Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: czceyLqzxrwha5PyA6n73Mv6K4YT/rApzsg5OQ3S3IY=
Subject key identifier: E3:38:A8:BE:32:11:56:AC:9A:4D:C5:CE:63:1C:92:8E:EB:B3:AB:20
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 01976929A79831C83B5E68E2D8FAA3FE38CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 07B2
Signing time: Fri 13 Jun 2025 12:00:26 +0000
Manifest this update: Fri 13 Jun 2025 12:00:26 +0000
Manifest next update: Sat 14 Jun 2025 12:00:26 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: wLITtSYETxdqpHl+vj44FBMQHcBj98MK3s5R/DEj1cs=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a7:98:31:c8:3b:5e:68:e2:d8:fa:a3:fe:38:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Jun 13 12:00:26 2025 GMT
Not After : Jun 14 12:00:26 2025 GMT
Subject: CN=e338a8be321156ac9a4dc5ce631c928eebb3ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:4e:7d:6e:1f:1b:16:8f:76:51:b7:27:92:
1b:d5:1f:18:4f:80:a9:d0:34:12:94:f3:92:58:58:
3e:d7:b3:4b:a8:1f:74:2f:f6:c0:db:37:a5:f0:1f:
95:70:0e:c5:45:d6:32:d1:22:af:f2:48:66:27:a1:
0d:cc:40:d6:f8:21:1d:da:1b:91:eb:ac:6f:20:bc:
89:99:6a:98:ed:88:c9:b0:6c:54:a2:44:13:ea:ce:
61:af:df:e1:d2:96:1d:fc:14:5f:fd:8a:e8:73:b8:
8b:8e:36:8f:c5:99:2b:30:85:2e:db:ce:c2:f2:54:
2c:88:5e:a8:e2:a9:31:dd:8f:92:fb:5c:76:e5:63:
df:4f:0e:11:37:bf:2b:e8:7a:6e:5f:4a:d4:d4:ce:
97:8b:93:f5:3d:4c:54:b4:26:bb:8c:93:2b:5b:e9:
c1:51:ef:85:35:8e:65:cc:3f:e4:a7:50:09:d7:57:
53:7e:c1:ea:da:fb:73:e0:f1:f9:f6:d4:c5:a1:b5:
9f:8c:fd:f9:59:43:8c:fe:75:e2:00:f3:03:58:d0:
ed:f8:ab:88:73:ca:2a:23:8a:91:8e:62:94:b7:6b:
18:bc:1e:dc:10:f1:5b:09:8c:11:b0:93:fd:d5:16:
aa:de:da:ab:5e:c1:2f:aa:35:29:9a:21:f2:00:e7:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:A8:BE:32:11:56:AC:9A:4D:C5:CE:63:1C:92:8E:EB:B3:AB:20
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a3:fd:9f:22:e2:f0:65:59:94:f3:dc:a5:3c:ef:6b:71:99:
92:65:36:d3:fe:ad:52:00:bd:56:2e:c9:02:3b:d2:e3:48:14:
2e:3b:5a:6e:96:36:33:4d:6f:e8:6d:af:de:4d:14:8e:bc:66:
55:b8:57:a1:2d:78:fb:09:f2:ae:a3:0a:16:1d:06:20:ab:b4:
04:fe:c4:3d:da:c8:96:81:86:b2:24:b6:3f:dc:e7:42:66:d1:
28:23:c3:ca:55:04:8e:98:d2:59:30:00:6f:3e:3e:27:a5:1b:
f1:46:9a:e9:25:70:4f:5e:6f:18:13:1b:eb:53:e5:0d:86:dc:
6f:c6:5f:be:62:0d:09:4d:35:3a:3b:b3:1d:96:63:51:e7:89:
51:7f:b6:05:51:0e:e7:3e:f3:96:cc:ac:83:90:b5:e7:16:d8:
02:d1:a5:de:8b:f8:bc:f0:71:30:22:43:3f:7e:f0:01:93:3c:
55:5c:44:6e:95:8e:eb:59:de:96:58:b9:45:61:38:df:a2:fd:
a5:fc:19:df:c8:6b:6e:43:7d:61:84:25:3c:2d:1a:6f:c1:4d:
5f:ab:09:6b:b3:d3:97:88:5a:2c:5c:c4:0f:85:32:aa:74:e7:
6b:9e:39:74:00:0d:d9:fd:dc:d1:5b:4b:53:07:23:d3:45:ad:
c5:c3:6a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKaeYMcg7Xmji2Pqj/jjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjBiMTdkZDg5YjM4NjQyNDk3MjhiOWZjMmVlYWU1MTBm
ZGU0ZmIwHhcNMjUwNjEzMTIwMDI2WhcNMjUwNjE0MTIwMDI2WjAzMTEwLwYDVQQD
EyhlMzM4YThiZTMyMTE1NmFjOWE0ZGM1Y2U2MzFjOTI4ZWViYjNhYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvxOfW4fGxaPdlG3J5Ib1R8YT4Cp
0DQSlPOSWFg+17NLqB90L/bA2zel8B+VcA7FRdYy0SKv8khmJ6ENzEDW+CEd2huR
66xvILyJmWqY7YjJsGxUokQT6s5hr9/h0pYd/BRf/Yroc7iLjjaPxZkrMIUu287C
8lQsiF6o4qkx3Y+S+1x25WPfTw4RN78r6HpuX0rU1M6Xi5P1PUxUtCa7jJMrW+nB
Ue+FNY5lzD/kp1AJ11dTfsHq2vtz4PH59tTFobWfjP35WUOM/nXiAPMDWNDt+KuI
c8oqI4qRjmKUt2sYvB7cEPFbCYwRsJP91Raq3tqrXsEvqjUpmiHyAOejrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOM4qL4yEVasmk3FzmMcko7rs6sgMB8GA1UdIwQY
MBaAFIuwsX3YmzhkJJcoufwu6uUQ/eT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQt
ZTAxOTE5ZmNmZWRmLzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQtZTAxOTE5ZmNmZWRm
LzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaP9nyLi
8GVZlPPcpTzva3GZkmU20/6tUgC9Vi7JAjvS40gULjtabpY2M01v6G2v3k0Ujrxm
VbhXoS14+wnyrqMKFh0GIKu0BP7EPdrIloGGsiS2P9znQmbRKCPDylUEjpjSWTAA
bz4+J6Ub8Uaa6SVwT15vGBMb61PlDYbcb8ZfvmINCU01OjuzHZZjUeeJUX+2BVEO
5z7zlsysg5C15xbYAtGl3ov4vPBxMCJDP37wAZM8VVxEbpWO61nelli5RWE436L9
pfwZ38hrbkN9YYQlPC0ab8FNX6sJa7PTl4haLFzED4UyqnTna545dAAN2f3c0VtL
Uwcj00WtxcNqag==
-----END CERTIFICATE-----
Generated at Fri Jun 13 17:08:07 2025 by rpki-client