Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: V6n0O9DViazG8yvDF0JII7SAS1K0NCQzCmb/g4D9zrQ=
Subject key identifier: 26:EE:20:13:60:81:BE:19:3B:EC:AD:39:D8:10:11:61:D6:F5:5A:12
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 019845BF43D9BE806B8CF8D956D04B6F8B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 08:00:19 +0000
Manifest this update: Sat 26 Jul 2025 08:00:19 +0000
Manifest next update: Sun 27 Jul 2025 08:00:19 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: FDvp6Jo5tk8n/lBveGHpt8ak2smP578Fp/z6p5fa1t4=)
2: EiUuk_NOU4Yk3nk2nn56zZabZvk.roa (hash: 6qv2yhWzsdq9RqBF8lz3ldQ0Ka6+KKmmMeovRbBrbQI=)
3: MBu8VTmpr04x0tshZWj7vlWVLfA.roa (hash: ulHARLad6WzWUuYeIJe/P7G2yuuz8lPKXAfu9iAhsvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:43:d9:be:80:6b:8c:f8:d9:56:d0:4b:6f:8b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Jul 26 08:00:19 2025 GMT
Not After : Jul 27 08:00:19 2025 GMT
Subject: CN=26ee20136081be193becad39d8101161d6f55a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:6a:a4:de:c2:b8:17:15:70:33:b1:d7:74:
ea:4c:c5:45:91:14:f9:7d:d4:13:da:de:b5:78:50:
10:96:42:dc:ba:e2:8f:6c:2f:5e:1d:b9:10:68:b6:
4e:99:94:3a:a0:db:81:1f:a2:8f:1c:69:fd:f7:28:
9c:e3:7a:69:87:5b:db:06:83:0f:3f:e1:01:8d:1c:
a7:fc:46:cb:0c:aa:e6:6e:08:00:ab:49:81:e3:87:
6f:a1:3b:d1:81:73:7b:9c:19:a5:b9:11:37:8b:23:
b0:1e:2b:d3:5b:65:57:ee:cd:ec:96:e9:8b:84:c2:
cf:28:34:b2:b2:67:7e:87:bf:bc:34:b4:ef:7e:7e:
a0:40:da:5f:e8:fd:0f:81:9b:29:3e:79:36:a3:a7:
38:01:8b:15:3e:7c:91:fa:98:6b:4f:67:17:e0:9f:
81:b8:97:c9:11:c5:3b:0d:a5:ef:00:38:a5:c5:6c:
18:6b:86:dc:9f:1e:c7:55:c0:7d:48:07:6d:73:3d:
c7:80:c8:81:4a:8d:e5:c0:28:53:d8:75:ff:d2:c8:
be:61:d4:21:21:16:24:37:f5:a2:92:06:94:e3:06:
0a:8a:e9:9f:78:d7:c6:b9:57:62:45:c2:8c:42:42:
cb:b7:c6:00:5e:a8:d5:49:0d:1c:bf:d6:96:d7:2a:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:20:13:60:81:BE:19:3B:EC:AD:39:D8:10:11:61:D6:F5:5A:12
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3b:2d:e4:43:af:3a:45:92:da:55:ed:6f:4c:6e:bc:51:c9:
6a:a8:de:cd:55:4f:8d:b6:b9:69:1a:64:17:ec:fd:0f:62:a0:
f1:a9:4a:03:a0:6b:d1:05:fd:65:2e:15:10:19:03:d8:43:23:
93:21:7b:b6:c6:04:3b:24:56:f3:86:13:e1:0c:9a:41:e0:e9:
b0:81:5f:04:5f:5e:30:a1:06:c1:fa:41:fc:79:67:67:2c:a7:
95:28:d8:ab:4b:59:4a:e6:d7:27:63:55:31:dd:a1:1b:d1:cc:
5c:82:b4:7c:89:fa:4d:26:43:ed:93:63:dd:9f:66:f3:b1:fb:
e1:f5:86:27:b2:6c:16:00:77:75:6e:f5:97:f7:d4:76:d1:c2:
51:80:eb:60:09:b1:a4:df:e0:8f:7e:7b:6d:a0:7c:72:7b:15:
57:78:f0:74:0a:da:8c:b0:c4:82:bc:e9:8a:a2:62:44:f5:9c:
8f:4c:b5:e1:2f:ae:85:c4:90:fb:e6:a0:49:58:b7:3e:9a:0d:
a8:31:6a:de:84:60:64:c7:8d:c5:02:ea:56:65:a3:5d:2c:1b:
56:d9:ab:54:15:ab:55:77:41:0b:86:a3:7d:46:c3:67:84:a0:
dc:cc:08:9a:00:eb:d7:37:4b:9b:d7:7e:3b:a2:2d:80:56:63:
52:12:d5:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFv0PZvoBrjPjZVtBLb4txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0
ZTEzNDEwHhcNMjUwNzI2MDgwMDE5WhcNMjUwNzI3MDgwMDE5WjAzMTEwLwYDVQQD
EygyNmVlMjAxMzYwODFiZTE5M2JlY2FkMzlkODEwMTE2MWQ2ZjU1YTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5JqpN7CuBcVcDOx13TqTMVFkRT5
fdQT2t61eFAQlkLcuuKPbC9eHbkQaLZOmZQ6oNuBH6KPHGn99yic43pph1vbBoMP
P+EBjRyn/EbLDKrmbggAq0mB44dvoTvRgXN7nBmluRE3iyOwHivTW2VX7s3slumL
hMLPKDSysmd+h7+8NLTvfn6gQNpf6P0PgZspPnk2o6c4AYsVPnyR+phrT2cX4J+B
uJfJEcU7DaXvADilxWwYa4bcnx7HVcB9SAdtcz3HgMiBSo3lwChT2HX/0si+YdQh
IRYkN/WikgaU4wYKiumfeNfGuVdiRcKMQkLLt8YAXqjVSQ0cv9aW1yoO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbuIBNggb4ZO+ytOdgQEWHW9VoSMB8GA1UdIwQY
MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt
ZDNmNmNkOGU0NDQ0LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0
LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzst5EOv
OkWS2lXtb0xuvFHJaqjezVVPjba5aRpkF+z9D2Kg8alKA6Br0QX9ZS4VEBkD2EMj
kyF7tsYEOyRW84YT4QyaQeDpsIFfBF9eMKEGwfpB/HlnZyynlSjYq0tZSubXJ2NV
Md2hG9HMXIK0fIn6TSZD7ZNj3Z9m87H74fWGJ7JsFgB3dW71l/fUdtHCUYDrYAmx
pN/gj357baB8cnsVV3jwdArajLDEgrzpiqJiRPWcj0y14S+uhcSQ++agSVi3PpoN
qDFq3oRgZMeNxQLqVmWjXSwbVtmrVBWrVXdBC4ajfUbDZ4Sg3MwImgDr1zdLm9d+
O6ItgFZjUhLVCQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 16:29:41 2025 by rpki-client