Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
File: M7-dbirEKjrXVDcRN9XSSyRz0mU.mft (raw, json)
Hash identifier: ZFtEWbeDDWZjtTGnt4+UjxoCCtko63UaGsxcTxJilKo=
Subject key identifier: FB:41:23:95:AC:5F:73:F9:36:F2:B1:E0:68:62:46:2C:7E:12:AF:F9
Authority key identifier: 33:BF:9D:6E:2A:C4:2A:3A:D7:54:37:11:37:D5:D2:4B:24:73:D2:65
Certificate issuer: /CN=33bf9d6e2ac42a3ad754371137d5d24b2473d265
Certificate serial: 0198499C6A8E7DB65ADC707CBD23F938857E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
Manifest number: D4
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: M7-dbirEKjrXVDcRN9XSSyRz0mU.crl (hash: zgLu2m20oe8gr1rOGQ5PhYtARtOqplIbmSQvpzryhHw=)
2: X8KnFrMZvhtZ4Wnd7sCuYYb-z5U.roa (hash: GNsSYGNSDwNlfyU/HljGk6wnUDcc+id8yWHC280iL+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6a:8e:7d:b6:5a:dc:70:7c:bd:23:f9:38:85:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33bf9d6e2ac42a3ad754371137d5d24b2473d265
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=fb412395ac5f73f936f2b1e06862462c7e12aff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:e2:ac:36:df:d8:5a:9d:02:86:25:82:77:
47:cb:1c:dd:0f:83:bf:7b:9f:0d:2b:50:4c:bc:d1:
58:78:43:fc:9c:13:22:90:b5:df:d2:90:f1:90:2d:
f2:ea:da:08:d0:9b:0d:34:9d:de:48:e5:c5:ea:86:
92:b0:7a:ac:eb:0d:11:6e:25:f6:64:ae:d2:0c:6a:
25:0b:1a:b1:2c:5f:82:50:57:3b:1f:6e:69:e4:63:
07:99:8b:b0:6a:e2:85:41:c5:e2:da:df:f9:43:4b:
4b:8e:a5:bd:99:b1:53:c1:f8:f3:e4:70:65:31:c4:
bb:2a:a5:bc:3d:01:6f:e3:7a:1a:50:99:5a:f9:bb:
91:86:0a:0c:c3:f6:1f:e3:5d:ad:9d:04:98:50:9d:
9f:b8:74:72:74:9b:cc:86:52:9c:85:1f:f5:9e:70:
5b:d6:c6:ae:bd:3a:a8:c7:3b:a2:d7:18:3f:45:3c:
3b:0a:60:02:fc:59:9e:11:87:43:8b:66:b6:de:b7:
2c:96:49:1b:3a:86:a6:9d:4c:cc:9a:17:3c:78:b1:
2b:ea:86:c2:17:14:9f:b8:46:c5:31:36:af:54:a9:
75:f4:c8:4f:88:66:95:4d:da:19:d0:48:69:f2:8d:
c5:b2:32:43:d4:0f:07:bb:39:32:f0:ba:b3:de:29:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:23:95:AC:5F:73:F9:36:F2:B1:E0:68:62:46:2C:7E:12:AF:F9
X509v3 Authority Key Identifier:
keyid:33:BF:9D:6E:2A:C4:2A:3A:D7:54:37:11:37:D5:D2:4B:24:73:D2:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:47:d8:d1:dd:22:d8:d9:2a:57:4a:1a:51:6f:49:3e:0f:
12:ec:1b:03:6d:d8:1a:f5:30:28:25:53:8a:ad:b9:5a:d2:6d:
f1:75:24:06:69:1f:18:a4:02:25:83:a3:02:a9:99:d5:b0:78:
23:0a:3d:c1:77:7c:c0:fc:0d:f7:2b:4d:96:bc:f2:c2:ca:93:
81:54:0c:81:e9:d2:87:7e:b1:b8:2e:8e:55:ad:b2:28:15:77:
c6:38:6f:0d:6b:b1:59:0c:51:7e:d2:ec:8d:0a:9a:10:2a:59:
6f:0a:32:3a:db:51:f2:93:d2:45:1e:a9:be:de:a6:51:c1:93:
bd:2a:22:44:f8:c0:6a:28:b4:57:c8:fc:fc:f5:6f:02:db:86:
22:a8:14:aa:c5:3c:21:6d:ed:92:9d:8c:63:27:a2:42:61:47:
86:dc:17:95:69:de:a9:31:40:73:7f:72:84:85:fb:da:be:88:
a9:35:af:e6:ec:e8:9c:d9:aa:71:cc:3e:7f:13:20:fa:5b:de:
fa:dd:14:b4:5d:dd:4b:bf:96:c6:e3:8d:bb:5d:f0:24:cb:af:
6d:ba:df:95:3f:a7:17:ed:08:34:2b:1c:c2:d0:39:94:cf:54:
d8:f7:0d:90:1c:c5:e6:38:66:a4:62:21:8f:f0:97:fd:d5:3d:
13:0d:c6:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnGqOfbZa3HB8vSP5OIV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYmY5ZDZlMmFjNDJhM2FkNzU0MzcxMTM3ZDVkMjRiMjQ3
M2QyNjUwHhcNMjUwNzI3MDIwMDQ0WhcNMjUwNzI4MDIwMDQ0WjAzMTEwLwYDVQQD
EyhmYjQxMjM5NWFjNWY3M2Y5MzZmMmIxZTA2ODYyNDYyYzdlMTJhZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8PirDbf2FqdAoYlgndHyxzdD4O/
e58NK1BMvNFYeEP8nBMikLXf0pDxkC3y6toI0JsNNJ3eSOXF6oaSsHqs6w0RbiX2
ZK7SDGolCxqxLF+CUFc7H25p5GMHmYuwauKFQcXi2t/5Q0tLjqW9mbFTwfjz5HBl
McS7KqW8PQFv43oaUJla+buRhgoMw/Yf412tnQSYUJ2fuHRydJvMhlKchR/1nnBb
1sauvTqoxzui1xg/RTw7CmAC/FmeEYdDi2a23rcslkkbOoamnUzMmhc8eLEr6obC
FxSfuEbFMTavVKl19MhPiGaVTdoZ0Ehp8o3FsjJD1A8Huzky8Lqz3inmVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtBI5WsX3P5NvKx4GhiRix+Eq/5MB8GA1UdIwQY
MBaAFDO/nW4qxCo611Q3ETfV0kskc9JlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xMzNhODMtODg5Mi00YTc1LWE1YTQt
NTU1OWViN2NjMjE4LzEvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xMzNhODMtODg5Mi00YTc1LWE1YTQtNTU1OWViN2NjMjE4
LzEvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABslH2NHd
ItjZKldKGlFvST4PEuwbA23YGvUwKCVTiq25WtJt8XUkBmkfGKQCJYOjAqmZ1bB4
Iwo9wXd8wPwN9ytNlrzywsqTgVQMgenSh36xuC6OVa2yKBV3xjhvDWuxWQxRftLs
jQqaECpZbwoyOttR8pPSRR6pvt6mUcGTvSoiRPjAaii0V8j8/PVvAtuGIqgUqsU8
IW3tkp2MYyeiQmFHhtwXlWneqTFAc39yhIX72r6IqTWv5uzonNmqccw+fxMg+lve
+t0UtF3dS7+WxuONu13wJMuvbbrflT+nF+0INCscwtA5lM9U2PcNkBzF5jhmpGIh
j/CX/dU9Ew3G1w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:18 2025 by rpki-client