Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: kxkCzZiz5EJ+pgxZrS7zuIO7z0wTsOwVDXDZBRCkqNk=
Subject key identifier: BE:90:10:E8:6C:BA:74:FC:3E:3A:06:0D:BD:CE:8B:06:1C:B0:45:8A
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 01984BC1E86F21E4A61884B5C9DAC4D5B0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 12FF
Signing time: Sun 27 Jul 2025 12:00:55 +0000
Manifest this update: Sun 27 Jul 2025 12:00:55 +0000
Manifest next update: Mon 28 Jul 2025 12:00:55 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: Aptfo7EAYf3lEkmPkFdFj9ygCP9hQaQrViAEFw182+Q=)
2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:e8:6f:21:e4:a6:18:84:b5:c9:da:c4:d5:b0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Jul 27 12:00:55 2025 GMT
Not After : Jul 28 12:00:55 2025 GMT
Subject: CN=be9010e86cba74fc3e3a060dbdce8b061cb0458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3a:4a:69:a5:94:d7:d2:7a:9e:11:a0:42:02:
22:8a:d5:6a:4f:06:e8:ec:99:3e:36:8b:9c:ca:db:
6c:40:95:5d:e3:72:6f:8d:92:c5:f8:34:1a:f8:9d:
41:20:de:c4:91:a9:a0:b4:3a:1c:d9:da:b7:14:b6:
79:f3:ca:91:89:4c:a0:32:ad:2e:c1:da:29:bc:d0:
db:16:e6:3f:b8:3f:3d:37:d7:5f:1a:02:34:08:f8:
f9:c5:39:14:b8:45:42:f7:86:a5:95:1b:f6:01:57:
e7:17:11:24:6f:87:b1:b0:90:4a:1e:86:c6:dd:d1:
dc:bf:30:19:20:28:d7:b3:4c:b1:fa:35:c4:c4:dc:
e6:6c:60:1a:57:8e:f9:3b:2e:0e:3d:61:1e:3f:45:
47:9b:39:60:b4:39:7a:87:0a:6e:ff:ac:d5:09:0a:
7f:43:2c:ae:e8:1b:d7:e0:8a:78:54:63:ea:9c:35:
8f:be:2b:4b:8a:66:62:39:60:1f:c5:e7:ce:9d:85:
6b:0b:49:59:3c:4e:df:71:98:db:0d:a7:b2:65:c5:
37:a4:6f:0b:0e:48:a1:3b:13:d9:18:b5:7f:26:4c:
a6:8a:74:a1:2b:96:26:4d:f7:0e:34:4d:b9:45:ef:
5e:09:93:41:b1:35:3b:7b:5f:d1:67:c3:ec:08:91:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:90:10:E8:6C:BA:74:FC:3E:3A:06:0D:BD:CE:8B:06:1C:B0:45:8A
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f5:12:a2:e3:6b:a2:3b:4e:da:a5:5e:95:d2:fb:59:b6:ae:
e1:51:e1:31:6a:c2:13:86:c8:88:14:89:2f:69:6f:0d:62:cd:
19:e5:d9:46:cf:79:d7:0f:45:3f:ca:8a:9c:0a:3a:15:ed:3c:
08:2c:ab:79:3a:e6:f6:8d:51:42:70:65:19:72:a7:8d:8b:c2:
c3:a2:c0:12:fe:fe:8b:26:c4:81:a0:a7:bb:26:1a:c3:75:8a:
ab:33:4b:89:93:43:ea:da:3d:9d:a9:d4:00:7a:09:06:df:f8:
df:ed:b8:92:2c:a9:6d:eb:dc:56:b3:e3:c3:11:43:9b:9d:52:
53:6e:b8:cb:77:24:b7:b0:38:52:9c:d9:6c:db:65:4d:fc:5a:
17:da:b9:b7:37:6b:07:d9:b1:5a:7f:97:59:50:e6:e5:03:d2:
4d:55:bd:d3:29:4c:4f:81:ee:a9:ff:c8:86:b2:8e:45:01:9a:
8d:e8:33:34:b3:74:eb:c1:4f:3c:5e:ff:ae:f8:06:63:83:60:
77:8e:23:52:1e:e7:97:de:71:11:87:4e:f9:23:4d:23:ae:ee:
49:b2:04:96:58:15:31:f0:10:94:06:c7:89:23:d7:a3:8a:f7:
11:f9:f2:31:ec:da:e3:ab:4f:0f:1f:67:71:53:fc:75:9e:24:
e3:76:af:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwehvIeSmGIS1ydrE1bDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjY2NjMmI5MDljN2M4MTVjYWNjYjVmY2U1MzFjMzI1MjZm
YWRkNWEwHhcNMjUwNzI3MTIwMDU1WhcNMjUwNzI4MTIwMDU1WjAzMTEwLwYDVQQD
EyhiZTkwMTBlODZjYmE3NGZjM2UzYTA2MGRiZGNlOGIwNjFjYjA0NThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jpKaaWU19J6nhGgQgIiitVqTwbo
7Jk+NoucyttsQJVd43JvjZLF+DQa+J1BIN7EkamgtDoc2dq3FLZ588qRiUygMq0u
wdopvNDbFuY/uD89N9dfGgI0CPj5xTkUuEVC94allRv2AVfnFxEkb4exsJBKHobG
3dHcvzAZICjXs0yx+jXExNzmbGAaV475Oy4OPWEeP0VHmzlgtDl6hwpu/6zVCQp/
Qyyu6BvX4Ip4VGPqnDWPvitLimZiOWAfxefOnYVrC0lZPE7fcZjbDaeyZcU3pG8L
DkihOxPZGLV/JkyminShK5YmTfcONE25Re9eCZNBsTU7e1/RZ8PsCJG0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6QEOhsunT8PjoGDb3OiwYcsEWKMB8GA1UdIwQY
MBaAFOzMwrkJx8gVysy1/OUxwyUm+t1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN016Q3VRbkh5QlhLekxYODVUSERKU2I2M1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kMjAxZTYtOTA2ZS00N2Q4LTg5MjMt
NmVmYWI5YjE3NmQ5LzEvN016Q3VRbkh5QlhLekxYODVUSERKU2I2M1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kMjAxZTYtOTA2ZS00N2Q4LTg5MjMtNmVmYWI5YjE3NmQ5
LzEvN016Q3VRbkh5QlhLekxYODVUSERKU2I2M1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/USouNr
ojtO2qVeldL7Wbau4VHhMWrCE4bIiBSJL2lvDWLNGeXZRs951w9FP8qKnAo6Fe08
CCyreTrm9o1RQnBlGXKnjYvCw6LAEv7+iybEgaCnuyYaw3WKqzNLiZND6to9nanU
AHoJBt/43+24kiypbevcVrPjwxFDm51SU264y3ckt7A4UpzZbNtlTfxaF9q5tzdr
B9mxWn+XWVDm5QPSTVW90ylMT4Huqf/IhrKORQGajegzNLN068FPPF7/rvgGY4Ng
d44jUh7nl95xEYdO+SNNI67uSbIEllgVMfAQlAbHiSPXo4r3EfnyMeza46tPDx9n
cVP8dZ4k43av/g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:34:36 2025 by rpki-client