Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: LIcW+XL3WuhLu7Xa537GqyLnp0XW6PSdX8j/QGJKSB4=
Subject key identifier: C1:97:5B:F5:08:71:02:ED:A5:30:1F:2F:3D:01:91:EB:C9:47:46:48
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 01974931278E7D0CF5DC9EF275AD7B9CFFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 1346
Signing time: Sat 07 Jun 2025 07:00:47 +0000
Manifest this update: Sat 07 Jun 2025 07:00:47 +0000
Manifest next update: Sun 08 Jun 2025 07:00:47 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: 9nc9I/l31kH3w4zsAoBQmx7slHLNINFtnID3fESHwOg=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:27:8e:7d:0c:f5:dc:9e:f2:75:ad:7b:9c:ff:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Jun 7 07:00:47 2025 GMT
Not After : Jun 8 07:00:47 2025 GMT
Subject: CN=c1975bf5087102eda5301f2f3d0191ebc9474648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:eb:ee:62:0d:c9:dd:37:92:fc:6a:15:97:
4d:91:e1:73:18:74:34:65:dd:f8:d0:d1:32:0d:71:
1d:83:ad:48:56:a5:ef:e8:00:36:f7:fd:4e:08:ed:
cf:c0:df:63:26:b7:31:db:e1:77:32:a6:81:91:55:
8b:b4:c3:a0:95:3c:3c:df:ea:96:00:f9:5a:7b:6f:
07:d2:f7:25:d2:6e:91:77:76:64:6e:ab:aa:ab:05:
32:4f:99:45:39:ff:6f:ad:60:e0:aa:2c:06:0d:dc:
cd:cd:20:14:d3:dc:06:75:58:ae:c4:ec:ba:4b:cb:
ac:8b:28:c0:40:0e:2d:ff:52:c9:33:b9:b6:f0:9e:
c9:95:49:c9:a6:ea:5f:93:e8:94:74:f4:53:05:d5:
24:02:74:24:de:62:d3:b2:64:ff:78:81:1c:8b:f9:
f3:8e:d6:36:d4:16:84:31:e2:57:e4:00:44:b2:7a:
4c:6f:84:b7:bc:d8:d3:77:42:b6:7d:42:b0:44:47:
c3:a4:80:ba:91:16:10:eb:ad:38:01:7f:c0:d8:d0:
68:cd:ee:6e:8b:a9:5d:4c:ef:c5:93:7e:db:89:e5:
ac:f5:48:0e:a1:e5:c0:e3:8f:0f:aa:27:84:e5:bb:
70:41:de:ee:14:ea:36:72:5b:f8:d7:f0:ee:cd:9f:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:5B:F5:08:71:02:ED:A5:30:1F:2F:3D:01:91:EB:C9:47:46:48
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cc:45:29:9d:cf:41:be:0c:20:fa:76:e5:b8:66:5f:da:f5:
3b:e0:d8:86:01:b6:ca:97:c4:3b:35:71:3b:60:db:54:d5:60:
52:11:4b:91:cb:0d:0d:23:60:88:0c:72:0d:c3:09:36:eb:ee:
a0:a2:51:a9:82:31:16:6a:ca:25:1d:f9:b0:f8:14:4e:e9:94:
1d:d8:3f:5d:4f:93:f9:f9:b7:5f:df:b1:85:b1:8d:f4:6a:00:
e7:c7:f0:8c:09:95:68:6f:f5:12:0f:1b:36:96:62:e6:ec:dc:
73:18:02:65:13:2a:e1:ee:90:27:ae:7f:6e:41:1f:06:20:ac:
41:1c:d1:2d:92:6e:68:b3:5c:d6:bc:7b:f7:56:e9:ba:28:ab:
22:2c:60:78:b6:00:c9:84:e3:89:ba:16:24:ef:76:14:a6:73:
d4:6d:6e:30:67:cb:35:91:64:16:dd:1c:7c:c6:81:77:5b:a4:
b8:be:12:74:24:4e:f5:ec:72:ca:51:76:f2:1b:ef:f0:27:5a:
d1:22:18:6e:74:de:41:d7:dd:5e:a5:91:02:c8:ed:6a:af:ee:
30:67:32:30:29:2f:52:a4:b6:e2:55:ff:f9:c4:c9:d7:b1:35:
f7:99:c8:e2:d6:cf:76:7c:9b:6a:1d:b5:ae:64:59:78:c0:46:
d5:09:34:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMSeOfQz13J7yda17nP+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMmU4MjFkODhkZTdhMDExMzQxNzA0MjAyMzQ2ZjdjMmJi
OWViY2YwHhcNMjUwNjA3MDcwMDQ3WhcNMjUwNjA4MDcwMDQ3WjAzMTEwLwYDVQQD
EyhjMTk3NWJmNTA4NzEwMmVkYTUzMDFmMmYzZDAxOTFlYmM5NDc0NjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFHr7mINyd03kvxqFZdNkeFzGHQ0
Zd340NEyDXEdg61IVqXv6AA29/1OCO3PwN9jJrcx2+F3MqaBkVWLtMOglTw83+qW
APlae28H0vcl0m6Rd3ZkbquqqwUyT5lFOf9vrWDgqiwGDdzNzSAU09wGdViuxOy6
S8usiyjAQA4t/1LJM7m28J7JlUnJpupfk+iUdPRTBdUkAnQk3mLTsmT/eIEci/nz
jtY21BaEMeJX5ABEsnpMb4S3vNjTd0K2fUKwREfDpIC6kRYQ6604AX/A2NBoze5u
i6ldTO/Fk37bieWs9UgOoeXA448PqieE5btwQd7uFOo2clv41/DuzZ9nEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGXW/UIcQLtpTAfLz0BkevJR0ZIMB8GA1UdIwQY
MBaAFOwugh2I3noBE0FwQgI0b3wruevPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjkt
ZGZhMGI4MDUyNjE0LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjktZGZhMGI4MDUyNjE0
LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMxFKZ3P
Qb4MIPp25bhmX9r1O+DYhgG2ypfEOzVxO2DbVNVgUhFLkcsNDSNgiAxyDcMJNuvu
oKJRqYIxFmrKJR35sPgUTumUHdg/XU+T+fm3X9+xhbGN9GoA58fwjAmVaG/1Eg8b
NpZi5uzccxgCZRMq4e6QJ65/bkEfBiCsQRzRLZJuaLNc1rx791bpuiirIixgeLYA
yYTjiboWJO92FKZz1G1uMGfLNZFkFt0cfMaBd1ukuL4SdCRO9exyylF28hvv8Cda
0SIYbnTeQdfdXqWRAsjtaq/uMGcyMCkvUqS24lX/+cTJ17E195nI4tbPdnybah21
rmRZeMBG1Qk04Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:53 2025 by rpki-client