Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: iJZ5mjq6qzgoqXRU29vwrTkrrW2JBCXBFhIiB2cbji0=
Subject key identifier: 14:3A:6B:63:BE:54:14:4F:8F:67:EA:D3:4C:3F:B0:B6:BB:32:95:14
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 01984B53BF5D5882F31E08A418466A4997E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 0CF6
Signing time: Sun 27 Jul 2025 10:00:36 +0000
Manifest this update: Sun 27 Jul 2025 10:00:36 +0000
Manifest next update: Mon 28 Jul 2025 10:00:36 +0000
Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: sHuHm9ZbpXJ8wkadn1kR7e+qOx4GrEnVYucE842RVfc=)
2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:bf:5d:58:82:f3:1e:08:a4:18:46:6a:49:97:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Jul 27 10:00:36 2025 GMT
Not After : Jul 28 10:00:36 2025 GMT
Subject: CN=143a6b63be54144f8f67ead34c3fb0b6bb329514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:85:a6:21:57:04:aa:a9:0f:3a:fa:d2:91:
0b:8a:ac:3d:41:bd:d4:70:a0:79:00:59:0e:d0:57:
13:0b:61:0e:13:3e:c1:f3:22:9f:a3:b3:e3:ed:e2:
60:a7:44:1e:0b:df:d2:9f:07:34:1a:5d:b1:9c:93:
65:43:ee:c3:73:30:bd:f5:5f:10:7e:11:88:66:2a:
04:0b:54:f2:fd:b3:35:f6:19:ce:be:8f:75:93:55:
47:dd:77:54:e1:48:4d:10:3e:93:bf:5f:6f:21:f8:
33:34:9a:d9:bf:1a:d0:8f:6a:69:cc:0c:2e:54:84:
1b:16:7b:c1:e2:5c:d4:67:18:1f:f0:34:54:e9:0b:
8c:39:fe:bf:e7:85:27:c9:82:24:84:8d:ee:78:25:
87:45:24:62:e1:74:2f:a2:0c:9c:fc:7c:26:d2:3d:
46:6a:7a:62:06:10:85:d8:b8:72:c3:ae:93:74:60:
f7:9b:0d:6c:a9:a4:e2:9d:03:bf:82:d0:6b:59:46:
e3:0e:b4:d2:7e:d8:14:d6:18:3e:51:d1:9d:af:56:
c0:94:09:6a:b9:8e:9d:f0:e5:51:3c:a2:3c:e5:6b:
3c:e2:04:f2:99:17:e6:d3:16:89:57:a7:9d:c8:45:
ec:81:e1:5b:bc:cc:1a:bc:b6:12:4d:25:ee:f7:3b:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:6B:63:BE:54:14:4F:8F:67:EA:D3:4C:3F:B0:B6:BB:32:95:14
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:87:6a:71:ba:88:23:db:f7:c4:01:b8:0a:51:c8:3e:d5:e6:
78:30:2b:98:7b:bb:3f:a9:8c:25:f6:4e:7c:55:15:99:d6:42:
52:58:ac:22:68:a5:17:62:c3:e7:d6:9b:69:90:59:5b:3a:bb:
0c:09:06:94:be:19:b8:e5:11:d8:9b:b7:30:0f:ae:21:8e:fa:
a6:1d:d9:36:f9:8c:aa:36:e5:68:4f:75:d8:13:d7:6c:c1:d5:
35:00:9f:1f:01:9b:ed:5a:f3:67:f1:39:96:4e:56:e0:ee:6b:
72:9f:d4:d0:4a:2d:06:0b:dd:e1:9c:cb:7e:e5:89:dd:af:d9:
4e:cc:7a:f4:7e:8b:f4:f4:70:04:6f:c2:37:62:4a:13:93:30:
a9:c0:89:9e:d0:cd:9d:7c:25:b7:3c:df:0e:a0:53:b2:b2:1f:
08:b2:39:5f:22:b2:93:82:b2:18:ff:9f:62:ac:2a:1d:db:1a:
35:72:b0:22:12:ec:22:82:2c:7b:e5:34:a2:ca:b2:4c:8b:35:
b7:13:7e:26:30:ea:5f:3c:f4:61:21:67:6c:f6:9d:51:88:72:
95:80:21:26:f9:52:2b:cb:61:9f:38:e4:f5:62:ad:f7:55:c7:
56:d3:b6:24:44:2e:07:ad:83:a8:00:ea:7f:72:fa:17:b1:de:
3b:90:b8:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU79dWILzHgikGEZqSZfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi
Y2VmMzQwHhcNMjUwNzI3MTAwMDM2WhcNMjUwNzI4MTAwMDM2WjAzMTEwLwYDVQQD
EygxNDNhNmI2M2JlNTQxNDRmOGY2N2VhZDM0YzNmYjBiNmJiMzI5NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynOFpiFXBKqpDzr60pELiqw9Qb3U
cKB5AFkO0FcTC2EOEz7B8yKfo7Pj7eJgp0QeC9/Snwc0Gl2xnJNlQ+7DczC99V8Q
fhGIZioEC1Ty/bM19hnOvo91k1VH3XdU4UhNED6Tv19vIfgzNJrZvxrQj2ppzAwu
VIQbFnvB4lzUZxgf8DRU6QuMOf6/54UnyYIkhI3ueCWHRSRi4XQvogyc/Hwm0j1G
anpiBhCF2Lhyw66TdGD3mw1sqaTinQO/gtBrWUbjDrTSftgU1hg+UdGdr1bAlAlq
uY6d8OVRPKI85Ws84gTymRfm0xaJV6edyEXsgeFbvMwavLYSTSXu9zuqFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ6a2O+VBRPj2fq00w/sLa7MpUUMB8GA1UdIwQY
MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt
ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi
LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4dqcbqI
I9v3xAG4ClHIPtXmeDArmHu7P6mMJfZOfFUVmdZCUlisImilF2LD59abaZBZWzq7
DAkGlL4ZuOUR2Ju3MA+uIY76ph3ZNvmMqjblaE912BPXbMHVNQCfHwGb7VrzZ/E5
lk5W4O5rcp/U0EotBgvd4ZzLfuWJ3a/ZTsx69H6L9PRwBG/CN2JKE5MwqcCJntDN
nXwltzzfDqBTsrIfCLI5XyKyk4KyGP+fYqwqHdsaNXKwIhLsIoIse+U0osqyTIs1
txN+JjDqXzz0YSFnbPadUYhylYAhJvlSK8thnzjk9WKt91XHVtO2JEQuB62DqADq
f3L6F7HeO5C4vg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:55:05 2025 by rpki-client