Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
File: X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft (raw, json)
Hash identifier: ZiSmm9aFBnf+rO9dCw15qN77WiqII9SSPLLYxi19DhA=
Subject key identifier: 9A:F3:6E:5E:9C:51:44:D4:73:F2:2E:60:91:92:EF:5D:9D:CE:B5:A8
Authority key identifier: 5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
Certificate issuer: /CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Certificate serial: 01987AC0249F7B2A56E5F8294B9617ABF2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
Manifest number: 0C35
Signing time: Tue 05 Aug 2025 15:01:09 +0000
Manifest this update: Tue 05 Aug 2025 15:01:09 +0000
Manifest next update: Wed 06 Aug 2025 15:01:09 +0000
Files and hashes: 1: X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl (hash: osvO3tNtF23N9Wgs+nLU1Z9z3XKcE2AHtArK4JJDMdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:24:9f:7b:2a:56:e5:f8:29:4b:96:17:ab:f2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Validity
Not Before: Aug 5 15:01:09 2025 GMT
Not After : Aug 6 15:01:09 2025 GMT
Subject: CN=9af36e5e9c5144d473f22e609192ef5d9dceb5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:a6:82:22:47:9e:2f:3a:c1:81:db:1b:7d:
30:f0:1a:3a:35:69:36:ee:13:23:57:70:2a:b3:21:
4c:20:85:13:e1:e8:bd:a6:a1:82:23:8b:42:3a:ee:
1f:78:4a:1a:21:82:36:5a:ce:b3:20:7f:31:ba:ea:
6b:7c:72:b0:74:f7:84:46:5a:41:55:41:bc:19:0e:
91:59:2d:42:1d:4d:0d:0e:dc:e5:57:47:75:59:dc:
35:be:d5:02:bd:6a:39:07:b7:c5:25:bc:91:6c:c7:
6b:a1:20:0d:57:52:8e:bb:72:2e:d9:ea:4e:34:b1:
37:1e:a7:d8:b4:e5:fd:e9:ca:47:19:8b:64:7e:73:
3c:f7:7a:0f:66:c3:f5:57:4f:09:7d:8d:49:15:83:
c1:69:8c:27:2c:ee:ab:09:ca:f4:2d:32:5a:25:5b:
43:15:fa:d7:dc:50:31:32:e5:a3:27:ed:69:62:21:
74:f4:29:f5:f3:4d:26:88:15:f9:e4:4b:89:12:31:
0e:06:cb:58:d0:74:dc:67:bf:dd:27:1a:28:9d:4c:
a7:70:c1:e0:44:dd:16:4b:bd:0b:e4:74:a9:f0:f2:
ec:ba:62:5f:ab:33:2a:16:4d:6e:cf:f2:01:05:fc:
fa:6f:f4:51:cc:2e:fb:7e:d9:e4:05:d5:e2:6b:86:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F3:6E:5E:9C:51:44:D4:73:F2:2E:60:91:92:EF:5D:9D:CE:B5:A8
X509v3 Authority Key Identifier:
keyid:5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1a:91:57:81:8d:ea:cd:a6:fc:cd:d7:38:39:7a:3d:e6:cf:
fc:bc:cb:94:82:b5:f6:83:90:c1:45:97:7f:2d:9d:27:9f:d9:
eb:b5:ac:84:73:c6:47:81:10:4f:02:af:8b:6b:85:c6:a9:6c:
d2:83:5e:ff:c2:bd:c6:16:d2:f5:4a:9f:7b:39:98:54:04:80:
4f:a8:9f:d9:11:8d:14:ab:1c:47:27:22:d4:86:02:4c:a5:be:
eb:d4:db:23:b9:f0:a5:36:86:71:28:fc:64:94:96:62:9e:f8:
69:84:8e:9b:74:59:bd:72:1c:81:b4:ad:46:9d:95:d8:99:65:
e1:4d:a0:17:4e:d3:99:5e:e0:8f:65:cb:46:ec:20:b0:de:85:
a0:53:9d:b2:f9:3e:0a:18:24:3b:38:a2:35:f1:22:2c:82:d7:
e7:43:51:30:d9:db:77:4f:e1:3b:7a:b8:5e:7e:f5:50:c4:86:
0a:03:d5:b9:5c:3d:28:94:e6:03:6d:58:a2:86:37:48:c1:ae:
cf:7e:fd:8b:bf:3e:39:d3:b4:ef:3e:2b:3d:29:e4:0d:ab:08:
0f:d1:20:58:f1:f0:cc:ed:eb:69:cb:bb:94:90:37:bc:cf:53:
e4:43:7c:72:5a:20:4e:cc:1d:97:66:b2:a2:a5:2c:15:eb:76:
a7:97:d5:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6wCSfeypW5fgpS5YXq/LuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYjc0NjZkOGU5MmIyMWM3YjFhYTEzNWYzMGVmZTZlNzNl
MWY4NmMwHhcNMjUwODA1MTUwMTA5WhcNMjUwODA2MTUwMTA5WjAzMTEwLwYDVQQD
Eyg5YWYzNmU1ZTljNTE0NGQ0NzNmMjJlNjA5MTkyZWY1ZDlkY2ViNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LemgiJHni86wYHbG30w8Bo6NWk2
7hMjV3AqsyFMIIUT4ei9pqGCI4tCOu4feEoaIYI2Ws6zIH8xuuprfHKwdPeERlpB
VUG8GQ6RWS1CHU0NDtzlV0d1Wdw1vtUCvWo5B7fFJbyRbMdroSANV1KOu3Iu2epO
NLE3HqfYtOX96cpHGYtkfnM893oPZsP1V08JfY1JFYPBaYwnLO6rCcr0LTJaJVtD
FfrX3FAxMuWjJ+1pYiF09Cn1800miBX55EuJEjEOBstY0HTcZ7/dJxoonUyncMHg
RN0WS70L5HSp8PLsumJfqzMqFk1uz/IBBfz6b/RRzC77ftnkBdXia4ad9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrzbl6cUUTUc/IuYJGS712dzrWoMB8GA1UdIwQY
MBaAFF+3Rm2OkrIcexqhNfMO/m5z4fhsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdkR2JZNlNzaHg3R3FFMTh3Ny1iblBoLUd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZWQyODktZDY2MS00MzQzLWEyZTAt
MGI5MjY3OWQzNjI1LzEvWDdkR2JZNlNzaHg3R3FFMTh3Ny1iblBoLUd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZWQyODktZDY2MS00MzQzLWEyZTAtMGI5MjY3OWQzNjI1
LzEvWDdkR2JZNlNzaHg3R3FFMTh3Ny1iblBoLUd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBqRV4GN
6s2m/M3XODl6PebP/LzLlIK19oOQwUWXfy2dJ5/Z67WshHPGR4EQTwKvi2uFxqls
0oNe/8K9xhbS9UqfezmYVASAT6if2RGNFKscRyci1IYCTKW+69TbI7nwpTaGcSj8
ZJSWYp74aYSOm3RZvXIcgbStRp2V2Jll4U2gF07TmV7gj2XLRuwgsN6FoFOdsvk+
ChgkOziiNfEiLILX50NRMNnbd0/hO3q4Xn71UMSGCgPVuVw9KJTmA21YooY3SMGu
z379i78+OdO07z4rPSnkDasID9EgWPHwzO3racu7lJA3vM9T5EN8clogTswdl2ay
oqUsFet2p5fVDQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:50 2025 by rpki-client