Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: 3PUIX5J+jvaXAhL/a/DoOSIe+wrDRy78usD4KX/8wDM=
Subject key identifier: E8:53:CF:B5:A8:D9:34:7F:82:94:19:3D:79:35:A3:57:D0:5A:12:A4
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 019770759F7B39E3B532BC6F3593EEFD6A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 1238
Signing time: Sat 14 Jun 2025 22:00:46 +0000
Manifest this update: Sat 14 Jun 2025 22:00:46 +0000
Manifest next update: Sun 15 Jun 2025 22:00:46 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: 0R1yS2Li46XB2fxCDOGpupnpn3NRxMdDVCw8eUUts+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:9f:7b:39:e3:b5:32:bc:6f:35:93:ee:fd:6a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Jun 14 22:00:46 2025 GMT
Not After : Jun 15 22:00:46 2025 GMT
Subject: CN=e853cfb5a8d9347f8294193d7935a357d05a12a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:59:22:00:29:13:01:32:47:70:ac:94:60:
4b:8b:b0:ab:2a:2a:c1:13:e0:1a:ca:13:6d:e9:89:
06:80:60:eb:c0:6b:ae:7d:b3:56:f5:b4:5a:35:1e:
e5:de:ce:11:6b:b1:41:0d:d1:c6:e0:49:dc:f1:f5:
3b:0c:aa:69:c8:a5:5d:f9:bd:68:b9:a1:00:16:0d:
9b:3d:17:16:ff:37:b6:2a:07:10:08:ba:5c:ab:4b:
be:6c:cc:8a:91:8f:27:3c:da:20:d1:dd:e9:c7:27:
80:e4:a4:74:19:65:eb:5b:16:d1:90:04:eb:ef:c6:
64:73:c0:83:39:a9:15:17:f9:7c:e4:1e:37:aa:00:
fe:59:2e:d7:86:b6:3a:d2:0c:f4:db:08:a3:81:f8:
0d:40:c5:c0:38:8d:78:47:7c:2b:3d:e0:1c:26:7a:
28:37:2f:cb:de:a6:71:1f:59:ea:54:8f:f7:b4:b0:
94:e0:6a:34:f2:9c:94:de:a2:63:03:7c:61:20:47:
50:d8:bc:cc:7b:77:d9:fb:29:ee:73:9d:1c:26:64:
4c:49:80:b3:e6:63:35:32:5a:c1:28:9a:d3:29:8f:
28:b2:07:2f:f8:e6:89:66:bf:ac:1f:df:73:0f:af:
0c:53:dc:2c:df:75:32:f7:ed:05:54:08:91:0b:a7:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:CF:B5:A8:D9:34:7F:82:94:19:3D:79:35:A3:57:D0:5A:12:A4
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4e:97:61:c9:4f:07:67:0e:ac:50:7d:40:26:fa:f5:47:5b:
11:cd:a8:cd:5e:7a:f1:2e:a4:d0:bd:39:0e:27:c2:4b:2e:ca:
75:64:78:1d:21:18:b1:c2:b7:51:31:01:34:1a:54:13:bb:e1:
2b:7c:0e:d0:8b:c1:a5:de:a5:69:f7:3d:a5:64:cf:02:c3:ae:
c3:14:a3:e8:e2:14:06:f6:e0:fe:0b:69:e2:85:ee:75:ef:d8:
8f:39:ad:ea:20:f4:48:90:6b:9f:3e:f3:ba:96:65:52:95:9b:
43:a7:01:73:0e:25:31:f1:fb:f6:0f:f2:26:48:04:a7:df:5d:
98:9f:86:be:2f:38:b0:c2:98:4d:2b:2e:fb:5f:81:4d:fb:8c:
ee:ee:bc:21:45:78:8f:15:d4:3e:7f:26:ba:70:7e:f9:19:33:
89:2f:db:89:e2:dd:53:fb:b2:50:56:23:08:f0:b0:9f:b1:7d:
89:2d:06:a2:85:17:7c:ad:53:45:d8:26:ca:d8:e4:0a:a2:63:
bd:8a:e4:4a:a7:bc:00:cf:c2:0f:e2:b1:95:c0:62:1a:a1:1a:
c5:e0:fd:88:2d:0b:a2:b6:29:52:82:92:2c:59:fc:a1:27:f1:
0e:09:50:1f:1d:4e:45:e1:f5:3d:cf:2e:a9:ba:62:d0:48:ef:
54:cf:5e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdZ97OeO1MrxvNZPu/WpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDBiYTUxZDYzYjE3NzU4MzdlODcyZmJkZTg0ZTJkZDA4
NzRmNjMwHhcNMjUwNjE0MjIwMDQ2WhcNMjUwNjE1MjIwMDQ2WjAzMTEwLwYDVQQD
EyhlODUzY2ZiNWE4ZDkzNDdmODI5NDE5M2Q3OTM1YTM1N2QwNWExMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuVZIgApEwEyR3CslGBLi7CrKirB
E+AayhNt6YkGgGDrwGuufbNW9bRaNR7l3s4Ra7FBDdHG4Enc8fU7DKppyKVd+b1o
uaEAFg2bPRcW/ze2KgcQCLpcq0u+bMyKkY8nPNog0d3pxyeA5KR0GWXrWxbRkATr
78Zkc8CDOakVF/l85B43qgD+WS7XhrY60gz02wijgfgNQMXAOI14R3wrPeAcJnoo
Ny/L3qZxH1nqVI/3tLCU4Go08pyU3qJjA3xhIEdQ2LzMe3fZ+ynuc50cJmRMSYCz
5mM1MlrBKJrTKY8osgcv+OaJZr+sH99zD68MU9ws33Uy9+0FVAiRC6cyMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhTz7Wo2TR/gpQZPXk1o1fQWhKkMB8GA1UdIwQY
MBaAFO8AulHWOxd1g36HL73oTi3Qh09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDIt
ODVjNTk1NDRjNmYzLzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDItODVjNTk1NDRjNmYz
LzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE6XYclP
B2cOrFB9QCb69UdbEc2ozV568S6k0L05DifCSy7KdWR4HSEYscK3UTEBNBpUE7vh
K3wO0IvBpd6lafc9pWTPAsOuwxSj6OIUBvbg/gtp4oXude/Yjzmt6iD0SJBrnz7z
upZlUpWbQ6cBcw4lMfH79g/yJkgEp99dmJ+Gvi84sMKYTSsu+1+BTfuM7u68IUV4
jxXUPn8munB++RkziS/bieLdU/uyUFYjCPCwn7F9iS0GooUXfK1TRdgmytjkCqJj
vYrkSqe8AM/CD+KxlcBiGqEaxeD9iC0LorYpUoKSLFn8oSfxDglQHx1OReH1Pc8u
qbpi0EjvVM9e5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:11:43 2025 by rpki-client