Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: /5+hrglmu7X00xtr09D6M+JYssUVoB56YaFGigMn7kg=
Subject key identifier: 30:CD:00:2A:65:0D:7F:21:B2:E0:C1:92:D6:07:C4:84:AF:49:D9:59
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 0198530D94D325394DCB948DBE80E41C8BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:00:55 +0000
Manifest this update: Mon 28 Jul 2025 22:00:55 +0000
Manifest next update: Tue 29 Jul 2025 22:00:55 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: T0FqvOqZvd3xR9t0Pw4mv2Xq8d432lZEl3+YwdodB3A=)
2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:94:d3:25:39:4d:cb:94:8d:be:80:e4:1c:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Jul 28 22:00:55 2025 GMT
Not After : Jul 29 22:00:55 2025 GMT
Subject: CN=30cd002a650d7f21b2e0c192d607c484af49d959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:12:41:73:9b:aa:b8:0c:e5:d2:ac:14:60:
89:4e:10:4d:2d:49:66:ae:41:cd:bc:43:99:9d:28:
fb:bb:05:df:b4:82:f7:a2:b9:fa:d2:da:f8:69:13:
b6:31:ce:cd:af:76:f2:63:35:dd:a5:b2:29:22:36:
f1:5b:02:36:ca:34:23:21:cf:d3:9c:a6:5e:8e:60:
e1:5e:b2:15:36:29:de:09:47:63:f1:40:f0:30:fd:
e6:b8:a5:09:3c:d6:0c:a5:4a:c3:41:1d:b1:ac:ca:
9f:cb:b5:6f:cf:ef:01:a6:bf:4e:96:75:b8:46:47:
30:15:24:10:01:cb:0b:e6:74:47:b0:f3:7d:ff:a9:
39:5f:10:be:c2:96:0a:a7:d9:99:ea:c3:3a:7a:bd:
49:19:c2:5f:56:b6:75:b4:fc:82:ad:be:d4:e7:f4:
5f:be:7e:52:6e:14:79:47:19:9e:82:93:72:d2:b7:
c9:9e:24:29:65:ad:4e:fb:59:62:78:c6:63:71:9e:
47:af:d0:c6:0e:b5:54:86:e2:c1:8f:92:1c:9b:bc:
1d:39:c4:d7:5f:10:c6:2e:ec:0e:40:fb:e4:99:a3:
82:05:91:66:67:2b:fd:38:1c:c4:5f:48:4a:2d:3a:
5b:c9:70:03:df:82:67:db:0b:30:f4:73:21:4e:f0:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:00:2A:65:0D:7F:21:B2:E0:C1:92:D6:07:C4:84:AF:49:D9:59
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:1b:da:e3:ce:f3:b9:50:76:d5:e1:07:e4:96:3e:a6:df:
fc:f7:99:af:1a:17:aa:e5:3d:24:c7:6a:14:7a:d1:b0:f3:46:
73:f9:09:d2:b6:0e:1f:82:a6:6b:78:16:80:5c:d2:66:18:1b:
f6:cb:2b:5a:86:41:6b:59:1b:6e:f9:9d:64:9a:52:a5:ab:d5:
e0:1f:c5:03:ad:ee:f8:cf:dd:78:35:93:67:ab:5e:94:5f:3c:
2c:47:ac:a0:53:f7:fa:df:97:65:64:14:43:96:fe:21:71:d8:
17:6a:bf:59:36:92:a8:fe:f3:97:98:cb:e6:a9:a2:6a:3c:a3:
e6:9b:18:2b:1e:59:d4:cb:81:2e:0d:28:56:8e:37:37:57:0d:
9f:85:03:d8:cc:ed:b8:d2:d9:6d:3f:1f:87:98:7a:64:a0:60:
33:8a:05:03:0b:5b:eb:07:0d:a8:87:d3:27:54:19:42:9c:dc:
ef:83:84:64:69:e3:49:75:e7:b5:96:9d:ec:7e:32:9c:40:46:
c3:52:3a:a2:ef:22:e8:8f:8b:8c:bb:40:fd:25:ee:16:2c:3f:
82:8f:65:7f:9c:4d:cd:22:eb:71:5d:dc:f2:bf:6c:0c:11:cd:
35:47:52:a1:32:9c:51:95:71:17:15:c1:2a:c1:35:b0:3d:5b:
2e:9e:03:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDZTTJTlNy5SNvoDkHIvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzI0MjdjYjJmYWY4YmQ5YjZkZDlhZTEzN2M0ZDQ5MTRh
OGU4MTAwHhcNMjUwNzI4MjIwMDU1WhcNMjUwNzI5MjIwMDU1WjAzMTEwLwYDVQQD
EygzMGNkMDAyYTY1MGQ3ZjIxYjJlMGMxOTJkNjA3YzQ4NGFmNDlkOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JASQXObqrgM5dKsFGCJThBNLUlm
rkHNvEOZnSj7uwXftIL3orn60tr4aRO2Mc7Nr3byYzXdpbIpIjbxWwI2yjQjIc/T
nKZejmDhXrIVNineCUdj8UDwMP3muKUJPNYMpUrDQR2xrMqfy7Vvz+8Bpr9OlnW4
RkcwFSQQAcsL5nRHsPN9/6k5XxC+wpYKp9mZ6sM6er1JGcJfVrZ1tPyCrb7U5/Rf
vn5SbhR5RxmegpNy0rfJniQpZa1O+1lieMZjcZ5Hr9DGDrVUhuLBj5Icm7wdOcTX
XxDGLuwOQPvkmaOCBZFmZyv9OBzEX0hKLTpbyXAD34Jn2wsw9HMhTvAurQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDNACplDX8hsuDBktYHxISvSdlZMB8GA1UdIwQY
MBaAFOxyQnyy+vi9m23ZrhN8TUkUqOgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUt
NGRmM2RiODA3MzI3LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83OWU0OWYtODgwZi00ZDk5LWI5YTUtNGRmM2RiODA3MzI3
LzEvN0hKQ2ZMTDYtTDJiYmRtdUUzeE5TUlNvNkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhO4b2uPO
87lQdtXhB+SWPqbf/PeZrxoXquU9JMdqFHrRsPNGc/kJ0rYOH4Kma3gWgFzSZhgb
9ssrWoZBa1kbbvmdZJpSpavV4B/FA63u+M/deDWTZ6telF88LEesoFP3+t+XZWQU
Q5b+IXHYF2q/WTaSqP7zl5jL5qmiajyj5psYKx5Z1MuBLg0oVo43N1cNn4UD2Mzt
uNLZbT8fh5h6ZKBgM4oFAwtb6wcNqIfTJ1QZQpzc74OEZGnjSXXntZad7H4ynEBG
w1I6ou8i6I+LjLtA/SXuFiw/go9lf5xNzSLrcV3c8r9sDBHNNUdSoTKcUZVxFxXB
KsE1sD1bLp4DCQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:17:42 2025 by rpki-client