Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: XL1Unccpy96lXFvN4xjM6B3Ep4AxzG0QHq19eo15YuU=
Subject key identifier: 5F:64:FA:8E:D8:54:4A:9C:93:BD:F5:BB:C5:3F:04:C5:06:27:96:9E
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 01977CB06A58BD58AE1E3D5D7813AFA98C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 159A
Signing time: Tue 17 Jun 2025 07:00:25 +0000
Manifest this update: Tue 17 Jun 2025 07:00:25 +0000
Manifest next update: Wed 18 Jun 2025 07:00:25 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: hS7rpKH0Tpeady6HOtqKRGuJ0rDE4sUACCpUFpj/hF8=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:6a:58:bd:58:ae:1e:3d:5d:78:13:af:a9:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Jun 17 07:00:25 2025 GMT
Not After : Jun 18 07:00:25 2025 GMT
Subject: CN=5f64fa8ed8544a9c93bdf5bbc53f04c50627969e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:bc:36:d0:99:ba:35:56:99:1e:63:2a:5c:
47:75:87:09:a3:76:15:73:46:aa:dd:ba:ae:20:14:
75:20:e4:b6:6a:be:b9:9e:b9:03:33:2b:b5:5e:47:
9f:c0:24:48:b0:be:5a:5a:c3:f3:23:43:9f:ef:88:
66:44:27:1c:a0:bf:ef:59:fd:99:26:a0:5e:f2:6f:
80:b6:fe:33:eb:cc:b0:7d:4f:b5:d9:41:f7:f9:04:
81:4d:5e:70:ca:4d:62:77:5f:6e:2d:07:2d:6e:de:
ea:7e:d2:bc:f1:53:6a:96:57:7b:2f:69:5b:76:82:
8a:60:fd:1f:ec:36:62:fd:8c:5e:47:90:7a:99:07:
e2:2c:87:71:ee:71:dc:22:43:ea:34:2b:12:4a:45:
3c:06:62:9f:ad:80:6a:fd:7c:dc:b7:40:0c:58:0a:
92:38:40:97:85:4f:41:a6:49:31:da:81:fa:62:9f:
ff:25:0c:f6:9d:0a:d6:24:aa:38:2c:03:f7:c9:43:
c5:62:c2:2f:1f:6b:00:2a:7f:cf:b7:e6:6b:1e:82:
22:8b:89:c0:ad:0f:fe:d2:ac:e6:50:1a:5a:3d:4c:
47:5e:55:5e:17:e7:0a:a2:ad:c7:05:a5:3c:a3:29:
05:b5:5d:47:8d:7b:19:d6:48:64:dc:42:95:da:90:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:64:FA:8E:D8:54:4A:9C:93:BD:F5:BB:C5:3F:04:C5:06:27:96:9E
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:c1:2a:64:a7:b2:55:4f:95:95:5b:7b:c0:5c:db:58:a3:
3b:77:41:00:b3:66:1d:db:35:a6:12:c0:77:e6:f4:40:eb:c9:
06:ba:56:d9:a6:14:9e:ea:3e:6e:aa:d8:33:1f:00:a7:b0:50:
0a:c6:e3:0a:20:66:75:9c:b0:78:f1:64:3c:43:52:c2:3c:9f:
e8:75:b3:be:04:d2:2f:8f:d8:42:25:5a:fd:33:82:59:75:be:
cb:3b:5f:ce:b0:56:62:e6:ea:29:b1:cb:ef:48:25:c1:98:95:
f9:e8:d6:96:80:04:49:8a:c9:df:8e:91:fe:bd:a4:b0:d6:5b:
90:d7:3b:29:41:36:0b:ce:4d:20:af:c7:d6:cf:db:9f:e4:1a:
eb:c4:ff:66:69:4e:53:d3:03:70:87:cb:0a:bf:2a:fd:56:be:
05:02:d8:d8:c7:ae:39:bc:df:23:3c:ce:86:92:07:72:59:97:
c2:16:66:b5:7f:c7:7a:80:49:57:e9:a8:b7:96:a0:ea:bb:25:
5d:4b:00:c5:48:57:18:d6:33:9a:bf:d2:17:e5:f2:d1:62:32:
fb:c2:91:9c:67:45:06:89:61:de:7c:bb:3b:6e:b7:50:ac:4c:
9b:85:a8:85:91:15:35:b1:75:06:a7:fa:93:68:83:de:63:49:
2c:1e:d1:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8sGpYvViuHj1deBOvqYwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOTU1MzNlZjQ3ZmQ5NGI4YzU1NGRmM2QyMjhlZWRjZDRj
YTAzODQwHhcNMjUwNjE3MDcwMDI1WhcNMjUwNjE4MDcwMDI1WjAzMTEwLwYDVQQD
Eyg1ZjY0ZmE4ZWQ4NTQ0YTljOTNiZGY1YmJjNTNmMDRjNTA2Mjc5NjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDu8NtCZujVWmR5jKlxHdYcJo3YV
c0aq3bquIBR1IOS2ar65nrkDMyu1XkefwCRIsL5aWsPzI0Of74hmRCccoL/vWf2Z
JqBe8m+Atv4z68ywfU+12UH3+QSBTV5wyk1id19uLQctbt7qftK88VNqlld7L2lb
doKKYP0f7DZi/YxeR5B6mQfiLIdx7nHcIkPqNCsSSkU8BmKfrYBq/Xzct0AMWAqS
OECXhU9Bpkkx2oH6Yp//JQz2nQrWJKo4LAP3yUPFYsIvH2sAKn/Pt+ZrHoIii4nA
rQ/+0qzmUBpaPUxHXlVeF+cKoq3HBaU8oykFtV1HjXsZ1khk3EKV2pCkdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9k+o7YVEqck731u8U/BMUGJ5aeMB8GA1UdIwQY
MBaAFO2VUz70f9lLjFVN89Io7tzUygOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUt
MTRkYTc5ZDZjM2FhLzEvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUtMTRkYTc5ZDZjM2Fh
LzEvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6TBKmSn
slVPlZVbe8Bc21ijO3dBALNmHds1phLAd+b0QOvJBrpW2aYUnuo+bqrYMx8Ap7BQ
CsbjCiBmdZywePFkPENSwjyf6HWzvgTSL4/YQiVa/TOCWXW+yztfzrBWYubqKbHL
70glwZiV+ejWloAESYrJ346R/r2ksNZbkNc7KUE2C85NIK/H1s/bn+Qa68T/ZmlO
U9MDcIfLCr8q/Va+BQLY2MeuObzfIzzOhpIHclmXwhZmtX/HeoBJV+mot5ag6rsl
XUsAxUhXGNYzmr/SF+Xy0WIy+8KRnGdFBolh3ny7O263UKxMm4WohZEVNbF1Bqf6
k2iD3mNJLB7R7w==
-----END CERTIFICATE-----
Generated at Tue Jun 17 09:34:45 2025 by rpki-client