Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: lj4D9lxdimtufusUVRP4lik2JFk/jhpdUHCueHBqYsE=
Subject key identifier: 9A:7B:8F:94:1E:8F:82:1A:67:27:33:82:F7:00:2B:71:07:EF:E0:87
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019845F61DB8660C0D33DBA43B9630C82EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 11C7
Signing time: Sat 26 Jul 2025 09:00:13 +0000
Manifest this update: Sat 26 Jul 2025 09:00:13 +0000
Manifest next update: Sun 27 Jul 2025 09:00:13 +0000
Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: 2rxbQ9ezObHY6g1uDXvJa0j8fB4mH7VDF5/RDA8P8DI=)
3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:1d:b8:66:0c:0d:33:db:a4:3b:96:30:c8:2e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jul 26 09:00:13 2025 GMT
Not After : Jul 27 09:00:13 2025 GMT
Subject: CN=9a7b8f941e8f821a67273382f7002b7107efe087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:23:bc:9f:da:c9:a5:e0:49:66:2d:3e:3a:
21:57:ee:35:14:46:04:27:68:30:f8:cb:68:cf:0f:
71:06:1b:99:0b:ea:77:72:fb:c2:8a:0d:57:78:60:
13:1e:0f:6a:f6:2b:89:cf:e1:6d:a1:a4:42:ea:96:
92:ce:76:09:57:25:59:91:15:32:9e:79:8f:5b:ad:
d8:1a:66:14:41:9d:ae:a0:3a:c6:b9:9e:b2:b5:fe:
1e:85:08:8f:9b:32:fb:7e:7f:ca:59:18:37:58:a3:
ea:f3:12:7d:a3:d0:25:74:b5:a0:65:c0:23:e4:19:
37:e7:4c:af:3a:47:a2:3c:5f:1b:d2:75:1c:c2:ad:
3d:c3:66:3f:7c:bb:cb:67:cf:79:79:85:61:c2:24:
a3:12:75:07:c5:bf:3f:aa:49:d3:6a:4c:27:65:3a:
b2:1c:70:35:40:9b:96:e5:2f:0f:52:56:e2:e8:fe:
c2:2a:87:54:f2:3e:b9:8b:04:cf:19:69:07:10:71:
18:45:7b:2d:06:a6:e1:d6:51:4c:c1:fd:86:8d:bc:
52:6c:09:78:35:df:9a:f2:9d:5e:39:4c:52:2d:33:
b3:0a:f8:cb:bc:3e:5c:73:1b:e1:eb:ea:2b:a4:af:
55:50:f4:fc:bc:87:91:c4:81:35:58:e3:b9:4f:74:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:8F:94:1E:8F:82:1A:67:27:33:82:F7:00:2B:71:07:EF:E0:87
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:71:e4:85:e8:bb:e3:61:54:27:3c:9e:fb:b3:9a:b6:46:da:
ce:57:ac:e7:ec:7b:9b:8d:d1:a1:72:55:ca:58:d4:85:16:fe:
b3:de:bb:24:71:0c:c9:09:a9:4b:e0:8a:13:8c:4e:68:71:25:
ab:ca:ef:c2:61:57:cd:0b:0a:a7:49:b6:7e:09:24:d1:aa:44:
94:c2:b2:f2:bd:c1:08:b0:e1:eb:f3:4f:86:e6:4e:f8:02:3f:
d4:ee:fb:ca:66:e5:91:c3:f0:a8:d5:c9:09:88:73:ed:6f:b0:
b2:a8:f9:f1:ed:5e:92:42:00:e1:ba:31:cf:5f:16:a5:8e:01:
e0:0d:76:37:cc:96:bf:43:3d:a5:d3:6f:24:4b:7c:d8:49:49:
6f:d5:bc:af:2e:93:45:c2:6c:c1:10:a3:7a:8e:c6:27:9d:fc:
9e:e4:43:e8:fb:12:4e:76:9e:bb:bb:11:45:f2:98:d1:cf:72:
db:20:9a:34:6c:b5:4f:65:5d:c9:2e:a7:40:3c:e9:d6:1b:17:
82:07:9c:1b:d7:08:ae:8f:0a:4b:51:a9:06:24:92:5b:ec:94:
04:9e:a3:9e:3f:89:fd:71:be:30:32:bb:12:63:56:2d:b9:68:
03:1a:db:f1:27:fe:58:fe:7b:a0:9c:ed:6e:d0:9d:5e:3d:dc:
be:15:d8:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9h24ZgwNM9ukO5YwyC7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw
NWIwNDIwHhcNMjUwNzI2MDkwMDEzWhcNMjUwNzI3MDkwMDEzWjAzMTEwLwYDVQQD
Eyg5YTdiOGY5NDFlOGY4MjFhNjcyNzMzODJmNzAwMmI3MTA3ZWZlMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqojvJ/ayaXgSWYtPjohV+41FEYE
J2gw+Mtozw9xBhuZC+p3cvvCig1XeGATHg9q9iuJz+FtoaRC6paSznYJVyVZkRUy
nnmPW63YGmYUQZ2uoDrGuZ6ytf4ehQiPmzL7fn/KWRg3WKPq8xJ9o9AldLWgZcAj
5Bk350yvOkeiPF8b0nUcwq09w2Y/fLvLZ895eYVhwiSjEnUHxb8/qknTakwnZTqy
HHA1QJuW5S8PUlbi6P7CKodU8j65iwTPGWkHEHEYRXstBqbh1lFMwf2GjbxSbAl4
Nd+a8p1eOUxSLTOzCvjLvD5ccxvh6+orpK9VUPT8vIeRxIE1WOO5T3QTAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp7j5Qej4IaZyczgvcAK3EH7+CHMB8GA1UdIwQY
MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt
NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2
LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3Hkhei7
42FUJzye+7Oatkbazles5+x7m43RoXJVyljUhRb+s967JHEMyQmpS+CKE4xOaHEl
q8rvwmFXzQsKp0m2fgkk0apElMKy8r3BCLDh6/NPhuZO+AI/1O77ymblkcPwqNXJ
CYhz7W+wsqj58e1ekkIA4boxz18WpY4B4A12N8yWv0M9pdNvJEt82ElJb9W8ry6T
RcJswRCjeo7GJ538nuRD6PsSTnaeu7sRRfKY0c9y2yCaNGy1T2VdyS6nQDzp1hsX
ggecG9cIro8KS1GpBiSSW+yUBJ6jnj+J/XG+MDK7EmNWLbloAxrb8Sf+WP57oJzt
btCdXj3cvhXYuA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:44 2025 by rpki-client