Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: UkKblu9crP3vpVyouT7bX0ribl82Gx/9im9QAX5odLM=
Subject key identifier: 3C:7A:5F:CC:29:A9:89:0E:B6:82:04:44:37:EA:B3:C5:A7:BC:76:2D
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01976F99AE0C4F2CE6E7824AC1429659F455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1379
Signing time: Sat 14 Jun 2025 18:00:31 +0000
Manifest this update: Sat 14 Jun 2025 18:00:31 +0000
Manifest next update: Sun 15 Jun 2025 18:00:31 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: bCn6shrYeoM7K21HT4T0nx16iJnj4/r9KC7c7gPtSCQ=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:ae:0c:4f:2c:e6:e7:82:4a:c1:42:96:59:f4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jun 14 18:00:31 2025 GMT
Not After : Jun 15 18:00:31 2025 GMT
Subject: CN=3c7a5fcc29a9890eb682044437eab3c5a7bc762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:2e:90:56:0f:e8:5f:6b:8b:06:d6:63:bb:
20:f9:99:7c:da:46:0c:19:2a:1d:92:e6:b7:34:ce:
4c:b1:08:f5:cd:42:25:8f:2f:5b:2e:ad:b8:e3:e7:
da:66:4c:f4:bf:4e:99:a8:b5:75:d3:6f:cd:85:c6:
96:5d:73:c0:97:f1:4a:c2:3f:98:b4:16:84:15:62:
e0:61:6b:70:c4:5d:35:6a:cf:12:28:3a:2f:63:98:
a8:a2:15:af:03:32:bf:39:55:01:74:a0:45:81:43:
d2:fc:b9:d5:f9:aa:b0:90:ec:b1:f8:98:53:14:8f:
ba:64:49:53:df:a3:50:54:15:2c:e5:c4:06:ba:31:
f6:4c:d2:18:a3:52:2a:e3:10:4e:89:f0:78:a6:c1:
f1:ba:c2:8c:dd:0f:84:d8:12:48:34:21:63:5c:d4:
d0:8d:79:ae:f6:54:5e:1e:93:a3:e7:b4:14:f2:6b:
42:3f:35:84:6e:14:c0:19:3e:4b:08:cd:aa:2e:96:
8a:2f:12:9e:87:a5:e1:5d:8f:65:11:44:10:38:13:
40:fe:75:d4:e6:28:fe:c9:e8:e7:6e:3a:aa:83:82:
39:58:e2:25:80:77:53:f2:38:13:e1:e3:43:ce:89:
d7:43:24:6e:7e:6e:a3:e9:92:fb:8e:40:b4:e7:23:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:5F:CC:29:A9:89:0E:B6:82:04:44:37:EA:B3:C5:A7:BC:76:2D
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7b:2b:f7:3e:15:4a:5c:58:ec:9e:9d:92:42:89:2f:2d:79:
0f:20:d8:67:a0:c1:4a:92:96:83:4f:a1:49:b5:22:2c:12:9e:
23:0b:2f:e8:9b:3d:c9:7a:c3:9b:f7:e4:49:eb:fb:42:4d:64:
e0:51:c2:1c:ee:41:89:17:85:9f:cf:df:3c:6d:ab:e8:a3:44:
83:c3:f4:1f:25:3d:53:35:7b:0b:65:e0:ef:da:5c:f3:8f:50:
a7:38:bb:75:a5:a9:54:91:0f:63:98:3d:57:1b:37:54:63:77:
f5:98:0e:39:fc:1d:3a:78:45:35:e5:aa:b7:00:bb:f4:0a:07:
a0:62:bd:7e:b7:eb:ea:3a:63:b2:14:90:73:33:4d:98:68:97:
8d:85:79:e3:8d:c2:f3:2d:7d:7f:0e:1b:e1:21:37:70:40:e1:
7b:5b:ca:50:ea:50:07:02:09:1f:36:17:8e:96:ac:83:df:72:
e3:43:8b:bf:3d:ff:e2:9c:cb:80:b7:24:0a:14:03:0c:49:f6:
76:77:cb:e5:76:59:15:8c:02:16:20:b9:70:36:41:1e:60:74:
29:9b:8d:d1:a3:00:e4:05:a1:ec:39:58:14:17:e5:04:95:0d:
8e:9f:6e:46:41:72:a2:25:f0:59:1e:be:4b:0b:85:03:7d:21:
ce:19:3e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvma4MTyzm54JKwUKWWfRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz
YmExMDAwHhcNMjUwNjE0MTgwMDMxWhcNMjUwNjE1MTgwMDMxWjAzMTEwLwYDVQQD
EygzYzdhNWZjYzI5YTk4OTBlYjY4MjA0NDQzN2VhYjNjNWE3YmM3NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3QukFYP6F9riwbWY7sg+Zl82kYM
GSodkua3NM5MsQj1zUIljy9bLq244+faZkz0v06ZqLV102/NhcaWXXPAl/FKwj+Y
tBaEFWLgYWtwxF01as8SKDovY5ioohWvAzK/OVUBdKBFgUPS/LnV+aqwkOyx+JhT
FI+6ZElT36NQVBUs5cQGujH2TNIYo1Iq4xBOifB4psHxusKM3Q+E2BJINCFjXNTQ
jXmu9lReHpOj57QU8mtCPzWEbhTAGT5LCM2qLpaKLxKeh6XhXY9lEUQQOBNA/nXU
5ij+yejnbjqqg4I5WOIlgHdT8jgT4eNDzonXQyRufm6j6ZL7jkC05yN4ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx6X8wpqYkOtoIERDfqs8WnvHYtMB8GA1UdIwQY
MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt
MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3
LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHsr9z4V
SlxY7J6dkkKJLy15DyDYZ6DBSpKWg0+hSbUiLBKeIwsv6Js9yXrDm/fkSev7Qk1k
4FHCHO5BiReFn8/fPG2r6KNEg8P0HyU9UzV7C2Xg79pc849Qpzi7daWpVJEPY5g9
Vxs3VGN39ZgOOfwdOnhFNeWqtwC79AoHoGK9frfr6jpjshSQczNNmGiXjYV5443C
8y19fw4b4SE3cEDhe1vKUOpQBwIJHzYXjpasg99y40OLvz3/4pzLgLckChQDDEn2
dnfL5XZZFYwCFiC5cDZBHmB0KZuN0aMA5AWh7DlYFBflBJUNjp9uRkFyoiXwWR6+
SwuFA30hzhk+pA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:07:30 2025 by rpki-client