Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: bs/w5RV4aok/nOMtHBU6MJ20VbUk2+wO43rYMQQRmXI=
Subject key identifier: 5C:4D:96:67:F7:78:E1:51:8F:5F:26:A1:51:FF:3A:B5:57:A0:B7:49
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 019752A25DA5443A4CF74DB4FD450DE9D7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 06EC
Signing time: Mon 09 Jun 2025 03:01:01 +0000
Manifest this update: Mon 09 Jun 2025 03:01:01 +0000
Manifest next update: Tue 10 Jun 2025 03:01:01 +0000
Files and hashes: 1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: 0EXBecEXS/7VxM0sLbQZ2tbRqKdMmxISCmJOpKdZ9TA=)
2: Kq5xAZANKOfKwGgabwcEpDAlttw.roa (hash: gZrCab7OfKcDgXrji1r5JrFbiZW+bpKbWNRFXqaDbXg=)
3: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:5d:a5:44:3a:4c:f7:4d:b4:fd:45:0d:e9:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Jun 9 03:01:01 2025 GMT
Not After : Jun 10 03:01:01 2025 GMT
Subject: CN=5c4d9667f778e1518f5f26a151ff3ab557a0b749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:ce:28:e4:9f:2c:44:f1:82:ea:23:cf:01:
cb:c3:b2:66:04:97:c7:1a:c1:6f:58:41:2e:24:19:
58:25:4e:01:2e:12:dd:3c:97:63:9a:aa:38:78:54:
1e:74:d3:94:11:9f:20:7b:bd:24:b4:e4:4c:69:08:
83:ad:09:51:57:52:ff:86:70:ec:9f:f8:cd:1b:70:
71:d3:dc:fd:f9:f0:af:1a:11:d5:4d:fb:6a:78:cf:
41:98:97:c7:b8:42:a5:ae:80:f7:2c:d2:99:a3:41:
72:26:5e:8a:ee:e2:c4:c2:4c:d9:d1:c8:80:41:9f:
72:14:1b:79:f4:99:a2:9a:b7:f5:86:95:e6:fa:4a:
06:ed:a0:1c:5a:1b:41:85:0e:2f:23:97:e7:8a:31:
00:fb:8c:cc:03:c3:0f:f4:a9:d8:73:5a:23:bf:22:
bd:a5:0f:90:14:7d:84:27:68:c0:74:95:ff:ae:de:
68:ab:d4:7f:8a:31:e0:73:90:1a:11:7d:c2:46:57:
0f:8f:79:72:52:72:26:9f:87:26:8c:53:b5:0d:93:
5c:2b:ca:91:16:39:1f:a4:fb:9e:60:64:b5:72:d7:
0d:74:18:04:46:f0:79:c1:e3:48:c0:2f:09:ec:58:
2f:28:9c:a0:8d:e5:41:0f:4f:db:b3:2e:8c:2b:aa:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4D:96:67:F7:78:E1:51:8F:5F:26:A1:51:FF:3A:B5:57:A0:B7:49
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:f0:f1:8b:f8:9f:a2:2d:7c:d8:80:0d:54:59:6c:51:70:
c8:2d:79:96:2a:1f:6d:5e:b9:2f:99:4f:56:ef:17:05:9d:74:
b5:88:2d:a7:40:c4:2c:ec:33:b4:c8:8a:cd:c3:18:5e:4c:9c:
34:18:39:e2:1a:90:fc:98:e8:ad:71:9d:df:23:61:7a:f8:9b:
e0:02:c1:36:f2:5a:df:70:11:61:55:b6:e3:95:de:d0:e1:46:
5e:c0:a5:71:88:3c:21:fd:d0:9e:a2:e9:99:93:27:a6:50:06:
66:71:90:e8:b3:fb:08:83:70:47:5e:ef:90:4e:9c:a4:2f:d6:
a0:ca:1c:a5:36:1c:9e:46:07:5d:92:87:49:5c:70:5e:ea:78:
af:5f:ca:d1:56:d3:63:e1:2a:1c:6d:db:f7:f9:45:fb:9f:02:
fe:4f:67:16:03:58:5a:18:79:9f:6b:da:e0:5d:08:f6:55:50:
d6:7b:c1:bb:da:8a:89:fd:6b:85:10:01:82:fd:3b:9a:7d:e1:
23:f5:de:30:86:5a:1d:c7:13:a5:7d:75:73:74:26:1a:b3:00:
28:c8:0e:cc:59:d2:0c:af:aa:92:76:aa:5e:01:10:26:01:e1:
0c:0d:77:f1:ea:00:0f:f8:e5:a5:9c:ad:8d:f1:89:1a:6c:50:
f4:9e:a2:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSol2lRDpM9020/UUN6dfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2VlMzFkMmYwZWYxMDMyOTZkZGVjM2M2NmIwN2EzZjQ0
MmFjOTgwHhcNMjUwNjA5MDMwMTAxWhcNMjUwNjEwMDMwMTAxWjAzMTEwLwYDVQQD
Eyg1YzRkOTY2N2Y3NzhlMTUxOGY1ZjI2YTE1MWZmM2FiNTU3YTBiNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fPOKOSfLETxguojzwHLw7JmBJfH
GsFvWEEuJBlYJU4BLhLdPJdjmqo4eFQedNOUEZ8ge70ktORMaQiDrQlRV1L/hnDs
n/jNG3Bx09z9+fCvGhHVTftqeM9BmJfHuEKlroD3LNKZo0FyJl6K7uLEwkzZ0ciA
QZ9yFBt59Jmimrf1hpXm+koG7aAcWhtBhQ4vI5fnijEA+4zMA8MP9KnYc1ojvyK9
pQ+QFH2EJ2jAdJX/rt5oq9R/ijHgc5AaEX3CRlcPj3lyUnImn4cmjFO1DZNcK8qR
FjkfpPueYGS1ctcNdBgERvB5weNIwC8J7FgvKJygjeVBD0/bsy6MK6oysQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxNlmf3eOFRj18moVH/OrVXoLdJMB8GA1UdIwQY
MBaAFO8+4x0vDvEDKW3ew8ZrB6P0QqyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMt
NzQ4ZDYxNzNiNmExLzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMtNzQ4ZDYxNzNiNmEx
LzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyzw8Yv4
n6ItfNiADVRZbFFwyC15liofbV65L5lPVu8XBZ10tYgtp0DELOwztMiKzcMYXkyc
NBg54hqQ/JjorXGd3yNhevib4ALBNvJa33ARYVW245Xe0OFGXsClcYg8If3QnqLp
mZMnplAGZnGQ6LP7CINwR17vkE6cpC/WoMocpTYcnkYHXZKHSVxwXup4r1/K0VbT
Y+EqHG3b9/lF+58C/k9nFgNYWhh5n2va4F0I9lVQ1nvBu9qKif1rhRABgv07mn3h
I/XeMIZaHccTpX11c3QmGrMAKMgOzFnSDK+qknaqXgEQJgHhDA138eoAD/jlpZyt
jfGJGmxQ9J6iGA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:33:04 2025 by rpki-client