:73:e2:99:e1:
1f:47:39:63:31:ef:84:80:e4:ab:c2:1f:b5:8c:46:
6d:0d:a1:dd:84:0f:d3:3d:11:3f:33:64:d5:b3:fb:
c6:38:c1:b5:e0:22:3e:86:23:cf:be:97:d7:3e:19:
f4:4c:fa:ae:e4:ec:6c:be:fc:61:e2:82:60:2a:46:
2a:7f:9f:95:96:22:8f:d3:57:d9:d5:2d:0a:a3:f1:
54:1c:26:f2:23:b4:51:a5:40:6a:3c:b6:9b:f3:97:
5f:db:53:11:c3:4b:91:e3:77:48:6d:18:f1:00:74:
3a:dc:41:d6:cb:8a:72:a3:43:2d:c2:2a:35:41:86:
9a:e9:19:ab:7d:22:a7:4c:e4:b3:a5:aa:e9:97:93:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:AA:0B:61:FA:49:B5:85:57:E5:DC:F4:B9:25:C7:77:53:CB:7D
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0e:70:cf:40:1d:59:9f:ff:39:0c:8e:86:93:d8:51:b7:d7:
1d:60:da:e1:a7:75:c1:71:94:1b:c7:58:c0:bf:07:a8:0d:a4:
75:ae:e6:f4:7d:e9:3c:62:8e:76:d5:d5:74:53:21:8b:c5:9d:
ad:6d:32:d0:e5:9c:39:2f:53:f7:a1:b8:40:57:f4:a9:c9:bc:
97:87:12:ec:03:01:06:36:4c:b1:b6:07:4f:45:3a:a3:10:c4:
07:d1:d6:81:0b:99:07:cd:cc:5c:44:14:a4:62:19:23:4a:d4:
aa:2b:b8:44:c8:f4:12:93:d6:79:b7:9c:ec:82:14:8b:16:87:
10:c0:21:f4:65:51:52:42:e2:5c:1d:9c:f3:b4:59:f8:8b:81:
96:bc:2e:a2:91:17:7e:f0:62:d0:ff:96:f1:2b:6d:65:76:b1:
b6:ae:85:18:c6:f0:dc:62:78:5c:94:b4:53:02:5e:8d:d9:22:
1b:e8:b4:77:b3:19:ca:42:a0:ee:4f:fb:98:be:64:dd:8e:1b:
9b:8f:16:cc:97:d0:c3:94:34:c5:fd:f4:6a:3f:d9:ad:6b:6e:
5f:85:26:68:03:6e:a8:17:1c:0f:53:a7:cc:33:7f:ba:02:5d:
9f:33:7b:55:8c:e1:14:f5:65:1b:ae:b6:04:17:53:46:19:42:
85:15:11:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfO37IvPDOO8gd32vhGVD6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0
NTVhNTYwHhcNMjUwNzAzMDYwMDU2WhcNMjUwNzA0MDYwMDU2WjAzMTEwLwYDVQQD
Eyg2MmExYWEwYjYxZmE0OWI1ODU1N2U1ZGNmNGI5MjVjNzc3NTNjYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wrdzzSfBH0oTzCPqpJE4qsNxLd7
u5TammECoOmNip93NK40buj4bZAJyjNCEXUSaE/BG3n/CSkMyn7tdJh5LdXnxgpU
uGmhWK62EBydrh/y+TR6GtsyxGFnIV9DsLEYLh9/u+ry93Qcw9fXFYCq+dRuuXPi
meEfRzljMe+EgOSrwh+1jEZtDaHdhA/TPRE/M2TVs/vGOMG14CI+hiPPvpfXPhn0
TPqu5Oxsvvxh4oJgKkYqf5+VliKP01fZ1S0Ko/FUHCbyI7RRpUBqPLab85df21MR
w0uR43dIbRjxAHQ63EHWy4pyo0Mtwio1QYaa6RmrfSKnTOSzparpl5OZwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKhqgth+km1hVfl3PS5Jcd3U8t9MB8GA1UdIwQY
MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et
MjY4Y2VkODQzNWI1LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1
LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQ5wz0Ad
WZ//OQyOhpPYUbfXHWDa4ad1wXGUG8dYwL8HqA2kda7m9H3pPGKOdtXVdFMhi8Wd
rW0y0OWcOS9T96G4QFf0qcm8l4cS7AMBBjZMsbYHT0U6oxDEB9HWgQuZB83MXEQU
pGIZI0rUqiu4RMj0EpPWebec7IIUixaHEMAh9GVRUkLiXB2c87RZ+IuBlrwuopEX
fvBi0P+W8SttZXaxtq6FGMbw3GJ4XJS0UwJejdkiG+i0d7MZykKg7k/7mL5k3Y4b
m48WzJfQw5Q0xf30aj/ZrWtuX4UmaANuqBccD1OnzDN/ugJdnzN7VYzhFPVlG662
BBdTRhlChRURpQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:04:53 2025 by rpki-client