Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File: exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier: Ut3J8iyGW52yi9tLYbBytcUf6FK9cgv3c/lhTuNVf0o=
Subject key identifier: D7:A5:96:78:84:76:C8:42:D9:BC:BC:21:06:82:CF:7A:19:74:64:B5
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial: 01984AAE7FEA2E68158CB2675F78629BB72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 07:00:06 +0000
Manifest this update: Sun 27 Jul 2025 07:00:06 +0000
Manifest next update: Mon 28 Jul 2025 07:00:06 +0000
Files and hashes: 1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=)
2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: d0fWB/nFzbD1v63XHiKT6HR1R5WljUZdw9TD1/IFYjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:7f:ea:2e:68:15:8c:b2:67:5f:78:62:9b:b7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
Validity
Not Before: Jul 27 07:00:06 2025 GMT
Not After : Jul 28 07:00:06 2025 GMT
Subject: CN=d7a596788476c842d9bcbc210682cf7a197464b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:83:89:6c:b7:af:ef:ca:75:c5:d6:6f:6e:
2b:a6:99:dd:63:d5:7a:64:5d:32:3c:3c:fe:fb:45:
ab:28:1a:f4:6d:3c:8d:6d:52:46:6a:a4:12:5e:a2:
74:fb:ed:63:ec:a4:ec:8d:cf:6d:ef:07:01:27:25:
a0:bf:9a:cf:2d:ac:c5:23:16:1c:ad:c3:b2:b1:e6:
b5:0f:b0:90:41:ef:99:56:14:9d:4e:50:0f:7e:3b:
f2:8e:c0:3c:3d:c6:5b:7a:5c:d4:15:66:cc:07:5c:
22:68:13:95:39:df:8d:d7:dc:f0:c7:0d:ec:45:11:
eb:8e:3f:40:23:74:ea:f2:f2:8d:44:d9:f4:be:63:
ca:53:8d:43:1e:fb:2f:9b:6f:f5:43:a6:d0:a6:26:
f0:a6:a4:b5:6b:a5:e7:d1:8b:34:82:08:71:78:28:
8b:a6:6c:b2:f6:e5:5a:59:cb:6e:09:cb:4d:48:33:
2c:ff:50:b2:f4:7d:86:03:5d:c7:7e:d6:98:73:4d:
02:cc:f5:0b:9a:1f:9f:8e:01:ad:c6:fd:9c:e0:c1:
b9:2d:be:f0:ce:9b:0f:14:a6:2f:40:3a:da:54:4d:
8b:27:16:f8:a7:9b:f8:c4:6b:1f:1a:18:b9:df:d4:
36:1b:95:fc:59:eb:a8:ae:71:b9:22:4c:20:8e:31:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A5:96:78:84:76:C8:42:D9:BC:BC:21:06:82:CF:7A:19:74:64:B5
X509v3 Authority Key Identifier:
keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:b2:03:a6:3d:31:eb:da:4f:5c:fc:db:6b:d5:53:4c:90:
5b:d5:99:6b:8e:a8:2f:10:6d:c5:8d:72:85:30:31:d7:4c:2f:
16:de:c2:30:31:f6:71:07:7e:77:b9:ca:8a:05:87:bc:66:91:
13:79:ed:40:0d:fa:dd:c6:8f:d4:58:36:89:3d:35:a0:e7:51:
8b:ef:64:b3:8a:60:aa:5f:0b:8f:f0:ef:fe:14:4e:f4:19:75:
2c:42:93:53:23:09:83:77:cc:77:35:da:b7:3a:29:48:e2:3f:
0d:2d:8f:7a:6c:3d:88:52:e2:6a:02:cf:a8:e3:49:85:bb:e3:
53:6f:0d:3a:e3:8c:c0:3b:3b:fb:1d:b5:7b:72:9a:ca:fd:2b:
d4:e1:bc:8b:3a:1a:1b:17:08:55:6e:32:bc:48:d8:69:34:29:
12:ee:f4:0d:60:e4:19:8d:20:41:eb:ee:cd:8e:0d:db:9a:de:
56:2a:f9:54:19:81:4e:2c:12:a6:54:dc:01:56:42:91:58:f8:
a8:ea:04:aa:e9:50:44:90:5b:46:f4:bb:6c:5f:84:d0:56:6b:
dc:12:4f:84:08:e0:fc:22:7e:2f:12:bf:b1:d9:c9:1d:4e:d0:
bd:ff:7e:69:27:fb:7b:ff:30:e0:3b:a9:b1:26:be:01:ef:cc:
27:97:c2:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrn/qLmgVjLJnX3him7ctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTNlMDU2NjlmNTU2NjYyYmVjNTY2NGUxMDE2NTlmOTY2
YzgyNmEwHhcNMjUwNzI3MDcwMDA2WhcNMjUwNzI4MDcwMDA2WjAzMTEwLwYDVQQD
EyhkN2E1OTY3ODg0NzZjODQyZDliY2JjMjEwNjgyY2Y3YTE5NzQ2NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPyDiWy3r+/KdcXWb24rppndY9V6
ZF0yPDz++0WrKBr0bTyNbVJGaqQSXqJ0++1j7KTsjc9t7wcBJyWgv5rPLazFIxYc
rcOysea1D7CQQe+ZVhSdTlAPfjvyjsA8PcZbelzUFWbMB1wiaBOVOd+N19zwxw3s
RRHrjj9AI3Tq8vKNRNn0vmPKU41DHvsvm2/1Q6bQpibwpqS1a6Xn0Ys0gghxeCiL
pmyy9uVaWctuCctNSDMs/1Cy9H2GA13HftaYc00CzPULmh+fjgGtxv2c4MG5Lb7w
zpsPFKYvQDraVE2LJxb4p5v4xGsfGhi539Q2G5X8WeuornG5IkwgjjEblQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNellniEdshC2by8IQaCz3oZdGS1MB8GA1UdIwQY
MBaAFHsT4FZp9VZmK+xWZOEBZZ+WbIJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEt
OTRjNzMzNDZjMGVhLzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mNzc2MWEtZmMzOC00NzVjLThhMTEtOTRjNzMzNDZjMGVh
LzEvZXhQZ1ZtbjFWbVlyN0ZaazRRRmxuNVpzZ21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH66yA6Y9
MevaT1z822vVU0yQW9WZa46oLxBtxY1yhTAx10wvFt7CMDH2cQd+d7nKigWHvGaR
E3ntQA363caP1Fg2iT01oOdRi+9ks4pgql8Lj/Dv/hRO9Bl1LEKTUyMJg3fMdzXa
tzopSOI/DS2Pemw9iFLiagLPqONJhbvjU28NOuOMwDs7+x21e3Kayv0r1OG8izoa
GxcIVW4yvEjYaTQpEu70DWDkGY0gQevuzY4N25reVir5VBmBTiwSplTcAVZCkVj4
qOoEqulQRJBbRvS7bF+E0FZr3BJPhAjg/CJ+LxK/sdnJHU7Qvf9+aSf7e/8w4Dup
sSa+Ae/MJ5fC5A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:29 2025 by rpki-client