Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: yG5vPQBgWGcwvByHML8dtb6O6JeTHmNNbS5Ze+XUEP0=
Subject key identifier: BE:06:44:B9:D2:25:58:2D:6D:C3:15:B9:E2:09:C5:CC:4B:F1:89:62
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 01974DB2993ED57F7B7007A8CEE92F18F194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 1589
Signing time: Sun 08 Jun 2025 04:00:39 +0000
Manifest this update: Sun 08 Jun 2025 04:00:39 +0000
Manifest next update: Mon 09 Jun 2025 04:00:39 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: y0ssDCvM9LbYipuLKiXKhm4WdoY21GQjuWCmW8ARzp0=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:99:3e:d5:7f:7b:70:07:a8:ce:e9:2f:18:f1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Jun 8 04:00:39 2025 GMT
Not After : Jun 9 04:00:39 2025 GMT
Subject: CN=be0644b9d225582d6dc315b9e209c5cc4bf18962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:96:e2:df:fd:c5:e3:a4:b0:df:6b:2d:49:e3:
8b:0b:5a:8d:72:19:8e:bb:19:2c:0f:09:eb:cc:5a:
e3:d3:88:97:01:4e:98:85:3a:df:e8:b1:59:33:90:
11:6b:df:18:48:c4:bf:dd:62:7e:f3:0c:c1:c2:b1:
93:10:d9:97:29:99:fc:ad:9b:91:1f:60:f8:1c:1d:
c3:e2:c4:e9:4f:e9:2f:8a:cc:90:79:ab:08:38:5c:
67:ec:16:d7:bc:dd:10:3f:49:a4:64:d4:35:78:62:
bd:c2:81:ec:0f:3d:36:27:fa:20:5d:f0:3b:08:c4:
25:29:19:b6:52:bf:04:58:13:aa:5b:c3:02:e0:7f:
15:93:12:11:29:38:11:fb:3f:e8:57:74:27:f5:7e:
49:94:50:c4:fa:ab:0b:48:fc:29:17:d1:6f:af:8c:
d0:05:37:a9:44:82:7a:11:dc:89:3f:28:62:cc:d5:
93:e7:a8:ea:ac:37:3d:2c:53:88:26:2b:c0:71:2a:
9a:55:b1:fc:8c:d6:fe:be:87:ed:ef:49:03:7b:f6:
5d:85:43:c7:d2:7d:1f:5b:53:28:34:e6:fa:5d:7a:
16:89:e9:65:b0:cf:05:49:d6:87:05:53:0a:4f:66:
fe:5d:8c:2f:6a:6f:05:12:7c:15:dd:ac:14:ad:b8:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:06:44:B9:D2:25:58:2D:6D:C3:15:B9:E2:09:C5:CC:4B:F1:89:62
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8a:f5:f8:18:96:c1:51:9c:bc:12:51:5e:4f:62:80:57:57:
de:e6:7b:36:c7:5f:60:74:3e:e2:c4:de:e5:01:1b:3f:fe:6e:
e6:ab:b7:23:ee:7a:16:9e:12:95:d7:5f:8e:ee:73:ff:30:53:
4a:2c:ed:7a:f7:b9:33:fd:df:1b:bd:fc:6d:ec:a5:bf:49:de:
16:a7:d2:e1:fe:d0:8e:ac:1e:16:c1:81:49:74:6d:f1:d3:24:
99:4e:8c:3a:bc:01:ed:f8:7a:42:11:5e:7f:5c:9a:f1:47:a6:
8b:ff:ba:82:af:57:bd:f3:d3:43:e6:37:7c:49:69:38:98:2f:
80:f5:95:f4:07:87:d2:c3:2a:e5:9a:ed:1d:9a:39:56:97:68:
62:49:2b:b6:8f:58:7d:96:33:f6:b0:3f:3f:4e:af:3b:80:27:
3f:6d:17:7e:87:e9:8e:50:43:13:36:44:01:fa:a1:2b:7d:31:
88:e0:f4:e8:c9:44:d3:b7:e7:f9:d8:02:63:10:99:ae:66:63:
61:c3:1d:e5:6a:24:bc:a0:95:2b:c4:4d:cf:d3:3b:b0:98:51:
29:02:28:78:19:d7:2f:fb:81:ee:ee:73:a7:9a:18:65:69:c7:
c9:bd:05:b2:43:c1:6c:1d:26:48:02:22:b5:e7:eb:0a:23:46:
a4:45:77:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNspk+1X97cAeozukvGPGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3
MjEwZTUwHhcNMjUwNjA4MDQwMDM5WhcNMjUwNjA5MDQwMDM5WjAzMTEwLwYDVQQD
EyhiZTA2NDRiOWQyMjU1ODJkNmRjMzE1YjllMjA5YzVjYzRiZjE4OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Zbi3/3F46Sw32stSeOLC1qNchmO
uxksDwnrzFrj04iXAU6YhTrf6LFZM5ARa98YSMS/3WJ+8wzBwrGTENmXKZn8rZuR
H2D4HB3D4sTpT+kvisyQeasIOFxn7BbXvN0QP0mkZNQ1eGK9woHsDz02J/ogXfA7
CMQlKRm2Ur8EWBOqW8MC4H8VkxIRKTgR+z/oV3Qn9X5JlFDE+qsLSPwpF9Fvr4zQ
BTepRIJ6EdyJPyhizNWT56jqrDc9LFOIJivAcSqaVbH8jNb+voft70kDe/ZdhUPH
0n0fW1MoNOb6XXoWiellsM8FSdaHBVMKT2b+XYwvam8FEnwV3awUrbjyCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4GRLnSJVgtbcMVueIJxcxL8YliMB8GA1UdIwQY
MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt
YWIyY2U5NGMxNDIzLzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz
LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYr1+BiW
wVGcvBJRXk9igFdX3uZ7NsdfYHQ+4sTe5QEbP/5u5qu3I+56Fp4Slddfju5z/zBT
Sizteve5M/3fG738beylv0neFqfS4f7QjqweFsGBSXRt8dMkmU6MOrwB7fh6QhFe
f1ya8Uemi/+6gq9XvfPTQ+Y3fElpOJgvgPWV9AeH0sMq5ZrtHZo5VpdoYkkrto9Y
fZYz9rA/P06vO4AnP20XfofpjlBDEzZEAfqhK30xiOD06MlE07fn+dgCYxCZrmZj
YcMd5WokvKCVK8RNz9M7sJhRKQIoeBnXL/uB7u5zp5oYZWnHyb0FskPBbB0mSAIi
tefrCiNGpEV37g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:17:15 2025 by rpki-client