Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: TNyFV4nJJzUbbdxvZM/J/hMkn+w91cwhDbdPzmBirMc=
Subject key identifier: 4F:10:FF:7A:93:8D:5B:75:11:5D:CA:FD:30:5C:80:21:35:21:16:C7
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 01985456E4A29D9F898AF34B22DF40ADFC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 01E3
Signing time: Tue 29 Jul 2025 04:00:37 +0000
Manifest this update: Tue 29 Jul 2025 04:00:37 +0000
Manifest next update: Wed 30 Jul 2025 04:00:37 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: K/eGHGHR6+HdnFfJ2o1FNdvxG8Q3y4fe7orvNsg0v3c=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:e4:a2:9d:9f:89:8a:f3:4b:22:df:40:ad:fc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Jul 29 04:00:37 2025 GMT
Not After : Jul 30 04:00:37 2025 GMT
Subject: CN=4f10ff7a938d5b75115dcafd305c8021352116c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:34:f1:a2:44:b9:ba:23:5d:b1:96:c1:7a:
c2:85:f6:1d:c4:a0:f5:50:1a:8b:e8:e7:fd:52:36:
42:83:cc:dc:0d:e7:30:43:f3:3b:08:ca:f2:3d:6a:
fd:c8:7d:1f:ff:bd:64:51:5b:5c:d0:3d:9d:c2:d1:
95:ba:b8:54:84:2c:dd:33:15:17:83:e9:fc:14:9a:
a8:37:30:9c:ca:04:c1:ed:5f:ed:f0:df:88:69:54:
aa:62:e7:61:13:56:71:f1:2f:0d:f3:a8:7f:b6:4a:
35:40:51:5a:96:ca:75:f1:ff:74:9a:0c:c9:8f:35:
a3:5c:7c:7a:bc:d7:b8:08:45:ee:f9:f1:1c:c2:e7:
5a:4a:c9:4f:3d:6f:db:7c:ea:4a:b3:0b:20:00:79:
5a:d7:3d:05:c4:fa:15:24:6d:c9:6d:f7:28:ad:11:
a8:86:cb:e6:61:6a:4e:3d:81:9f:29:17:8b:d5:7c:
e1:e6:32:a3:d8:2c:35:23:cb:fb:12:21:7f:63:d8:
46:9c:15:d7:80:92:fb:70:6d:00:b0:db:cd:89:09:
6f:d6:a7:c7:7e:a0:94:34:92:7a:ba:a8:0f:11:f5:
bb:e2:e5:8a:bb:db:3c:0c:ee:80:f7:91:ee:93:68:
5a:35:a7:60:2a:68:81:0e:3c:15:a4:09:7d:27:a8:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:10:FF:7A:93:8D:5B:75:11:5D:CA:FD:30:5C:80:21:35:21:16:C7
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:14:e6:7d:66:b7:ea:34:9b:da:a0:e3:9a:33:13:88:30:1e:
22:ee:de:7e:2d:b3:b6:e3:86:ed:0d:b3:62:f7:b9:ee:e5:c8:
a8:a9:33:e1:ed:53:2b:30:14:a9:fc:e4:4d:d3:11:7d:cb:52:
63:68:81:bc:50:ab:bc:1f:9c:a6:58:ca:48:2b:cf:3a:a0:73:
29:c0:b0:42:9d:99:7e:e7:0e:85:1e:28:95:96:ce:d9:2b:39:
cc:d9:3d:51:39:f7:e5:30:a9:52:fc:4b:51:cf:97:0b:f9:99:
97:0e:88:84:7c:ff:41:6f:bf:87:4b:47:4a:ef:ad:19:4d:84:
f8:6d:76:53:f9:ef:4e:b8:9e:13:f1:02:c9:e5:b3:29:e7:e5:
a3:a0:b8:fc:af:53:9b:67:56:4d:35:a5:50:b9:fb:77:7f:5d:
10:db:7f:06:08:26:95:37:03:d8:06:d4:06:57:21:90:57:f5:
99:0e:64:f8:11:2d:eb:02:ee:54:60:80:4d:f4:1d:a6:2b:f0:
b8:3f:dc:a5:7d:55:cd:1b:44:5d:1f:b6:0e:14:d8:e9:99:ea:
b9:44:8f:20:41:88:9b:a5:9b:74:53:51:8e:84:80:3c:96:86:
92:7b:4f:57:66:55:9f:fb:4c:6d:bf:a2:b5:28:f6:41:20:f2:
f8:92:71:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUVuSinZ+JivNLIt9Arfx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWQ4NzhiODFhOTAyMzk0MGQ0ZWM4YzE3MmQwNGQ0YzI1
NTg2Y2EwHhcNMjUwNzI5MDQwMDM3WhcNMjUwNzMwMDQwMDM3WjAzMTEwLwYDVQQD
Eyg0ZjEwZmY3YTkzOGQ1Yjc1MTE1ZGNhZmQzMDVjODAyMTM1MjExNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufg08aJEubojXbGWwXrChfYdxKD1
UBqL6Of9UjZCg8zcDecwQ/M7CMryPWr9yH0f/71kUVtc0D2dwtGVurhUhCzdMxUX
g+n8FJqoNzCcygTB7V/t8N+IaVSqYudhE1Zx8S8N86h/tko1QFFalsp18f90mgzJ
jzWjXHx6vNe4CEXu+fEcwudaSslPPW/bfOpKswsgAHla1z0FxPoVJG3JbfcorRGo
hsvmYWpOPYGfKReL1Xzh5jKj2Cw1I8v7EiF/Y9hGnBXXgJL7cG0AsNvNiQlv1qfH
fqCUNJJ6uqgPEfW74uWKu9s8DO6A95Huk2haNadgKmiBDjwVpAl9J6g8mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8Q/3qTjVt1EV3K/TBcgCE1IRbHMB8GA1UdIwQY
MBaAFO7th4uBqQI5QNTsjBctBNTCVYbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDct
NTZjMzYyNGI4YjFiLzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDctNTZjMzYyNGI4YjFi
LzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxTmfWa3
6jSb2qDjmjMTiDAeIu7efi2ztuOG7Q2zYve57uXIqKkz4e1TKzAUqfzkTdMRfctS
Y2iBvFCrvB+cpljKSCvPOqBzKcCwQp2ZfucOhR4olZbO2Ss5zNk9UTn35TCpUvxL
Uc+XC/mZlw6IhHz/QW+/h0tHSu+tGU2E+G12U/nvTrieE/ECyeWzKeflo6C4/K9T
m2dWTTWlULn7d39dENt/BggmlTcD2AbUBlchkFf1mQ5k+BEt6wLuVGCATfQdpivw
uD/cpX1VzRtEXR+2DhTY6ZnquUSPIEGIm6WbdFNRjoSAPJaGkntPV2ZVn/tMbb+i
tSj2QSDy+JJxFQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 10:52:14 2025 by rpki-client