Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: g5HdlC6hE166gDjE/cvuTM442M5UVZ4voE5ItWFHJnI=
Subject key identifier: CB:6D:A9:78:3E:1B:A0:09:D6:43:77:14:5F:3D:4C:2D:AC:BE:FA:33
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 01976094693C52D9A0FEA25B58B726018975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1014
Signing time: Wed 11 Jun 2025 20:00:28 +0000
Manifest this update: Wed 11 Jun 2025 20:00:28 +0000
Manifest next update: Thu 12 Jun 2025 20:00:28 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: LeEAS1MtKzhkaSFAQRtj84CDISuk85lPMoNuDWOaS/Q=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:69:3c:52:d9:a0:fe:a2:5b:58:b7:26:01:89:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jun 11 20:00:28 2025 GMT
Not After : Jun 12 20:00:28 2025 GMT
Subject: CN=cb6da9783e1ba009d64377145f3d4c2dacbefa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:0b:46:e2:0d:dd:ce:95:e7:bb:8b:27:91:
5d:2f:fa:43:13:f4:3e:13:d6:f7:ea:71:0b:b3:f4:
af:12:8a:55:f5:bb:b5:0d:7e:29:12:8f:99:a5:46:
9b:9c:e0:1a:37:3e:7c:21:63:d6:aa:4d:f8:54:e2:
01:dc:d8:43:51:d5:ac:ee:5c:f0:73:e8:20:11:95:
82:f4:07:d8:10:90:48:65:23:b6:aa:45:14:4d:02:
35:4b:95:aa:48:6e:1d:5c:5a:83:61:59:d3:db:b5:
6a:c2:c4:ac:21:88:e4:63:13:98:02:50:71:a5:c7:
4d:3d:1c:fa:09:b5:42:b9:ea:06:55:04:37:11:dd:
0b:48:8a:44:6b:81:de:4d:50:21:90:7a:96:2a:3b:
6d:b1:46:1a:90:33:91:39:66:15:e8:df:37:ec:37:
87:e0:c0:bd:ea:96:be:18:1c:8d:bb:69:8d:39:06:
cc:61:ff:ec:02:51:ee:40:e5:54:8b:a9:ea:14:e9:
92:97:d6:01:ec:9e:83:b3:7b:6c:28:ca:d8:21:25:
e3:d2:85:62:65:df:6c:2e:76:f1:ba:df:e5:98:92:
bd:ee:a1:b4:b8:0e:c6:a8:4c:a2:a9:42:73:fc:3a:
65:fb:c2:da:e6:ef:3b:93:1c:89:c4:61:ab:40:4c:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6D:A9:78:3E:1B:A0:09:D6:43:77:14:5F:3D:4C:2D:AC:BE:FA:33
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6f:b3:92:e2:a0:1c:dd:97:87:1e:fb:82:6a:bf:a5:6b:dd:
5f:21:65:b3:49:ac:ac:92:5b:c0:a5:37:40:a9:e8:8a:ad:2d:
ff:63:20:75:fa:b7:96:a5:aa:5d:6b:b6:8d:e4:ab:9b:4d:e0:
f9:b2:d0:e5:99:f2:25:85:5f:08:6c:df:11:71:2f:2b:85:04:
34:27:ef:08:bb:19:b2:8d:3d:40:04:14:57:9f:4b:e1:3a:ba:
8e:27:9a:f6:66:3d:2b:42:69:41:e2:30:4d:fa:6e:1e:49:72:
23:5f:e8:be:76:06:3a:9b:77:15:91:f7:d6:fb:36:05:19:36:
fa:58:c7:af:31:2c:a9:bb:68:a6:6f:48:b7:ec:72:6b:3c:02:
ca:2c:3e:ef:9c:d7:8f:67:41:19:6d:4f:a3:17:21:f4:11:a2:
f7:6f:ba:10:56:85:8c:90:f0:74:3d:2c:77:7c:9f:62:49:c0:
d9:92:2a:0e:76:29:97:04:97:14:e1:9d:95:ce:57:1b:c8:76:
ba:6a:00:74:1d:1c:1f:7d:6d:b6:dc:1c:6b:d6:de:21:ff:a4:
a1:13:b4:02:bc:8a:3e:1f:fd:6c:8e:1d:28:3d:90:b5:b0:1e:
28:0d:11:3d:d2:2d:03:79:77:69:8b:96:be:73:47:71:9d:d8:
ea:19:47:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdglGk8Utmg/qJbWLcmAYl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz
N2I0ZDAwHhcNMjUwNjExMjAwMDI4WhcNMjUwNjEyMjAwMDI4WjAzMTEwLwYDVQQD
EyhjYjZkYTk3ODNlMWJhMDA5ZDY0Mzc3MTQ1ZjNkNGMyZGFjYmVmYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwYLRuIN3c6V57uLJ5FdL/pDE/Q+
E9b36nELs/SvEopV9bu1DX4pEo+ZpUabnOAaNz58IWPWqk34VOIB3NhDUdWs7lzw
c+ggEZWC9AfYEJBIZSO2qkUUTQI1S5WqSG4dXFqDYVnT27VqwsSsIYjkYxOYAlBx
pcdNPRz6CbVCueoGVQQ3Ed0LSIpEa4HeTVAhkHqWKjttsUYakDOROWYV6N837DeH
4MC96pa+GByNu2mNOQbMYf/sAlHuQOVUi6nqFOmSl9YB7J6Ds3tsKMrYISXj0oVi
Zd9sLnbxut/lmJK97qG0uA7GqEyiqUJz/Dpl+8La5u87kxyJxGGrQEyplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMttqXg+G6AJ1kN3FF89TC2svvozMB8GA1UdIwQY
MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt
MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl
LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACm+zkuKg
HN2Xhx77gmq/pWvdXyFls0msrJJbwKU3QKnoiq0t/2Mgdfq3lqWqXWu2jeSrm03g
+bLQ5ZnyJYVfCGzfEXEvK4UENCfvCLsZso09QAQUV59L4Tq6jiea9mY9K0JpQeIw
TfpuHklyI1/ovnYGOpt3FZH31vs2BRk2+ljHrzEsqbtopm9It+xyazwCyiw+75zX
j2dBGW1Poxch9BGi92+6EFaFjJDwdD0sd3yfYknA2ZIqDnYplwSXFOGdlc5XG8h2
umoAdB0cH31tttwca9beIf+koRO0AryKPh/9bI4dKD2QtbAeKA0RPdItA3l3aYuW
vnNHcZ3Y6hlHPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 01:30:15 2025 by rpki-client