Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File: 7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier: RsaPvOyc7EN9s9ekb69ug5tEz3mBlaGRvmz7uhvDkcs=
Subject key identifier: 43:44:00:1C:74:4C:E0:58:BF:AD:BE:90:75:C5:65:90:DF:84:7A:8D
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 01974CD72F5802C2C037AD83CC5B6F917E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number: 11CC
Signing time: Sun 08 Jun 2025 00:01:00 +0000
Manifest this update: Sun 08 Jun 2025 00:01:00 +0000
Manifest next update: Mon 09 Jun 2025 00:01:00 +0000
Files and hashes: 1: 3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa (hash: b5E7fEkFFhTI5Qk+1okXO6TI7l2fiiznCI57htXMWcg=)
2: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: kofugYR+49EgkWYjXCzDJq6lhVr5/httL445ehUnMgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:2f:58:02:c2:c0:37:ad:83:cc:5b:6f:91:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Jun 8 00:01:00 2025 GMT
Not After : Jun 9 00:01:00 2025 GMT
Subject: CN=4344001c744ce058bfadbe9075c56590df847a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:0b:68:72:3b:b0:9e:cb:f5:f6:5c:e6:71:
c8:7e:ca:67:d2:78:36:ce:a2:30:39:73:4c:90:07:
a0:46:80:03:2a:18:ca:5b:90:6a:f8:1f:12:a6:dc:
30:81:26:b1:0e:d8:40:e3:89:3b:c6:82:55:3b:2a:
9c:da:1e:4a:c7:16:e0:f5:70:ac:2a:c7:77:75:3d:
4d:ab:e6:bf:28:71:8d:db:51:35:86:da:e3:83:3e:
c2:ce:37:bc:c1:8f:b5:06:15:40:d7:ef:81:e1:50:
b0:e9:7d:ab:a3:bb:52:6c:e3:85:dc:e8:19:95:fd:
41:45:e8:a5:bc:66:5f:0a:0a:ed:8d:5e:ea:cd:5e:
01:0f:9e:7e:49:21:b3:06:b3:a9:97:c4:7a:86:d3:
c9:e6:a5:2f:5f:75:1f:56:ad:a8:6d:80:b7:ef:2c:
46:c7:92:bd:68:97:ff:db:85:ff:2d:65:c4:40:98:
06:af:4f:d2:2a:b9:94:1c:ac:dd:88:e3:6a:24:11:
56:a9:97:84:c6:a6:57:42:61:b4:15:f0:c8:de:63:
a6:fd:73:88:02:6e:e4:cd:cd:13:ca:00:8e:60:06:
73:4a:8c:22:f5:db:87:3e:d4:1d:3e:79:60:f8:fd:
9e:5b:ed:78:b5:c6:0b:5c:1c:d7:0a:91:1e:cc:d8:
13:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:00:1C:74:4C:E0:58:BF:AD:BE:90:75:C5:65:90:DF:84:7A:8D
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:68:cb:0a:8c:f5:1c:0d:92:33:93:10:8c:f2:76:d4:96:
4a:f0:8a:15:32:d2:65:c4:0a:fa:55:60:68:a8:a7:c0:1c:37:
67:a7:5e:c4:7b:79:38:5f:65:fd:06:78:3c:3b:f5:43:be:50:
70:de:63:3c:1a:50:24:24:42:a7:5a:9a:e9:e9:5e:3f:95:29:
6f:fe:20:c6:ea:f0:e3:c4:d3:8c:74:93:b2:b7:3b:28:e7:5b:
73:78:9f:80:a9:2b:7d:cb:7f:b5:3b:b2:92:dd:22:5a:e0:76:
5a:5d:77:91:45:fc:9c:b4:fc:88:94:dc:61:96:d5:3a:84:b8:
fc:19:d7:a8:2b:67:c1:9c:51:74:ae:fe:2d:df:5c:11:17:e4:
a9:70:fc:86:da:77:ff:7d:fe:a0:8d:d4:b5:1e:b2:aa:7d:29:
95:ec:38:ac:e2:82:48:43:48:27:d7:d3:9b:64:e7:8b:59:d0:
78:ee:11:bc:71:5e:6a:19:5a:72:00:19:bb:19:af:71:b7:75:
af:28:68:36:3f:91:6a:3a:f1:43:60:05:30:1a:52:7d:fa:5b:
58:98:2a:5d:96:a8:10:b6:13:88:67:d1:42:20:5a:83:b2:e7:
0d:33:cc:7a:7b:b4:d0:19:61:43:5d:6d:11:ec:28:22:60:23:
97:f1:46:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1y9YAsLAN62DzFtvkX5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDczOWQwNTI4ZGNiNGZjZTU3OGQxMWY3ZWMzNGIwZTM3
NDUyY2YwHhcNMjUwNjA4MDAwMTAwWhcNMjUwNjA5MDAwMTAwWjAzMTEwLwYDVQQD
Eyg0MzQ0MDAxYzc0NGNlMDU4YmZhZGJlOTA3NWM1NjU5MGRmODQ3YThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUoLaHI7sJ7L9fZc5nHIfspn0ng2
zqIwOXNMkAegRoADKhjKW5Bq+B8SptwwgSaxDthA44k7xoJVOyqc2h5Kxxbg9XCs
Ksd3dT1Nq+a/KHGN21E1htrjgz7Czje8wY+1BhVA1++B4VCw6X2ro7tSbOOF3OgZ
lf1BReilvGZfCgrtjV7qzV4BD55+SSGzBrOpl8R6htPJ5qUvX3UfVq2obYC37yxG
x5K9aJf/24X/LWXEQJgGr0/SKrmUHKzdiONqJBFWqZeExqZXQmG0FfDI3mOm/XOI
Am7kzc0TygCOYAZzSowi9duHPtQdPnlg+P2eW+14tcYLXBzXCpEezNgTuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENEABx0TOBYv62+kHXFZZDfhHqNMB8GA1UdIwQY
MBaAFO4HOdBSjctPzleNEffsNLDjdFLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGIt
YjAzYzJmYmRjNjQ0LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84NTNlZTMtM2E0Zi00ZDk1LTliZGItYjAzYzJmYmRjNjQ0
LzEvN2djNTBGS055MF9PVjQwUjktdzBzT04wVXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJANoywqM
9RwNkjOTEIzydtSWSvCKFTLSZcQK+lVgaKinwBw3Z6dexHt5OF9l/QZ4PDv1Q75Q
cN5jPBpQJCRCp1qa6eleP5Upb/4gxurw48TTjHSTsrc7KOdbc3ifgKkrfct/tTuy
kt0iWuB2Wl13kUX8nLT8iJTcYZbVOoS4/BnXqCtnwZxRdK7+Ld9cERfkqXD8htp3
/33+oI3UtR6yqn0plew4rOKCSENIJ9fTm2Tni1nQeO4RvHFeahlacgAZuxmvcbd1
ryhoNj+RajrxQ2AFMBpSffpbWJgqXZaoELYTiGfRQiBag7LnDTPMenu00BlhQ11t
EewoImAjl/FGew==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:55 2025 by rpki-client