Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: u9g6sOMltL2SHiFU5Fz1UxoIORi7LVzZTuCuP+0HUzU=
Subject key identifier: 1F:7F:7B:70:C6:53:10:CF:3E:FA:65:8F:4C:7C:8E:45:50:5A:92:90
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 01974968057F98F980266C90B3A5C4C6CF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 08:00:43 +0000
Manifest this update: Sat 07 Jun 2025 08:00:43 +0000
Manifest next update: Sun 08 Jun 2025 08:00:43 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: 6X799OYsHtfeP/t5E+cPI2rFJlbw1P44Dkp5Iafolps=)
2: b9uFZXxchqu_WU8UVL2lcEelg1M.roa (hash: NHGZBJUOGWUhtzmDGEI+zLtl0jv4NmQvyCdklZRG/7E=)
3: mGTK3wTvfhonNVwr6seWi2ASIP8.roa (hash: aYF3ywz/BlGpMX8QkbZOivZvZOPC3l60CNt4ow7w3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:05:7f:98:f9:80:26:6c:90:b3:a5:c4:c6:cf:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Jun 7 08:00:43 2025 GMT
Not After : Jun 8 08:00:43 2025 GMT
Subject: CN=1f7f7b70c65310cf3efa658f4c7c8e45505a9290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:b9:59:bd:db:08:e0:89:3a:8a:37:2a:80:
f0:eb:43:94:be:28:ed:05:08:1f:1e:2c:6e:67:11:
b0:2c:18:26:52:f8:bb:66:b3:78:c7:2d:ed:14:c7:
1f:a0:21:ff:86:f2:04:51:cc:22:0a:10:9d:f5:5b:
39:97:13:ec:30:29:62:2b:45:85:ed:09:b4:37:b8:
83:2d:ae:7d:59:5a:92:56:fb:b7:c0:5d:8a:3f:8d:
df:6e:a5:1c:bd:b1:a8:48:5d:f6:99:10:2a:a3:47:
35:87:81:82:4c:d9:51:d3:28:84:a2:ec:26:84:11:
e3:91:99:6c:ca:cb:e1:b2:81:ef:5f:4e:8a:f2:ee:
1e:85:b7:0c:26:f0:6d:df:fe:e9:02:e6:21:39:24:
e5:0f:92:29:ca:9b:a1:b7:32:d6:d7:a5:74:9e:0f:
45:23:22:46:01:86:5d:97:b8:33:e9:c4:ac:ec:04:
c2:42:b6:8f:93:2d:17:e1:a6:5b:ff:ac:87:45:31:
7b:2d:6d:c8:ec:2e:45:34:31:66:71:63:62:79:7e:
b2:96:86:25:dd:25:43:32:0f:ea:62:ff:6a:d0:1d:
3c:ed:3f:0d:8e:8b:94:aa:3c:6b:3b:47:98:b7:31:
d9:ba:f5:bd:e2:e8:f2:f6:dd:d9:10:c0:60:8b:e0:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:7B:70:C6:53:10:CF:3E:FA:65:8F:4C:7C:8E:45:50:5A:92:90
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4e:d0:fc:ee:6c:48:7f:02:e1:c3:d8:66:6b:ef:93:de:d8:
3b:20:4c:6e:04:37:02:f4:a0:e1:fd:75:02:43:43:0d:ed:26:
6f:b8:bd:a5:1a:75:48:f6:59:2e:d6:ba:11:87:14:64:b1:47:
ee:ac:ca:75:3f:18:ab:01:10:93:eb:aa:ea:42:10:07:6b:d8:
71:b6:11:19:39:ee:a6:5b:41:7b:b1:e7:cf:f9:e1:59:12:14:
5c:95:a6:15:72:b3:d3:3c:eb:b9:f9:49:f5:24:5a:0a:0a:8c:
e8:3a:1f:30:79:21:27:4f:76:c5:17:35:02:99:49:fb:77:e8:
06:5f:ef:4f:f5:57:5f:69:2d:02:d1:63:12:56:3f:5e:8a:d3:
7f:ab:fb:3f:69:62:c0:ce:3e:bf:e2:31:12:86:ce:b0:90:ba:
b6:96:3c:11:42:77:a0:06:01:74:f0:13:f4:ab:39:cc:30:5a:
c3:ff:ed:1f:e3:f0:56:e3:65:b0:16:68:6a:4f:f3:e4:da:5b:
02:54:9e:2d:d5:e3:34:26:f8:3b:88:4d:f3:eb:eb:ff:a3:a5:
b0:18:22:11:b4:59:f4:2a:22:db:0d:94:d4:6a:ac:cb:30:9c:
12:00:9d:90:b5:d5:02:c2:37:e2:40:47:7d:70:db:31:96:c3:
33:c8:de:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaAV/mPmAJmyQs6XExs8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTkwMmJkZmJkNzRjMzNlYTc2NDUzZDE0NWU3NmY2YWE4
NTdjNDEwHhcNMjUwNjA3MDgwMDQzWhcNMjUwNjA4MDgwMDQzWjAzMTEwLwYDVQQD
EygxZjdmN2I3MGM2NTMxMGNmM2VmYTY1OGY0YzdjOGU0NTUwNWE5MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDu5Wb3bCOCJOoo3KoDw60OUvijt
BQgfHixuZxGwLBgmUvi7ZrN4xy3tFMcfoCH/hvIEUcwiChCd9Vs5lxPsMCliK0WF
7Qm0N7iDLa59WVqSVvu3wF2KP43fbqUcvbGoSF32mRAqo0c1h4GCTNlR0yiEouwm
hBHjkZlsysvhsoHvX06K8u4ehbcMJvBt3/7pAuYhOSTlD5IpypuhtzLW16V0ng9F
IyJGAYZdl7gz6cSs7ATCQraPky0X4aZb/6yHRTF7LW3I7C5FNDFmcWNieX6yloYl
3SVDMg/qYv9q0B087T8NjouUqjxrO0eYtzHZuvW94ujy9t3ZEMBgi+AttwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9/e3DGUxDPPvplj0x8jkVQWpKQMB8GA1UdIwQY
MBaAFO1ZAr3710wz6nZFPRRedvaqhXxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDIt
NTAzMzZmNWQzNDBlLzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDItNTAzMzZmNWQzNDBl
LzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE7Q/O5s
SH8C4cPYZmvvk97YOyBMbgQ3AvSg4f11AkNDDe0mb7i9pRp1SPZZLta6EYcUZLFH
7qzKdT8YqwEQk+uq6kIQB2vYcbYRGTnupltBe7Hnz/nhWRIUXJWmFXKz0zzruflJ
9SRaCgqM6DofMHkhJ092xRc1AplJ+3foBl/vT/VXX2ktAtFjElY/XorTf6v7P2li
wM4+v+IxEobOsJC6tpY8EUJ3oAYBdPAT9Ks5zDBaw//tH+PwVuNlsBZoak/z5Npb
AlSeLdXjNCb4O4hN8+vr/6OlsBgiEbRZ9Coi2w2U1GqsyzCcEgCdkLXVAsI34kBH
fXDbMZbDM8jeHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:04 2025 by rpki-client