Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: 461Q+DZVGNqFdJiEKLPYnKzcZREXEO1pjRZyqcMYXtw=
Subject key identifier: 4F:EE:44:DB:3D:CA:9E:EB:7A:DE:66:D6:46:C3:44:A8:F1:DD:BF:C5
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0197684E7063D2AE5D0A9368CC7DBD202E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1018
Signing time: Fri 13 Jun 2025 08:01:00 +0000
Manifest this update: Fri 13 Jun 2025 08:01:00 +0000
Manifest next update: Sat 14 Jun 2025 08:01:00 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: yPSz5MoS1WZttNyvTCoYvPHS5szSEOY9ACwfF8VGHlM=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:70:63:d2:ae:5d:0a:93:68:cc:7d:bd:20:2e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jun 13 08:01:00 2025 GMT
Not After : Jun 14 08:01:00 2025 GMT
Subject: CN=4fee44db3dca9eeb7ade66d646c344a8f1ddbfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:96:a9:48:00:f0:7b:1f:96:3e:85:4e:9d:
ed:83:f4:69:5f:f3:d9:e8:cc:14:0d:68:04:8c:c6:
4e:5a:bc:cd:b8:b4:8e:8e:40:1a:01:f0:2d:2a:72:
44:f4:2d:04:ec:7f:1e:34:e5:d6:ec:53:29:89:8e:
a1:ce:40:af:d4:c1:a4:ce:48:b3:6e:29:7e:55:4c:
ea:01:f0:58:90:61:0f:e3:be:54:41:02:ab:d6:16:
ee:20:a6:af:e4:1a:c7:f7:ac:49:71:0a:66:73:55:
2f:05:9f:22:21:04:21:00:5e:24:85:b6:a6:a8:21:
ed:c4:d1:56:54:46:ee:92:e8:8a:6d:31:86:9e:09:
bb:d5:77:2b:b4:db:ef:90:c8:2a:3f:ee:dc:a0:87:
21:4d:2a:fe:c4:9e:6f:fa:7d:f0:25:64:65:e2:ed:
a2:66:0c:7e:60:01:8a:c7:3d:f2:3b:ff:38:f2:73:
ad:22:36:8c:b8:fc:f9:f9:1e:57:ff:2f:a8:d4:5b:
f0:7e:4d:66:ec:f4:9d:9f:f8:a2:5d:29:d6:72:49:
0f:83:9d:ab:89:a0:8d:d7:93:95:b5:0e:40:5d:5b:
88:70:eb:0a:3a:d0:40:92:b3:77:ce:d6:9c:73:36:
a7:58:06:d4:d6:7e:f3:98:6e:5c:94:b4:58:aa:fc:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:44:DB:3D:CA:9E:EB:7A:DE:66:D6:46:C3:44:A8:F1:DD:BF:C5
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:84:c3:33:15:73:a7:da:71:8c:23:d8:ae:48:b7:e5:c3:
2b:88:4a:a4:06:01:49:7b:80:d5:e8:af:aa:9f:0a:65:e3:ac:
1f:82:64:df:08:8b:a3:67:4d:fd:ac:01:07:69:37:93:db:4a:
f5:c4:bc:b9:21:01:9b:13:d2:8f:6f:7c:4e:23:30:ab:49:ec:
af:df:69:81:b1:75:92:54:d5:29:cc:22:82:1a:63:62:dc:b1:
e6:09:0e:a7:06:5a:76:5e:cd:cd:92:86:06:ee:1e:00:68:f8:
e8:6f:0d:36:80:40:bd:b4:1b:30:a8:50:bd:26:f4:74:cd:ec:
4a:bb:56:19:1e:8e:78:fc:26:5d:47:d1:da:d0:79:3c:2c:c1:
31:3e:26:c2:23:3a:a6:8c:5a:cb:c5:d6:ac:31:cc:5f:35:89:
1f:1b:58:5a:8b:83:bb:2e:39:e0:35:ad:4f:f7:7b:95:35:94:
b9:bf:af:c9:86:52:07:62:de:bc:84:e2:b0:cd:7d:49:93:a9:
9a:5f:99:b0:5a:97:c5:0c:47:9b:6d:bb:24:12:fe:a7:de:52:
b1:3f:42:96:b6:91:60:cf:9a:8a:68:3f:f2:2f:74:c5:ae:63:
53:98:0b:f8:64:11:4b:fe:24:d7:13:ea:9e:fa:a8:bd:19:55:
d6:62:17:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTnBj0q5dCpNozH29IC5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz
N2I0ZDAwHhcNMjUwNjEzMDgwMTAwWhcNMjUwNjE0MDgwMTAwWjAzMTEwLwYDVQQD
Eyg0ZmVlNDRkYjNkY2E5ZWViN2FkZTY2ZDY0NmMzNDRhOGYxZGRiZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55KWqUgA8Hsflj6FTp3tg/RpX/PZ
6MwUDWgEjMZOWrzNuLSOjkAaAfAtKnJE9C0E7H8eNOXW7FMpiY6hzkCv1MGkzkiz
bil+VUzqAfBYkGEP475UQQKr1hbuIKav5BrH96xJcQpmc1UvBZ8iIQQhAF4khbam
qCHtxNFWVEbukuiKbTGGngm71XcrtNvvkMgqP+7coIchTSr+xJ5v+n3wJWRl4u2i
Zgx+YAGKxz3yO/848nOtIjaMuPz5+R5X/y+o1Fvwfk1m7PSdn/iiXSnWckkPg52r
iaCN15OVtQ5AXVuIcOsKOtBAkrN3ztacczanWAbU1n7zmG5clLRYqvyxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/uRNs9yp7ret5m1kbDRKjx3b/FMB8GA1UdIwQY
MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt
MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl
LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVuEwzMV
c6facYwj2K5It+XDK4hKpAYBSXuA1eivqp8KZeOsH4Jk3wiLo2dN/awBB2k3k9tK
9cS8uSEBmxPSj298TiMwq0nsr99pgbF1klTVKcwighpjYtyx5gkOpwZadl7NzZKG
Bu4eAGj46G8NNoBAvbQbMKhQvSb0dM3sSrtWGR6OePwmXUfR2tB5PCzBMT4mwiM6
poxay8XWrDHMXzWJHxtYWouDuy454DWtT/d7lTWUub+vyYZSB2LevITisM19SZOp
ml+ZsFqXxQxHm227JBL+p95SsT9ClraRYM+aimg/8i90xa5jU5gL+GQRS/4k1xPq
nvqovRlV1mIXsA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 13:45:36 2025 by rpki-client