Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: n6uJ2qrY54s6Ph/NH45DmpTJn4DZ1n24CmU3t9OVMQ4=
Subject key identifier: 69:14:BB:1C:8C:E6:34:E3:91:6B:81:83:37:C7:0A:01:5E:D2:46:61
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 0198451A7D0020CA85CAE7F372B4FC642AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 09F7
Signing time: Sat 26 Jul 2025 05:00:20 +0000
Manifest this update: Sat 26 Jul 2025 05:00:20 +0000
Manifest next update: Sun 27 Jul 2025 05:00:20 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: P9LJvlGdixXyQrJQ1lKnIH/zs3e2Vrw6F3uDA0zU2GE=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:7d:00:20:ca:85:ca:e7:f3:72:b4:fc:64:2a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Jul 26 05:00:20 2025 GMT
Not After : Jul 27 05:00:20 2025 GMT
Subject: CN=6914bb1c8ce634e3916b818337c70a015ed24661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:b8:c1:5f:aa:f3:c0:60:a5:9d:87:9f:e0:
a0:98:4e:d0:90:24:fc:51:9f:51:49:f0:c2:65:92:
ce:4a:58:a2:0c:9a:de:3c:39:03:67:dd:a2:9c:27:
99:91:07:1f:22:96:21:c4:99:fb:bc:f0:b2:f1:79:
e5:ca:e5:1e:03:ee:a9:3c:a2:33:34:8c:d1:c9:fd:
8d:e1:5c:fc:0a:b0:2d:6d:76:54:08:16:a9:a5:13:
96:7b:cb:96:1f:d8:0a:a2:29:5c:91:9c:10:8d:60:
f7:25:4b:8e:5e:06:3a:c5:6a:06:a5:5b:02:85:1f:
90:c9:99:44:30:f6:02:35:ac:85:14:04:5a:ac:7f:
3d:e6:73:da:0d:a6:fe:f5:83:26:fc:a5:ab:fc:b8:
88:f1:46:0c:cf:a8:84:26:23:7a:1d:2f:f3:98:d1:
40:a0:ea:ae:4d:b0:96:2f:06:34:01:3d:26:91:5e:
39:a9:f4:a3:31:44:63:b1:85:54:6c:3c:ba:a9:4c:
8b:3c:fa:c1:13:64:ca:88:56:11:03:9b:0a:93:9e:
d1:e2:25:ab:9e:0a:71:d7:be:ab:27:83:3b:94:81:
a9:8f:07:94:ec:98:eb:81:63:4b:72:65:91:1b:07:
69:e2:4b:d1:1a:c9:e9:9f:c7:e6:ec:e1:06:ff:e0:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:BB:1C:8C:E6:34:E3:91:6B:81:83:37:C7:0A:01:5E:D2:46:61
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d2:d9:ca:5f:2b:93:dc:30:62:ee:fe:fa:95:6a:f5:06:62:
a9:36:df:f2:4e:ed:d2:62:e7:cb:8d:37:8b:00:36:fa:6a:bb:
f4:22:28:e6:96:8a:5a:d3:dc:aa:f8:c5:4c:87:5a:b3:cc:bc:
ea:6e:c7:95:ac:7b:57:02:af:0b:d5:40:9c:63:cd:0b:e2:1e:
1c:34:9c:3c:78:68:ec:5e:e7:f6:ee:39:97:3a:ee:36:96:a5:
be:d8:b0:eb:42:e4:98:ad:14:1d:2e:02:db:42:1b:2b:e9:1e:
39:ac:26:35:6a:71:76:44:2a:a2:0b:0e:21:1c:1d:5e:01:3e:
28:a4:42:3e:da:0b:80:0d:c3:23:a7:bc:d4:50:75:4c:1e:ae:
39:95:63:ef:1e:c2:27:16:a5:38:0a:31:bd:2d:f9:29:f9:eb:
ed:92:10:fb:69:29:fb:5b:bc:79:4c:34:95:ce:c8:8a:04:cc:
46:aa:e7:07:91:5e:7d:34:cb:48:a0:1f:14:aa:da:f8:6b:08:
c5:25:e0:6a:3b:88:fb:ef:50:8f:8e:80:ff:76:f0:d0:e7:23:
82:25:f3:71:78:01:7f:51:46:a2:ed:5a:45:b4:d7:4b:d1:a7:
e3:9c:75:ea:63:5f:3c:ae:50:18:69:de:b1:31:cf:97:67:5a:
77:57:d9:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGn0AIMqFyufzcrT8ZCr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM4Y2RjYWY5ZjkyNDY0OTdkYzdhZTQ1ODQ1Mzc5ZmU2
YTcxNzQwHhcNMjUwNzI2MDUwMDIwWhcNMjUwNzI3MDUwMDIwWjAzMTEwLwYDVQQD
Eyg2OTE0YmIxYzhjZTYzNGUzOTE2YjgxODMzN2M3MGEwMTVlZDI0NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuq4wV+q88BgpZ2Hn+CgmE7QkCT8
UZ9RSfDCZZLOSliiDJrePDkDZ92inCeZkQcfIpYhxJn7vPCy8XnlyuUeA+6pPKIz
NIzRyf2N4Vz8CrAtbXZUCBappROWe8uWH9gKoilckZwQjWD3JUuOXgY6xWoGpVsC
hR+QyZlEMPYCNayFFARarH895nPaDab+9YMm/KWr/LiI8UYMz6iEJiN6HS/zmNFA
oOquTbCWLwY0AT0mkV45qfSjMURjsYVUbDy6qUyLPPrBE2TKiFYRA5sKk57R4iWr
ngpx176rJ4M7lIGpjweU7JjrgWNLcmWRGwdp4kvRGsnpn8fm7OEG/+ABKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkUuxyM5jTjkWuBgzfHCgFe0kZhMB8GA1UdIwQY
MBaAFOxTjNyvn5JGSX3HrkWEU3n+anF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEt
YzA2YzYyYWY5ZGE1LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEtYzA2YzYyYWY5ZGE1
LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdLZyl8r
k9wwYu7++pVq9QZiqTbf8k7t0mLny403iwA2+mq79CIo5paKWtPcqvjFTIdas8y8
6m7Hlax7VwKvC9VAnGPNC+IeHDScPHho7F7n9u45lzruNpalvtiw60LkmK0UHS4C
20IbK+keOawmNWpxdkQqogsOIRwdXgE+KKRCPtoLgA3DI6e81FB1TB6uOZVj7x7C
JxalOAoxvS35Kfnr7ZIQ+2kp+1u8eUw0lc7IigTMRqrnB5FefTTLSKAfFKra+GsI
xSXgajuI++9Qj46A/3bw0OcjgiXzcXgBf1FGou1aRbTXS9Gn45x16mNfPK5QGGne
sTHPl2dad1fZTg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:13 2025 by rpki-client