Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: EjH6v+GIKwAsaSfgaCwWIGuNY3Sf2MuNyF8BUC0DZEI=
Subject key identifier: 2B:17:CD:10:C0:75:37:00:CE:D6:E3:55:3A:17:F1:9F:A1:CA:D9:5B
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 01975E01BB78DC53049404BA64B31D058355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 05B8
Signing time: Wed 11 Jun 2025 08:01:01 +0000
Manifest this update: Wed 11 Jun 2025 08:01:01 +0000
Manifest next update: Thu 12 Jun 2025 08:01:01 +0000
Files and hashes: 1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: qvetGRhuXFx/k8H0NmoMhxcYu4GKDrRg/2ZfGfdrq5o=)
2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=)
3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:bb:78:dc:53:04:94:04:ba:64:b3:1d:05:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Jun 11 08:01:01 2025 GMT
Not After : Jun 12 08:01:01 2025 GMT
Subject: CN=2b17cd10c0753700ced6e3553a17f19fa1cad95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:20:5d:48:08:91:04:e2:34:30:79:99:1c:
f5:e6:14:70:38:f5:6a:24:bf:5f:86:13:3e:22:9e:
6b:9e:f9:a0:ef:0c:8b:a0:e0:d9:d8:2d:bf:ab:46:
51:b3:ff:3c:ae:ff:22:73:d6:83:43:37:c6:97:b0:
6d:2a:49:68:c3:19:d2:37:f5:33:32:03:1e:af:ff:
be:b1:cc:30:fc:87:07:a7:d0:25:b8:60:b6:56:a3:
b5:84:ff:8f:2b:ab:a3:ab:19:7c:6c:62:44:94:69:
6d:f2:ab:27:31:90:ff:7b:04:fd:4c:f0:62:3f:d1:
68:fa:22:f1:62:d2:55:d2:44:89:5d:ff:f2:4c:73:
d2:01:f2:90:6b:1a:9d:16:7c:d3:f4:68:c8:e5:54:
52:33:8f:43:dd:64:3c:3f:27:3f:38:34:5e:46:01:
75:21:84:f6:ac:fb:36:4d:9b:4a:9f:58:d0:fa:8d:
f6:f7:eb:ee:70:b1:e3:01:25:66:54:42:a0:a1:f7:
6a:9e:3d:7c:19:b4:ad:a3:16:b8:3d:f3:d4:bd:7b:
43:81:d3:b5:a4:96:10:06:13:cf:22:b9:74:5f:b5:
f7:3a:69:04:1c:5b:c9:ce:b4:d3:01:5e:71:3e:ad:
88:02:5b:ef:5f:6a:9a:17:36:b4:a8:96:81:3d:e6:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:CD:10:C0:75:37:00:CE:D6:E3:55:3A:17:F1:9F:A1:CA:D9:5B
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:b1:91:fc:2d:7c:d9:2e:5b:9d:6a:f9:70:3f:5b:2b:77:
c0:18:f7:c8:c8:a1:44:5b:8b:83:c2:0c:8f:37:f5:13:9d:bd:
95:f3:4c:85:da:d7:7c:0d:17:bf:f3:f6:3f:c9:a2:70:72:12:
14:b0:6f:f2:37:f6:58:57:c1:db:c2:d1:4a:14:47:87:27:21:
1f:90:12:de:68:cb:d9:89:12:bc:bd:10:6d:78:82:6b:8c:ff:
25:26:12:b4:78:ec:93:b4:6b:fc:35:98:5a:33:ee:b1:98:de:
60:6c:48:bf:2f:9c:93:6b:ea:e3:35:df:0f:08:70:74:57:6f:
25:ea:94:a3:8c:db:7d:34:7d:29:70:59:fa:63:2d:f8:8d:b0:
ad:8c:bb:8b:56:69:ff:4a:18:db:f0:ee:4a:e4:77:23:6e:e7:
da:bc:9c:81:bf:94:2b:8b:b0:28:7a:b6:92:46:e0:0c:76:2d:
a8:41:2c:13:7e:b9:cd:60:7a:6d:47:1b:48:a7:12:c0:3f:f7:
59:aa:34:91:83:59:7c:72:38:97:ff:06:85:07:23:76:6e:d0:
a5:23:f4:98:b7:d7:4f:0a:cb:50:80:84:ec:8c:c3:eb:00:06:
f6:56:4e:13:96:42:b2:15:43:70:44:79:0d:de:45:25:66:9c:
39:23:48:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdeAbt43FMElAS6ZLMdBYNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2
NzcyYjAwHhcNMjUwNjExMDgwMTAxWhcNMjUwNjEyMDgwMTAxWjAzMTEwLwYDVQQD
EygyYjE3Y2QxMGMwNzUzNzAwY2VkNmUzNTUzYTE3ZjE5ZmExY2FkOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGMgXUgIkQTiNDB5mRz15hRwOPVq
JL9fhhM+Ip5rnvmg7wyLoODZ2C2/q0ZRs/88rv8ic9aDQzfGl7BtKklowxnSN/Uz
MgMer/++scww/IcHp9AluGC2VqO1hP+PK6ujqxl8bGJElGlt8qsnMZD/ewT9TPBi
P9Fo+iLxYtJV0kSJXf/yTHPSAfKQaxqdFnzT9GjI5VRSM49D3WQ8Pyc/ODReRgF1
IYT2rPs2TZtKn1jQ+o329+vucLHjASVmVEKgofdqnj18GbStoxa4PfPUvXtDgdO1
pJYQBhPPIrl0X7X3OmkEHFvJzrTTAV5xPq2IAlvvX2qaFza0qJaBPeb2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsXzRDAdTcAztbjVToX8Z+hytlbMB8GA1UdIwQY
MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt
MjZjZGM1NTY0NGQ0LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0
LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRaxkfwt
fNkuW51q+XA/Wyt3wBj3yMihRFuLg8IMjzf1E529lfNMhdrXfA0Xv/P2P8micHIS
FLBv8jf2WFfB28LRShRHhychH5AS3mjL2YkSvL0QbXiCa4z/JSYStHjsk7Rr/DWY
WjPusZjeYGxIvy+ck2vq4zXfDwhwdFdvJeqUo4zbfTR9KXBZ+mMt+I2wrYy7i1Zp
/0oY2/DuSuR3I27n2rycgb+UK4uwKHq2kkbgDHYtqEEsE365zWB6bUcbSKcSwD/3
Wao0kYNZfHI4l/8GhQcjdm7QpSP0mLfXTwrLUICE7IzD6wAG9lZOE5ZCshVDcER5
Dd5FJWacOSNIEQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:19:02 2025 by rpki-client