Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: O1GzJ6YhKwsRVaS+nrhcIvH0tDI4D2ciHCPfqR/To2I=
Subject key identifier: 5E:40:35:24:98:F8:16:39:E4:8B:E8:8B:4F:AD:D5:8C:E6:CC:10:3D
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 01984AE58DC78D6E35E20C5429025998510B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 0495
Signing time: Sun 27 Jul 2025 08:00:14 +0000
Manifest this update: Sun 27 Jul 2025 08:00:14 +0000
Manifest next update: Mon 28 Jul 2025 08:00:14 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: uOZ9uEWCPk67meubbkeDE+3O1cBMLtueh6JGLRUTxMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:8d:c7:8d:6e:35:e2:0c:54:29:02:59:98:51:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Jul 27 08:00:14 2025 GMT
Not After : Jul 28 08:00:14 2025 GMT
Subject: CN=5e40352498f81639e48be88b4fadd58ce6cc103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:60:4d:0c:e1:10:ff:4c:c6:22:f5:f0:98:
b8:89:8d:0e:eb:3b:90:6f:c3:d3:ca:10:09:32:7f:
e3:20:f3:87:da:da:62:93:eb:60:c7:6c:7c:c2:5f:
2d:4c:19:ec:8c:cc:cf:17:b3:87:cc:fd:f4:5b:82:
68:cf:ea:21:e3:a8:43:87:de:5a:bf:f9:f4:9c:cb:
c8:9c:0e:56:58:eb:70:90:cc:49:74:63:e5:4e:4a:
a0:78:a1:71:f2:fa:38:0e:53:db:48:26:4f:11:51:
74:a3:40:35:62:ec:bf:95:af:85:b7:9c:40:81:38:
41:3b:da:5a:86:90:67:39:28:b5:71:a4:73:03:3d:
f4:c1:c4:9d:8d:23:79:ad:fa:ea:ff:14:f5:e4:3a:
9a:4d:11:5a:90:6a:7d:52:5e:a6:be:2e:2e:c8:54:
3f:5f:27:0c:ae:cb:90:64:c6:a2:53:de:0a:67:49:
5f:b8:53:27:ef:90:73:15:f2:5f:e0:82:c2:a0:02:
a4:7d:48:22:58:f2:6d:6d:7c:5d:d9:24:90:0c:78:
ba:8a:05:c9:54:3a:aa:bf:12:b9:98:84:0a:a0:68:
51:94:bb:2b:e9:2c:86:63:0d:e6:b4:81:08:1c:75:
c3:3e:5d:40:74:c9:28:c7:23:f1:cf:3c:2b:23:e7:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:35:24:98:F8:16:39:E4:8B:E8:8B:4F:AD:D5:8C:E6:CC:10:3D
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bb:97:c5:2e:01:b1:30:5d:34:22:c6:64:67:63:22:9c:e3:
0d:77:32:87:b3:ab:00:84:08:c7:fc:fd:58:08:91:ed:18:2a:
30:9e:78:b4:99:75:dd:f8:be:d2:5b:38:7a:19:60:f4:68:3c:
68:7d:03:40:af:e4:94:b0:ce:f9:d5:c3:a1:8e:60:d9:6f:72:
e3:ab:df:0a:e7:5e:59:e3:75:2c:34:98:65:35:65:52:97:28:
9f:9d:ab:a4:f9:e7:11:6e:6f:a6:bb:d9:9c:38:66:83:d9:79:
2e:89:4e:b1:97:16:bd:0b:73:ac:88:13:d8:77:f2:09:c0:b4:
b6:d1:18:bc:5c:48:ad:79:b5:a6:36:62:db:bd:be:3e:2c:35:
5a:b0:aa:5d:2a:ac:49:7d:8b:27:70:25:02:2c:88:67:27:18:
d2:73:da:a6:f4:87:96:79:5a:a5:39:5a:9d:6c:cd:be:f3:e9:
13:6b:c1:92:de:82:43:ca:38:04:4d:97:66:71:3d:09:a9:e8:
8e:23:e2:80:ad:c5:de:85:11:9c:da:84:44:8d:fd:05:a7:2f:
02:40:8c:d4:ef:f8:b6:92:24:23:d3:4f:a6:0d:81:ea:d2:02:
d2:63:ba:91:29:df:38:11:5d:5d:56:0b:5b:3a:8d:82:20:69:
c8:c2:34:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5Y3HjW414gxUKQJZmFELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDBkYTFiNGUzMGZmYmIzMmE0ZTRhNGI3YWQ3MzFjMDMx
ZTQ0MjkwHhcNMjUwNzI3MDgwMDE0WhcNMjUwNzI4MDgwMDE0WjAzMTEwLwYDVQQD
Eyg1ZTQwMzUyNDk4ZjgxNjM5ZTQ4YmU4OGI0ZmFkZDU4Y2U2Y2MxMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NNgTQzhEP9MxiL18Ji4iY0O6zuQ
b8PTyhAJMn/jIPOH2tpik+tgx2x8wl8tTBnsjMzPF7OHzP30W4Joz+oh46hDh95a
v/n0nMvInA5WWOtwkMxJdGPlTkqgeKFx8vo4DlPbSCZPEVF0o0A1Yuy/la+Ft5xA
gThBO9pahpBnOSi1caRzAz30wcSdjSN5rfrq/xT15DqaTRFakGp9Ul6mvi4uyFQ/
XycMrsuQZMaiU94KZ0lfuFMn75BzFfJf4ILCoAKkfUgiWPJtbXxd2SSQDHi6igXJ
VDqqvxK5mIQKoGhRlLsr6SyGYw3mtIEIHHXDPl1AdMkoxyPxzzwrI+eS2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5ANSSY+BY55Ivoi0+t1YzmzBA9MB8GA1UdIwQY
MBaAFO5A2htOMP+7MqTkpLetcxwDHkQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEt
M2Q2NTc4MTQwZmMxLzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEtM2Q2NTc4MTQwZmMx
LzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMruXxS4B
sTBdNCLGZGdjIpzjDXcyh7OrAIQIx/z9WAiR7RgqMJ54tJl13fi+0ls4ehlg9Gg8
aH0DQK/klLDO+dXDoY5g2W9y46vfCudeWeN1LDSYZTVlUpcon52rpPnnEW5vprvZ
nDhmg9l5LolOsZcWvQtzrIgT2HfyCcC0ttEYvFxIrXm1pjZi272+Piw1WrCqXSqs
SX2LJ3AlAiyIZycY0nPapvSHlnlapTlanWzNvvPpE2vBkt6CQ8o4BE2XZnE9Cano
jiPigK3F3oURnNqERI39BacvAkCM1O/4tpIkI9NPpg2B6tIC0mO6kSnfOBFdXVYL
WzqNgiBpyMI0oQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:27 2025 by rpki-client