Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: 8C8imNYCq5d4Mg1yq5t48fQl5HdG96k3e6dW7HsPSKo=
Subject key identifier: AE:0F:37:38:F1:BC:B4:FE:BA:F5:E4:E4:A0:CA:E4:3C:10:5B:A7:BE
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 01974A435BA1CA369915A75AC5CE5B54BDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0BFD
Signing time: Sat 07 Jun 2025 12:00:17 +0000
Manifest this update: Sat 07 Jun 2025 12:00:17 +0000
Manifest next update: Sun 08 Jun 2025 12:00:17 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: uiCtUgOcLOYIpGLP2zvDbZkmMxwQ230EdXy1klm9IIo=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:5b:a1:ca:36:99:15:a7:5a:c5:ce:5b:54:bd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Jun 7 12:00:17 2025 GMT
Not After : Jun 8 12:00:17 2025 GMT
Subject: CN=ae0f3738f1bcb4febaf5e4e4a0cae43c105ba7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:7d:34:c8:d9:97:7f:e7:f0:bb:86:45:20:
62:88:71:66:9e:e4:56:6e:5b:74:98:e6:51:3e:60:
29:70:10:6e:e0:50:e4:6d:e0:b2:b4:05:44:41:ea:
ad:fe:c8:8c:23:16:7f:43:49:7a:1c:d4:9d:bd:d0:
46:be:fa:d2:e2:fe:93:f0:ab:87:a4:aa:76:6b:09:
5f:bd:c7:83:4f:60:e0:e6:81:ae:0a:f3:3f:5d:ae:
73:6f:1e:d7:9d:9a:67:7d:a9:de:2e:2a:b7:ef:b0:
43:80:d8:7e:d2:34:59:6e:67:6d:6c:9b:36:11:31:
4c:09:9c:86:ef:95:59:2d:60:a7:08:bb:fb:6a:ab:
e2:69:00:37:dc:90:12:96:4d:e2:d5:97:84:33:3c:
32:37:aa:55:b3:52:97:f9:d7:5d:d0:81:d5:2d:4b:
38:82:7f:69:ac:03:31:74:73:ed:d6:85:cf:7a:9f:
67:ec:de:d1:7f:67:3a:1a:68:27:6a:dc:09:96:50:
26:12:67:35:83:38:4b:88:a8:fd:c0:3a:4c:8f:7a:
60:fe:4f:21:31:4e:7a:1d:d1:55:e0:2c:ae:e0:b8:
e6:51:ac:93:25:04:c6:d3:8e:9f:1c:74:1f:37:a8:
2c:bf:fb:04:ee:bc:ed:25:48:d2:f9:e1:f9:25:63:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0F:37:38:F1:BC:B4:FE:BA:F5:E4:E4:A0:CA:E4:3C:10:5B:A7:BE
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ff:80:d0:a8:c0:c8:a3:95:7f:e5:11:c2:3f:a1:20:0d:3c:
6c:ee:1c:01:5d:bd:3d:17:18:a5:8a:de:b4:52:13:7b:5b:a7:
04:68:51:ce:35:38:75:9f:1d:7f:9c:0f:f6:35:fd:8e:f9:38:
ac:81:59:77:37:20:e9:3f:8e:b4:5b:a7:f3:d5:ce:87:66:1d:
76:6a:80:55:1f:ff:10:cb:9c:5c:49:c4:b1:f5:44:ce:89:97:
6a:0a:98:66:a4:07:6d:2e:6d:f6:8d:dc:07:c0:81:78:c1:41:
a7:73:4d:ac:b2:6c:d5:30:e4:b9:cb:1f:dc:39:89:97:a0:03:
27:8c:09:a8:12:41:f2:ff:df:ab:6d:ee:fa:94:77:e7:72:26:
b4:5c:4a:3f:d8:4b:d6:9d:21:e3:f4:4c:7d:8a:51:cc:d3:45:
c8:87:fe:51:1a:b2:65:3b:08:67:ee:73:fb:6e:60:3b:3b:b1:
cb:7f:01:fc:2e:f3:d1:5a:4d:64:e9:65:58:93:fe:62:52:1c:
f2:5c:97:f5:6b:41:12:5c:e4:0c:ae:3c:47:47:01:c1:5c:7a:
47:58:62:91:92:af:0c:71:78:7f:74:a3:37:db:f0:77:93:0a:
9f:0f:37:bc:2b:cf:0b:b5:34:20:f0:84:4b:0a:72:f8:22:0b:
b2:a5:ff:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ1uhyjaZFadaxc5bVL28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGRkZjgyMTIwOGEzNzBlM2E1YjdlZjhjZDQ3OTdjZmM1
Nzc0ODIwHhcNMjUwNjA3MTIwMDE3WhcNMjUwNjA4MTIwMDE3WjAzMTEwLwYDVQQD
EyhhZTBmMzczOGYxYmNiNGZlYmFmNWU0ZTRhMGNhZTQzYzEwNWJhN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+h9NMjZl3/n8LuGRSBiiHFmnuRW
blt0mOZRPmApcBBu4FDkbeCytAVEQeqt/siMIxZ/Q0l6HNSdvdBGvvrS4v6T8KuH
pKp2awlfvceDT2Dg5oGuCvM/Xa5zbx7XnZpnfaneLiq377BDgNh+0jRZbmdtbJs2
ETFMCZyG75VZLWCnCLv7aqviaQA33JASlk3i1ZeEMzwyN6pVs1KX+ddd0IHVLUs4
gn9prAMxdHPt1oXPep9n7N7Rf2c6GmgnatwJllAmEmc1gzhLiKj9wDpMj3pg/k8h
MU56HdFV4Cyu4LjmUayTJQTG046fHHQfN6gsv/sE7rztJUjS+eH5JWNQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4PNzjxvLT+uvXk5KDK5DwQW6e+MB8GA1UdIwQY
MBaAFO2N34ISCKNw46W374zUeXz8V3SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMt
ZTlkODFlM2Q4YjU0LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMtZTlkODFlM2Q4YjU0
LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf+A0KjA
yKOVf+URwj+hIA08bO4cAV29PRcYpYretFITe1unBGhRzjU4dZ8df5wP9jX9jvk4
rIFZdzcg6T+OtFun89XOh2YddmqAVR//EMucXEnEsfVEzomXagqYZqQHbS5t9o3c
B8CBeMFBp3NNrLJs1TDkucsf3DmJl6ADJ4wJqBJB8v/fq23u+pR353ImtFxKP9hL
1p0h4/RMfYpRzNNFyIf+URqyZTsIZ+5z+25gOzuxy38B/C7z0VpNZOllWJP+YlIc
8lyX9WtBElzkDK48R0cBwVx6R1hikZKvDHF4f3SjN9vwd5MKnw83vCvPC7U0IPCE
Swpy+CILsqX/oA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:14 2025 by rpki-client