Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: cz2TSktFpnIxWM9lNIxT25Rjis2LooEZCh/egyFRK38=
Subject key identifier: B7:B7:61:78:88:BD:67:5D:2F:72:53:B9:1E:7E:CA:82:9D:25:A6:17
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 0197808DCF093424EDB3D260E561ACA84E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 0C8D
Signing time: Wed 18 Jun 2025 01:01:06 +0000
Manifest this update: Wed 18 Jun 2025 01:01:06 +0000
Manifest next update: Thu 19 Jun 2025 01:01:06 +0000
Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: 3c0k5eQXO0EozgfcGpZ3jOep/Ang9PzF0fZ/YDXn/yU=)
2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:cf:09:34:24:ed:b3:d2:60:e5:61:ac:a8:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Jun 18 01:01:06 2025 GMT
Not After : Jun 19 01:01:06 2025 GMT
Subject: CN=b7b7617888bd675d2f7253b91e7eca829d25a617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:97:fd:a5:39:c8:42:06:28:31:f9:24:0f:
25:89:d6:c8:c3:3e:bf:3e:f1:2d:09:16:a1:f8:6e:
29:8f:0b:69:3b:c0:87:9a:b3:33:da:97:80:10:b2:
b2:9a:ad:c6:e7:88:25:f0:85:f6:46:59:bf:99:42:
1b:62:9f:3c:95:ae:fb:3d:28:0d:66:05:80:61:9e:
ce:7e:68:a1:af:68:fb:de:79:d8:79:45:7b:4d:24:
6a:02:fb:1c:8f:0e:8b:12:34:33:1f:03:b9:df:81:
56:12:91:02:b4:50:1b:34:cf:a3:44:29:e6:55:e7:
cc:ca:83:a6:34:d0:db:e2:9a:25:fe:7f:9b:75:b1:
38:06:f1:10:cb:ae:4c:b3:2a:d3:d5:26:eb:e0:87:
1b:71:72:f0:6c:b8:07:e1:ef:63:1a:c1:1b:92:fb:
ed:8a:5d:6a:b4:46:fc:e7:4c:7a:6a:97:49:a7:2d:
4a:bd:35:40:8d:b9:a5:24:7e:dc:0a:b8:4c:cd:85:
42:45:50:4b:da:07:bf:07:4f:0a:61:ad:8e:e0:5f:
ea:70:05:74:b3:29:db:03:a1:37:81:72:c6:a9:65:
36:5c:5c:16:fb:a3:56:9c:d9:c1:93:64:31:db:13:
49:ae:bc:7d:9f:a7:d3:34:b4:7a:8c:7d:bd:df:c1:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:61:78:88:BD:67:5D:2F:72:53:B9:1E:7E:CA:82:9D:25:A6:17
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:a8:3c:22:af:63:91:d4:34:94:ee:49:7b:0e:60:b2:48:
c4:06:f2:c0:a9:fb:c0:79:95:b6:d9:50:08:7c:57:81:ae:4f:
5a:01:af:61:f4:79:91:85:84:6a:16:d6:1c:ff:39:e9:73:94:
f4:f7:60:7b:74:4c:2e:1b:dc:2c:28:89:10:8c:ed:88:90:d0:
a7:78:34:46:7e:2c:79:72:94:98:c5:b9:67:69:f7:9d:52:a9:
2c:df:20:c3:9c:b8:cd:c9:08:9d:aa:6a:f0:93:a8:89:15:b8:
e5:c6:5a:35:03:57:9b:36:5e:34:c5:4e:95:c4:8e:cc:fe:bf:
56:d0:66:be:54:94:55:f6:bb:86:a7:8d:af:c0:16:9d:8e:a4:
e1:53:c2:83:22:2f:9e:c7:fd:aa:02:82:bf:b6:79:d3:d5:10:
61:40:00:2f:75:96:26:eb:1b:de:76:a1:8c:66:4a:27:bb:aa:
a2:9a:7d:29:17:48:5b:a0:79:aa:30:90:fd:e7:23:02:33:e6:
d5:8f:c2:56:11:9f:b7:c2:90:f6:09:cc:5f:67:71:3f:bf:db:
a9:31:99:48:f2:03:25:9f:bd:64:b2:63:b1:22:19:20:a8:71:
a3:40:43:3e:1f:26:10:cc:83:15:39:34:6f:63:d5:2b:dd:33:
86:f5:23:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAjc8JNCTts9Jg5WGsqE4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi
Y2VmMzQwHhcNMjUwNjE4MDEwMTA2WhcNMjUwNjE5MDEwMTA2WjAzMTEwLwYDVQQD
EyhiN2I3NjE3ODg4YmQ2NzVkMmY3MjUzYjkxZTdlY2E4MjlkMjVhNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyROX/aU5yEIGKDH5JA8lidbIwz6/
PvEtCRah+G4pjwtpO8CHmrMz2peAELKymq3G54gl8IX2Rlm/mUIbYp88la77PSgN
ZgWAYZ7Ofmihr2j73nnYeUV7TSRqAvscjw6LEjQzHwO534FWEpECtFAbNM+jRCnm
VefMyoOmNNDb4pol/n+bdbE4BvEQy65MsyrT1Sbr4IcbcXLwbLgH4e9jGsEbkvvt
il1qtEb850x6apdJpy1KvTVAjbmlJH7cCrhMzYVCRVBL2ge/B08KYa2O4F/qcAV0
synbA6E3gXLGqWU2XFwW+6NWnNnBk2Qx2xNJrrx9n6fTNLR6jH2938GjewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe3YXiIvWddL3JTuR5+yoKdJaYXMB8GA1UdIwQY
MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt
ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi
LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGioPCKv
Y5HUNJTuSXsOYLJIxAbywKn7wHmVttlQCHxXga5PWgGvYfR5kYWEahbWHP856XOU
9Pdge3RMLhvcLCiJEIztiJDQp3g0Rn4seXKUmMW5Z2n3nVKpLN8gw5y4zckInapq
8JOoiRW45cZaNQNXmzZeNMVOlcSOzP6/VtBmvlSUVfa7hqeNr8AWnY6k4VPCgyIv
nsf9qgKCv7Z509UQYUAAL3WWJusb3nahjGZKJ7uqopp9KRdIW6B5qjCQ/ecjAjPm
1Y/CVhGft8KQ9gnMX2dxP7/bqTGZSPIDJZ+9ZLJjsSIZIKhxo0BDPh8mEMyDFTk0
b2PVK90zhvUjiQ==
-----END CERTIFICATE-----
Generated at Wed Jun 18 11:30:29 2025 by rpki-client