
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: 4JkLXgyTjYGCiQrcYJl4Iz/oy3ag1j8g/wenLP9/r78=
Subject key identifier: C5:7F:20:96:98:C5:DC:2C:B5:D6:72:7D:44:E0:ED:E5:F4:6D:10:76
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 01974A7A7EB468A07D9DEBC144801ADB1015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:00:30 +0000
Manifest this update: Sat 07 Jun 2025 13:00:30 +0000
Manifest next update: Sun 08 Jun 2025 13:00:30 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: YHWZJukhAA83ZMf2nr0bs2dBIB/f27wZ/vO8a5CPA44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:7e:b4:68:a0:7d:9d:eb:c1:44:80:1a:db:10:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Jun 7 13:00:30 2025 GMT
Not After : Jun 8 13:00:30 2025 GMT
Subject: CN=c57f209698c5dc2cb5d6727d44e0ede5f46d1076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d2:8c:a7:17:00:f0:ff:54:90:90:4d:eb:2c:
68:12:a3:d9:49:c1:6c:47:ef:e8:14:6f:e5:e0:22:
13:6b:46:7d:a7:86:c0:bc:09:d7:c1:d5:f6:24:c4:
d3:30:7f:e3:83:04:8c:1e:62:cd:00:52:cb:5a:bd:
b5:87:59:28:ed:b2:5f:02:a8:53:ff:ea:9c:c6:26:
44:6d:d5:06:4d:a3:b9:80:29:38:f3:67:f8:35:60:
57:3d:1b:51:ba:f3:8e:37:17:76:ff:6d:fe:db:49:
28:14:2a:ca:0e:ed:a6:3c:d1:58:97:52:82:76:7b:
ef:1f:09:1a:0e:56:59:26:fb:98:40:8b:c1:66:24:
37:5f:1f:6b:ef:39:2e:7e:1f:f0:5b:d5:1f:c6:6e:
f2:f0:87:e4:f1:d3:a1:44:44:9e:f0:f3:ee:03:64:
a4:de:5e:2c:8b:2c:32:59:67:ef:1e:a9:85:4d:7e:
c1:2f:ed:a1:68:66:a6:92:e5:d2:c3:a6:46:bb:14:
4e:a7:c9:6a:45:58:07:be:16:12:47:12:34:e0:3c:
55:49:af:fc:c5:2f:48:27:bc:2e:fd:dc:7b:cf:70:
b4:1d:3f:72:a4:1d:c7:0d:f3:38:2f:1f:31:e8:74:
de:44:ae:1f:3b:ae:40:7c:ec:c1:29:e3:16:b5:90:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:20:96:98:C5:DC:2C:B5:D6:72:7D:44:E0:ED:E5:F4:6D:10:76
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6d:a2:80:2e:92:8a:a5:95:53:61:ef:1a:9d:8f:cd:46:5d:
2e:80:1b:2f:df:3d:32:49:4a:bb:8e:55:bb:da:7b:b3:55:09:
65:78:7b:ea:6d:d5:2f:84:e0:79:a6:95:e1:74:15:aa:2e:8a:
44:9e:f7:12:74:01:c5:9f:77:42:09:ff:6c:c6:be:6c:08:05:
3b:9c:22:82:dd:22:ac:2e:d0:e1:b0:d0:9f:87:d7:2b:9c:4e:
b5:4e:37:7f:d6:09:b5:9d:20:99:48:9e:68:98:d0:25:bc:f9:
c5:ce:76:0f:e9:f4:8e:5c:4f:a6:bd:d5:c9:14:d3:2d:92:27:
86:0d:a3:ca:d3:0d:b1:9b:18:29:de:8a:d5:66:e6:0f:e2:2c:
4e:85:b6:85:a2:98:5c:7c:25:41:63:eb:0f:79:a3:05:1f:9e:
02:8a:ac:08:3d:07:cd:58:fc:5c:cc:4a:a9:63:c7:f4:85:25:
f9:5a:e5:0a:c3:df:3f:e3:ad:d6:7b:b1:00:4c:30:cf:2e:89:
68:dc:d9:61:2b:05:9f:11:3c:de:a1:41:9a:90:a3:f6:6a:ef:
a3:f6:46:5d:3b:03:06:6c:a6:9e:df:14:41:b1:a0:da:fe:93:
de:6d:d4:27:10:d5:33:b8:95:fa:e9:8b:87:d1:93:ae:e8:48:
a4:ab:2b:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKen60aKB9nevBRIAa2xAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDUxYmYxZTJhNTMwMDBiYzIzMDYwNTYwZjJjYzBiMzlk
NDk2ZWYwHhcNMjUwNjA3MTMwMDMwWhcNMjUwNjA4MTMwMDMwWjAzMTEwLwYDVQQD
EyhjNTdmMjA5Njk4YzVkYzJjYjVkNjcyN2Q0NGUwZWRlNWY0NmQxMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tKMpxcA8P9UkJBN6yxoEqPZScFs
R+/oFG/l4CITa0Z9p4bAvAnXwdX2JMTTMH/jgwSMHmLNAFLLWr21h1ko7bJfAqhT
/+qcxiZEbdUGTaO5gCk482f4NWBXPRtRuvOONxd2/23+20koFCrKDu2mPNFYl1KC
dnvvHwkaDlZZJvuYQIvBZiQ3Xx9r7zkufh/wW9Ufxm7y8Ifk8dOhRESe8PPuA2Sk
3l4siywyWWfvHqmFTX7BL+2haGamkuXSw6ZGuxROp8lqRVgHvhYSRxI04DxVSa/8
xS9IJ7wu/dx7z3C0HT9ypB3HDfM4Lx8x6HTeRK4fO65AfOzBKeMWtZBr7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV/IJaYxdwstdZyfUTg7eX0bRB2MB8GA1UdIwQY
MBaAFO3VG/HipTAAvCMGBWDyzAs51JbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEt
Yzc1N2IxNWYxY2NmLzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEtYzc1N2IxNWYxY2Nm
LzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzG2igC6S
iqWVU2HvGp2PzUZdLoAbL989MklKu45Vu9p7s1UJZXh76m3VL4TgeaaV4XQVqi6K
RJ73EnQBxZ93Qgn/bMa+bAgFO5wigt0irC7Q4bDQn4fXK5xOtU43f9YJtZ0gmUie
aJjQJbz5xc52D+n0jlxPpr3VyRTTLZInhg2jytMNsZsYKd6K1WbmD+IsToW2haKY
XHwlQWPrD3mjBR+eAoqsCD0HzVj8XMxKqWPH9IUl+VrlCsPfP+Ot1nuxAEwwzy6J
aNzZYSsFnxE83qFBmpCj9mrvo/ZGXTsDBmymnt8UQbGg2v6T3m3UJxDVM7iV+umL
h9GTruhIpKsrHg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:39 2025 by rpki-client