Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: Rqq3GrphQBS8nTSZeXwyOWOSSV7Z02hEoyhTMUU/1XE=
Subject key identifier: 59:FB:0C:1F:4E:7E:3D:7B:56:41:43:3D:8E:82:C3:76:25:1A:FA:6A
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019769CEDF605E8EEFDBE94FF06161380F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 0443
Signing time: Fri 13 Jun 2025 15:00:54 +0000
Manifest this update: Fri 13 Jun 2025 15:00:54 +0000
Manifest next update: Sat 14 Jun 2025 15:00:54 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: H4Ve4J6GUKISPaQ6q2kh0mP9UXW244L17/CRj3aIGQY=)
2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:df:60:5e:8e:ef:db:e9:4f:f0:61:61:38:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Jun 13 15:00:54 2025 GMT
Not After : Jun 14 15:00:54 2025 GMT
Subject: CN=59fb0c1f4e7e3d7b5641433d8e82c376251afa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:fa:24:ae:d9:cb:0e:17:ab:a2:db:3b:72:
f9:2c:85:60:0a:05:21:41:fa:e2:ca:ff:e8:3e:5d:
49:b1:cc:be:90:b2:1a:eb:5f:de:4d:7a:bc:d3:25:
ef:54:2e:7b:97:14:7e:c2:77:07:ed:19:fb:5e:0d:
e6:5e:57:9c:92:74:8c:76:7a:c1:9e:3d:56:4a:ce:
dc:f7:68:5e:54:5c:f4:5e:b0:7a:ca:63:9e:05:72:
e3:52:d3:30:2d:60:60:bd:2b:3e:ad:d4:ca:39:c0:
11:49:37:ee:5d:22:0c:eb:8c:1a:66:be:01:08:17:
eb:7f:01:85:66:c7:42:b0:34:d0:b8:41:dc:e3:de:
fe:53:f1:6c:15:a0:91:cb:07:2a:91:ba:6f:13:ac:
70:7a:5f:95:04:29:67:06:44:9c:0d:97:20:84:63:
14:00:10:d3:30:d7:ff:15:0a:8b:d6:03:86:60:60:
93:72:57:bf:a1:bc:d2:9f:83:9b:54:6c:1d:06:21:
51:1f:d5:92:25:95:82:37:29:69:3d:4f:83:16:d0:
a3:76:77:11:f8:13:87:2a:cb:c0:84:0d:ec:91:21:
69:c6:65:28:c1:e9:13:26:39:c0:5b:8f:5b:8c:b3:
ce:03:ed:a8:ac:10:82:96:53:7b:38:39:58:75:d0:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FB:0C:1F:4E:7E:3D:7B:56:41:43:3D:8E:82:C3:76:25:1A:FA:6A
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:b6:1f:28:2b:ea:db:a9:ac:ec:ba:78:f2:ff:c6:b3:47:
f2:03:cf:d2:68:be:a7:44:42:03:c5:e8:78:94:40:7a:31:18:
e9:0f:02:5d:9d:df:18:19:00:96:e2:12:a0:b6:60:27:66:f9:
ee:a2:be:ca:41:69:58:04:aa:51:c7:4b:0e:87:d0:ab:85:ba:
db:ca:d2:05:d1:f4:46:71:d2:3f:ca:33:c9:64:c2:4b:b7:57:
0f:86:ef:19:4c:e5:08:3f:06:ca:15:02:a3:c9:64:4a:5e:e8:
1f:52:24:5a:b4:55:39:6d:79:a4:c1:61:1c:1b:f1:3d:90:40:
25:c8:7b:3c:bc:4d:54:4b:b3:f6:14:de:2a:c3:51:5a:0c:27:
cc:8b:dd:d3:71:0e:36:f1:fd:b4:48:f0:06:9f:46:7c:e1:fb:
9c:0e:c0:9c:5c:92:ad:69:f6:93:05:08:e7:f5:e4:74:34:5b:
6a:14:67:86:1b:41:1f:1b:9e:71:b9:da:ba:cb:2a:ba:32:28:
6f:30:79:66:78:7e:85:2d:e0:52:5a:49:af:ef:f1:d4:d1:14:
d2:35:87:6e:6f:5c:7c:a5:cd:c9:51:f0:d5:ef:0d:4b:77:aa:
cd:b1:f6:d8:6a:e6:c8:e5:20:81:2c:d5:e9:d7:3c:51:ee:1c:
88:1d:58:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzt9gXo7v2+lP8GFhOA8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQyYjI4NzFjMDZlNWUyMWRmY2QwMTYwMzA3NTgxNmJk
MTQ0ODkwHhcNMjUwNjEzMTUwMDU0WhcNMjUwNjE0MTUwMDU0WjAzMTEwLwYDVQQD
Eyg1OWZiMGMxZjRlN2UzZDdiNTY0MTQzM2Q4ZTgyYzM3NjI1MWFmYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtr6JK7Zyw4Xq6LbO3L5LIVgCgUh
Qfriyv/oPl1Jscy+kLIa61/eTXq80yXvVC57lxR+wncH7Rn7Xg3mXlecknSMdnrB
nj1WSs7c92heVFz0XrB6ymOeBXLjUtMwLWBgvSs+rdTKOcARSTfuXSIM64waZr4B
CBfrfwGFZsdCsDTQuEHc497+U/FsFaCRywcqkbpvE6xwel+VBClnBkScDZcghGMU
ABDTMNf/FQqL1gOGYGCTcle/obzSn4ObVGwdBiFRH9WSJZWCNylpPU+DFtCjdncR
+BOHKsvAhA3skSFpxmUowekTJjnAW49bjLPOA+2orBCCllN7ODlYddCKmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn7DB9Ofj17VkFDPY6Cw3YlGvpqMB8GA1UdIwQY
MBaAFO29KyhxwG5eId/NAWAwdYFr0USJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTkt
ZGU2YTljMDE3ZjdiLzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTktZGU2YTljMDE3Zjdi
LzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1W2Hygr
6tuprOy6ePL/xrNH8gPP0mi+p0RCA8XoeJRAejEY6Q8CXZ3fGBkAluISoLZgJ2b5
7qK+ykFpWASqUcdLDofQq4W628rSBdH0RnHSP8ozyWTCS7dXD4bvGUzlCD8GyhUC
o8lkSl7oH1IkWrRVOW15pMFhHBvxPZBAJch7PLxNVEuz9hTeKsNRWgwnzIvd03EO
NvH9tEjwBp9GfOH7nA7AnFySrWn2kwUI5/XkdDRbahRnhhtBHxuecbnaussqujIo
bzB5Znh+hS3gUlpJr+/x1NEU0jWHbm9cfKXNyVHw1e8NS3eqzbH22GrmyOUggSzV
6dc8Ue4ciB1YBw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:06 2025 by rpki-client