Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: T9xBWbX98QD5F1j7w9j/tvMbhTcLOOrhKDyqTe6b+PQ=
Subject key identifier: E1:72:6C:47:0C:4A:95:32:6B:6D:83:E5:31:F1:A5:9A:84:15:6E:63
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 0197488C60B01245AD0A34128ABD298FB03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 0433
Signing time: Sat 07 Jun 2025 04:00:48 +0000
Manifest this update: Sat 07 Jun 2025 04:00:48 +0000
Manifest next update: Sun 08 Jun 2025 04:00:48 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: 87ZS1G4cctBbHqzvHo0SGnoarIjfBT3cFU6skNAnh+4=)
2: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
3: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (hash: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:60:b0:12:45:ad:0a:34:12:8a:bd:29:8f:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Jun 7 04:00:48 2025 GMT
Not After : Jun 8 04:00:48 2025 GMT
Subject: CN=e1726c470c4a95326b6d83e531f1a59a84156e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:10:c6:bc:df:b9:fd:28:ec:e1:20:de:c6:
7f:20:42:4b:fa:6c:ca:4a:d8:b5:dd:c8:60:61:f7:
36:c6:ca:af:be:de:33:9a:a1:c3:2b:f1:14:69:e6:
fa:b3:20:ae:73:db:1c:60:d0:1d:f5:6a:08:ad:5e:
c9:f7:be:57:d2:7d:24:1a:d8:b6:3d:c6:7d:ea:13:
db:1e:ca:c7:6a:e1:7e:3c:2f:a9:b5:c5:f5:42:ee:
8e:a8:4d:f3:93:12:2c:b7:99:e8:4f:b1:93:d4:ae:
9a:a8:89:59:95:fb:1c:e6:82:51:78:07:c0:67:ba:
6d:cf:7d:50:73:c7:41:ec:48:9f:65:5b:78:4a:d0:
e4:4f:2c:97:74:ef:39:fe:b5:e1:4b:ae:df:35:63:
04:55:6b:d9:14:7c:25:23:cd:37:c1:a0:b9:ac:44:
20:df:4a:e3:44:6b:de:15:aa:14:fe:3e:cd:e9:f7:
f1:2a:ec:66:d3:b1:db:1f:b5:ca:53:50:0d:3a:15:
a3:39:97:74:08:ba:d9:11:c4:08:56:98:9a:48:cc:
96:4d:9d:8d:3b:e7:35:6c:80:54:fa:64:8e:44:8e:
7f:2e:e0:1f:22:15:05:65:58:7b:41:e7:d7:8d:6e:
2f:68:21:b0:80:6f:ac:f5:3d:6b:5f:02:e2:0b:a6:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:6C:47:0C:4A:95:32:6B:6D:83:E5:31:F1:A5:9A:84:15:6E:63
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1b:f5:da:c7:9b:94:91:25:f6:d6:30:a6:7c:ce:aa:cf:9d:
00:b3:4f:84:35:b9:f3:ac:d3:dd:77:8f:fa:f7:cb:9f:53:da:
3b:ad:7e:e5:9f:e2:c5:24:ce:bc:9e:4f:d6:45:b2:a9:fa:50:
1d:a7:b2:1b:fa:64:ae:e1:99:44:5d:18:28:9f:13:80:0c:0e:
0f:c5:09:fc:d9:ed:be:5c:dc:15:d5:ec:57:95:76:37:31:44:
04:ed:bc:8a:cf:49:5a:84:a7:ae:cf:04:ac:f4:2b:fe:26:f1:
49:f9:17:eb:df:c3:9b:79:5f:35:ce:e2:07:28:3f:d7:44:37:
ad:70:ec:91:33:f6:1b:c1:73:fb:39:ab:3d:9b:6a:4d:4f:f2:
87:4c:67:39:63:57:8d:34:06:33:27:1b:1a:b7:e1:19:28:9a:
0b:08:0a:6e:83:7c:e4:d7:3a:74:c4:ae:6f:7e:5d:d1:64:28:
60:cb:d1:f2:68:78:be:e9:b8:9d:77:cb:f6:5b:ea:5f:95:44:
c9:5c:5c:0c:6f:70:50:fb:43:26:b1:30:25:fe:72:5a:56:fc:
6d:38:24:e7:75:8f:a5:34:b5:64:5b:7a:05:6a:26:b4:a6:50:
87:95:3f:ea:f0:da:3f:17:6a:24:88:f6:34:f5:6d:52:41:86:
fe:04:89:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjGCwEkWtCjQSir0pj7A9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh
ZjUxZDIwHhcNMjUwNjA3MDQwMDQ4WhcNMjUwNjA4MDQwMDQ4WjAzMTEwLwYDVQQD
EyhlMTcyNmM0NzBjNGE5NTMyNmI2ZDgzZTUzMWYxYTU5YTg0MTU2ZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM8Qxrzfuf0o7OEg3sZ/IEJL+mzK
Sti13chgYfc2xsqvvt4zmqHDK/EUaeb6syCuc9scYNAd9WoIrV7J975X0n0kGti2
PcZ96hPbHsrHauF+PC+ptcX1Qu6OqE3zkxIst5noT7GT1K6aqIlZlfsc5oJReAfA
Z7ptz31Qc8dB7EifZVt4StDkTyyXdO85/rXhS67fNWMEVWvZFHwlI803waC5rEQg
30rjRGveFaoU/j7N6ffxKuxm07HbH7XKU1ANOhWjOZd0CLrZEcQIVpiaSMyWTZ2N
O+c1bIBU+mSORI5/LuAfIhUFZVh7QefXjW4vaCGwgG+s9T1rXwLiC6a4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFybEcMSpUya22D5THxpZqEFW5jMB8GA1UdIwQY
MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt
YTk4OTM1NDVjM2M1LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1
LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhv12seb
lJEl9tYwpnzOqs+dALNPhDW586zT3XeP+vfLn1PaO61+5Z/ixSTOvJ5P1kWyqfpQ
HaeyG/pkruGZRF0YKJ8TgAwOD8UJ/NntvlzcFdXsV5V2NzFEBO28is9JWoSnrs8E
rPQr/ibxSfkX69/Dm3lfNc7iByg/10Q3rXDskTP2G8Fz+zmrPZtqTU/yh0xnOWNX
jTQGMycbGrfhGSiaCwgKboN85Nc6dMSub35d0WQoYMvR8mh4vum4nXfL9lvqX5VE
yVxcDG9wUPtDJrEwJf5yWlb8bTgk53WPpTS1ZFt6BWomtKZQh5U/6vDaPxdqJIj2
NPVtUkGG/gSJ0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:46 2025 by rpki-client