
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: DLpZQmBOGSKuKH71UrJq5GPsmYj2y6R14iEDhU8ELvw=
Subject key identifier: BB:6A:65:B6:5F:22:9F:35:25:89:2C:0C:8E:4D:C1:74:95:8C:A3:93
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019885E8811F64E012EF41042F3FEC10373E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1634
Signing time: Thu 07 Aug 2025 19:01:03 +0000
Manifest this update: Thu 07 Aug 2025 19:01:03 +0000
Manifest next update: Fri 08 Aug 2025 19:01:03 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: 1zMSEwPF45f3rZbMlhgLYvbzUGtTfAZqBYWQ7Knqio4=)
2: BuLlbSCfr8m5R0bdvUy2auaVYo4.roa (hash: 5vhRJn1bAKiGFLiI67C1axUPj/VuaBvfb8oPGD+JOlw=)
3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e8:81:1f:64:e0:12:ef:41:04:2f:3f:ec:10:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Aug 7 19:01:03 2025 GMT
Not After : Aug 8 19:01:03 2025 GMT
Subject: CN=bb6a65b65f229f3525892c0c8e4dc174958ca393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:37:c0:0a:68:fc:93:c4:d1:d3:fd:9a:3f:
d2:51:bf:d7:a9:f3:ce:ee:28:f1:af:3d:65:96:e6:
e1:e1:18:06:bb:a0:df:75:fb:16:82:ce:cd:34:06:
c0:c3:26:51:c1:ca:0e:f2:98:db:6c:db:2d:f3:e0:
91:5a:a0:18:cd:b1:a8:38:b4:fa:11:b1:70:bb:96:
93:f3:ea:34:c2:a1:f5:29:8e:b9:6f:83:cb:42:80:
d7:25:6b:cb:a1:7d:e5:99:e2:c0:5d:ff:cf:25:1a:
1e:40:11:5a:a8:48:43:93:a8:7e:ce:d3:8e:29:fb:
3d:07:51:51:12:b4:b8:dd:bf:32:08:e9:14:5c:5c:
73:da:b0:bf:36:9a:91:78:68:22:83:54:e9:35:75:
97:86:40:5a:e4:e9:25:eb:83:da:2a:f0:c2:8a:e7:
20:1e:89:82:58:5f:90:5e:40:dc:92:f3:41:54:75:
d2:31:5d:68:d5:8a:63:f1:2a:b1:43:ad:9f:1b:7c:
51:1b:f9:6b:04:77:a2:27:e0:28:29:44:4f:d0:99:
9c:8a:88:bf:06:5e:fb:d7:45:d1:7c:cd:ae:9d:4d:
f9:63:e7:60:a3:f4:9d:5a:b2:ee:1d:ae:ef:cf:6b:
a6:72:9c:53:18:7a:04:cd:5f:b0:3d:ad:59:7c:de:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:65:B6:5F:22:9F:35:25:89:2C:0C:8E:4D:C1:74:95:8C:A3:93
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:07:ce:92:82:06:c3:97:c5:26:09:2d:06:1f:ae:c7:e9:6d:
af:52:e4:31:f1:f2:16:ae:f8:d6:1b:a0:5d:75:0b:45:ed:8c:
05:e5:93:9f:20:7d:1a:a6:f4:7e:59:7d:66:dd:a1:83:99:be:
1b:92:f9:6e:a8:50:d9:fd:e9:10:e7:55:a2:12:39:1b:4d:c8:
e2:c4:9e:83:44:71:36:8b:e1:55:0e:a9:5d:3c:a8:1f:25:62:
65:7b:22:c7:cf:24:85:06:2d:c5:b7:68:cf:d7:32:39:e9:bb:
d1:58:4f:2f:bb:20:b7:94:ba:0d:29:60:3e:06:5c:5e:35:2b:
81:6d:fc:57:08:db:fe:5a:4e:78:f6:d9:1e:3b:08:6a:9a:9f:
f5:c6:1c:ce:1b:ad:68:35:bb:85:dc:35:c2:81:bb:0b:90:f0:
61:59:a0:24:37:1a:5d:d0:0f:09:f9:a3:12:12:9c:f2:46:ad:
35:e3:04:e4:ff:63:94:3a:37:97:31:28:fd:69:21:49:5e:b0:
79:75:24:13:d6:45:d0:af:1d:c5:14:7d:7f:ab:8a:2a:cf:74:
a7:84:f7:b9:d7:7f:78:68:26:df:8c:9e:ab:85:20:7b:0b:99:
85:79:8d:76:a9:4c:36:41:96:f7:bc:73:fe:33:1d:b5:0d:48:
da:20:0e:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiF6IEfZOAS70EELz/sEDc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2
NjIxYjkwHhcNMjUwODA3MTkwMTAzWhcNMjUwODA4MTkwMTAzWjAzMTEwLwYDVQQD
EyhiYjZhNjViNjVmMjI5ZjM1MjU4OTJjMGM4ZTRkYzE3NDk1OGNhMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Y3wApo/JPE0dP9mj/SUb/XqfPO
7ijxrz1llubh4RgGu6DfdfsWgs7NNAbAwyZRwcoO8pjbbNst8+CRWqAYzbGoOLT6
EbFwu5aT8+o0wqH1KY65b4PLQoDXJWvLoX3lmeLAXf/PJRoeQBFaqEhDk6h+ztOO
Kfs9B1FRErS43b8yCOkUXFxz2rC/NpqReGgig1TpNXWXhkBa5Okl64PaKvDCiucg
HomCWF+QXkDckvNBVHXSMV1o1Ypj8SqxQ62fG3xRG/lrBHeiJ+AoKURP0Jmcioi/
Bl7710XRfM2unU35Y+dgo/SdWrLuHa7vz2umcpxTGHoEzV+wPa1ZfN7cVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtqZbZfIp81JYksDI5NwXSVjKOTMB8GA1UdIwQY
MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt
YzFhZGRkN2RlYmFhLzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh
LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAfOkoIG
w5fFJgktBh+ux+ltr1LkMfHyFq741hugXXULRe2MBeWTnyB9Gqb0fll9Zt2hg5m+
G5L5bqhQ2f3pEOdVohI5G03I4sSeg0RxNovhVQ6pXTyoHyViZXsix88khQYtxbdo
z9cyOem70VhPL7sgt5S6DSlgPgZcXjUrgW38Vwjb/lpOePbZHjsIapqf9cYczhut
aDW7hdw1woG7C5DwYVmgJDcaXdAPCfmjEhKc8katNeME5P9jlDo3lzEo/WkhSV6w
eXUkE9ZF0K8dxRR9f6uKKs90p4T3udd/eGgm34yeq4UgewuZhXmNdqlMNkGW97xz
/jMdtQ1I2iAOeQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:00:55 2025 by rpki-client