Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: w3rCnYVHRXMOspgGqs4xxkUHQLpvxj94ZojYpca4Ia4=
Subject key identifier: 83:28:9B:51:62:97:A5:C2:86:19:7A:9C:7B:E8:9A:AA:1C:D4:F0:AB
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 0198443EB55FD303B47559ACE7FE5F79ACBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1612
Signing time: Sat 26 Jul 2025 01:00:16 +0000
Manifest this update: Sat 26 Jul 2025 01:00:16 +0000
Manifest next update: Sun 27 Jul 2025 01:00:16 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: gBZl/QZtf9fuQhoXW7rnD2oapogDOaRXtW3Pj2b3UvE=)
2: BuLlbSCfr8m5R0bdvUy2auaVYo4.roa (hash: 5vhRJn1bAKiGFLiI67C1axUPj/VuaBvfb8oPGD+JOlw=)
3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:b5:5f:d3:03:b4:75:59:ac:e7:fe:5f:79:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jul 26 01:00:16 2025 GMT
Not After : Jul 27 01:00:16 2025 GMT
Subject: CN=83289b516297a5c286197a9c7be89aaa1cd4f0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:26:d6:43:51:31:3b:a6:56:24:5b:9a:2b:ea:
19:73:51:28:6f:ba:e4:19:40:94:d5:44:9c:d4:62:
f4:88:2c:47:0f:07:c5:99:2c:d2:c3:c7:4f:39:56:
3f:7c:e8:31:78:93:90:54:07:52:0d:0b:24:f4:c7:
7f:79:fe:e5:fa:92:2a:37:2f:f6:43:8a:be:5f:3c:
94:f8:84:c9:8e:a9:7d:14:f1:22:10:ac:ef:3c:9b:
ed:57:ab:bd:fc:48:66:45:4c:a0:b9:64:d4:19:1c:
a6:b5:09:f9:f6:e0:22:c9:26:45:cb:10:b7:e9:ac:
b7:c8:55:61:e5:60:7b:bd:8e:47:b7:89:14:9b:8b:
38:e6:83:2f:69:3a:63:f2:27:aa:a0:9a:c1:6a:c9:
21:3e:22:0f:48:6c:94:ea:89:5d:f2:9f:db:f4:c9:
17:18:92:da:91:39:39:e6:a5:9d:d7:41:e8:4e:66:
c5:ae:aa:c8:3f:04:2b:f2:6d:87:b5:4a:79:cb:a2:
ec:96:35:7f:6d:b3:65:77:4a:99:d0:0f:3d:63:e7:
f1:04:80:28:4f:cf:2f:4e:b9:b0:e0:99:6b:d8:08:
c9:ba:79:63:90:be:20:0b:8f:38:39:fb:12:56:c2:
4e:cb:6e:69:56:b3:af:36:ca:4a:63:3c:40:eb:36:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:9B:51:62:97:A5:C2:86:19:7A:9C:7B:E8:9A:AA:1C:D4:F0:AB
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d8:2c:c4:50:d7:b8:9b:d1:78:22:c0:01:9b:32:9b:8d:4f:
de:20:8a:80:e6:e4:f2:94:cb:ea:5f:b8:28:b9:1d:2f:a7:59:
42:14:c9:d8:a7:38:00:76:38:e2:0e:bd:d1:87:4a:79:9b:60:
f0:e0:4a:c8:ea:00:df:86:8e:2f:f0:f7:38:fd:38:25:b4:a8:
ef:cc:b1:17:f2:73:b8:cd:c0:c3:c4:e3:5e:23:07:d1:12:70:
e3:6e:d6:c4:ed:f9:84:06:69:38:04:a5:a2:d6:c7:b2:c0:88:
54:fa:e9:6c:2f:d9:22:9d:df:59:2a:85:cb:5e:e8:59:da:7b:
9e:e6:d8:b6:9d:3f:d2:3f:74:8e:09:9d:ef:ee:f1:7b:8c:d2:
02:b0:ae:3f:57:2f:20:fc:4e:87:30:7e:39:88:11:e6:e7:ae:
75:b0:dd:c1:fc:7d:31:db:58:e2:a1:e0:c6:01:a6:97:52:f6:
48:d9:06:bd:52:15:6e:91:e8:14:66:fd:b6:83:68:54:2f:b5:
a7:b2:bd:08:78:57:ee:51:8b:9a:ea:60:45:14:49:6b:f4:47:
ac:ab:ac:05:ac:ec:bd:99:75:b6:4c:f5:05:eb:09:62:6a:0b:
a2:c2:f0:cc:85:43:f5:c1:f0:9e:a1:d7:17:db:10:f4:2a:06:
4d:34:c1:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEPrVf0wO0dVms5/5feay8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2
NjIxYjkwHhcNMjUwNzI2MDEwMDE2WhcNMjUwNzI3MDEwMDE2WjAzMTEwLwYDVQQD
Eyg4MzI4OWI1MTYyOTdhNWMyODYxOTdhOWM3YmU4OWFhYTFjZDRmMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ybWQ1ExO6ZWJFuaK+oZc1Eob7rk
GUCU1USc1GL0iCxHDwfFmSzSw8dPOVY/fOgxeJOQVAdSDQsk9Md/ef7l+pIqNy/2
Q4q+XzyU+ITJjql9FPEiEKzvPJvtV6u9/EhmRUyguWTUGRymtQn59uAiySZFyxC3
6ay3yFVh5WB7vY5Ht4kUm4s45oMvaTpj8ieqoJrBaskhPiIPSGyU6old8p/b9MkX
GJLakTk55qWd10HoTmbFrqrIPwQr8m2HtUp5y6LsljV/bbNld0qZ0A89Y+fxBIAo
T88vTrmw4Jlr2AjJunljkL4gC484OfsSVsJOy25pVrOvNspKYzxA6zYgvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMom1Fil6XChhl6nHvomqoc1PCrMB8GA1UdIwQY
MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt
YzFhZGRkN2RlYmFhLzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh
LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdgsxFDX
uJvReCLAAZsym41P3iCKgObk8pTL6l+4KLkdL6dZQhTJ2Kc4AHY44g690YdKeZtg
8OBKyOoA34aOL/D3OP04JbSo78yxF/JzuM3Aw8TjXiMH0RJw427WxO35hAZpOASl
otbHssCIVPrpbC/ZIp3fWSqFy17oWdp7nubYtp0/0j90jgmd7+7xe4zSArCuP1cv
IPxOhzB+OYgR5ueudbDdwfx9MdtY4qHgxgGml1L2SNkGvVIVbpHoFGb9toNoVC+1
p7K9CHhX7lGLmupgRRRJa/RHrKusBazsvZl1tkz1BesJYmoLosLwzIVD9cHwnqHX
F9sQ9CoGTTTB9Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:47:05 2025 by rpki-client