Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File: 7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier: fQGSvSJcR86vgYmnSuZ9YPEs0PN476m2C9tGy798Hhk=
Subject key identifier: 9C:86:76:96:81:00:C3:3A:C5:10:41:9C:B0:84:51:F4:47:A4:E7:25
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer: /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial: 019921E7F12A0CB4124A1AECCBA13B2213D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number: 05CD
Signing time: Sun 07 Sep 2025 02:01:12 +0000
Manifest this update: Sun 07 Sep 2025 02:01:12 +0000
Manifest next update: Mon 08 Sep 2025 02:01:12 +0000
Files and hashes: 1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: joqwWe2QdhW0sAsIpVKf+EBJdiTCgm8wNXCpWcC0ack=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:f1:2a:0c:b4:12:4a:1a:ec:cb:a1:3b:22:13:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Validity
Not Before: Sep 7 02:01:12 2025 GMT
Not After : Sep 8 02:01:12 2025 GMT
Subject: CN=9c8676968100c33ac510419cb08451f447a4e725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:81:aa:7d:98:26:54:96:20:db:a2:47:d1:
93:18:6c:a0:3d:a9:d4:f7:e5:da:cc:ed:68:d3:dc:
aa:0c:a8:fc:8f:b1:20:4c:67:2a:43:49:9c:f3:45:
33:de:d5:d7:d2:e2:94:bb:fc:bb:1a:67:22:93:e7:
a4:7a:23:ca:dd:7e:6b:73:dc:73:7a:ca:a8:24:84:
99:3e:b0:56:50:84:4e:54:d1:44:65:1d:b8:85:59:
77:f5:33:72:d0:eb:ba:63:46:9e:04:02:09:22:90:
b1:77:92:6b:1f:84:51:e3:49:43:1a:96:3b:22:34:
0a:d7:c0:a3:4f:e2:8d:b0:95:73:9b:3c:a7:ec:8a:
1d:03:71:d3:83:eb:b1:09:60:fb:cc:c1:cb:af:aa:
cf:9a:2b:3b:07:f7:2e:c0:38:f5:3a:60:a6:c3:eb:
32:1d:14:1e:26:fc:84:e1:b9:94:23:13:fb:4d:77:
e9:26:43:cb:5d:5c:47:84:fc:a1:31:1a:aa:9a:ae:
80:42:d9:08:82:56:22:bd:b3:41:69:d3:55:59:2c:
92:41:0a:47:84:e1:b2:51:f9:72:d5:77:d6:be:37:
3b:62:8e:28:22:e5:fa:9d:84:2e:3d:8e:fa:10:e6:
35:94:21:5f:2d:28:1f:89:7b:18:0c:fa:19:99:48:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:76:96:81:00:C3:3A:C5:10:41:9C:B0:84:51:F4:47:A4:E7:25
X509v3 Authority Key Identifier:
keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:94:5b:33:7d:a3:49:2b:c0:34:36:42:c0:cd:2c:9b:7b:c1:
e3:02:5a:6e:31:47:23:a2:3d:b4:88:ba:84:d0:f0:b8:2d:ee:
2b:20:89:e1:bd:56:23:d7:a6:12:7a:80:58:8b:7e:60:38:2b:
1d:6e:cb:7c:38:7b:1b:9a:a8:d4:6d:7d:c0:43:4f:85:86:65:
3b:b8:75:a3:a5:f0:80:f1:2c:e0:80:95:95:33:3f:e5:ac:82:
75:52:7f:91:fc:75:47:29:84:fc:30:13:e4:5e:7c:ae:bc:ae:
c4:32:47:02:b8:ca:54:f9:a3:89:5a:03:ae:c5:4b:1f:f5:2e:
20:5a:15:35:7e:c5:e2:0e:13:e2:ef:d2:a8:46:23:f5:71:74:
82:48:dc:4b:c9:f6:64:2a:b6:d4:c7:bb:11:a1:4f:d8:81:5c:
00:fb:cd:61:4a:5c:34:82:4e:7a:db:31:a3:87:ea:2c:23:78:
db:25:8b:90:9d:b1:75:85:59:61:0f:07:43:22:4d:8c:c2:ca:
f3:50:2d:45:04:5a:33:30:21:d1:91:b3:0f:f7:37:b4:67:fb:
8a:5b:a6:3f:67:9f:c0:97:09:ae:7b:ff:48:de:2b:c5:ab:31:
89:23:51:0f:19:c9:c2:b1:b3:36:21:48:60:07:af:c1:b5:b8:
e4:d2:2a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5/EqDLQSShrsy6E7IhPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDI5NDQ3OTQ1OTE4MjQ1OWMxNWQ4Y2EwMTBhOGE3ZjQ3
ZjgwYzgwHhcNMjUwOTA3MDIwMTEyWhcNMjUwOTA4MDIwMTEyWjAzMTEwLwYDVQQD
Eyg5Yzg2NzY5NjgxMDBjMzNhYzUxMDQxOWNiMDg0NTFmNDQ3YTRlNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj6Bqn2YJlSWINuiR9GTGGygPanU
9+XazO1o09yqDKj8j7EgTGcqQ0mc80Uz3tXX0uKUu/y7Gmcik+ekeiPK3X5rc9xz
esqoJISZPrBWUIROVNFEZR24hVl39TNy0Ou6Y0aeBAIJIpCxd5JrH4RR40lDGpY7
IjQK18CjT+KNsJVzmzyn7IodA3HTg+uxCWD7zMHLr6rPmis7B/cuwDj1OmCmw+sy
HRQeJvyE4bmUIxP7TXfpJkPLXVxHhPyhMRqqmq6AQtkIglYivbNBadNVWSySQQpH
hOGyUfly1XfWvjc7Yo4oIuX6nYQuPY76EOY1lCFfLSgfiXsYDPoZmUjECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyGdpaBAMM6xRBBnLCEUfRHpOclMB8GA1UdIwQY
MBaAFO8ClEeUWRgkWcFdjKAQqKf0f4DIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAt
MDQ3YmEwZTYyZGU0LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAtMDQ3YmEwZTYyZGU0
LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5RbM32j
SSvANDZCwM0sm3vB4wJabjFHI6I9tIi6hNDwuC3uKyCJ4b1WI9emEnqAWIt+YDgr
HW7LfDh7G5qo1G19wENPhYZlO7h1o6XwgPEs4ICVlTM/5ayCdVJ/kfx1RymE/DAT
5F58rryuxDJHArjKVPmjiVoDrsVLH/UuIFoVNX7F4g4T4u/SqEYj9XF0gkjcS8n2
ZCq21Me7EaFP2IFcAPvNYUpcNIJOetsxo4fqLCN42yWLkJ2xdYVZYQ8HQyJNjMLK
81AtRQRaMzAh0ZGzD/c3tGf7ilumP2efwJcJrnv/SN4rxasxiSNRDxnJwrGzNiFI
YAevwbW45NIqIA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:07 2025 by rpki-client