Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: pMPHmCzt0+paQ5nydxW2C9UyP2oRMnVqctYqDW4O8+Y=
Subject key identifier: 5D:DF:8D:82:B2:1B:0B:82:60:20:B1:4C:5E:82:1A:61:43:E2:ED:72
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 01976A05CCE2186064B845861A5204F84D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 047B
Signing time: Fri 13 Jun 2025 16:00:54 +0000
Manifest this update: Fri 13 Jun 2025 16:00:54 +0000
Manifest next update: Sat 14 Jun 2025 16:00:54 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: rSLCViXC32R5LaBjW1bpYURoIgmrt/gM9zZRFt0b6xo=)
2: Q_EK-erWHPnTXBrHVmcWbytpcis.roa (hash: mtRhYkTuoZWGkXxI5IGoHrOZ3J63Idzep2wBOshAzrk=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:cc:e2:18:60:64:b8:45:86:1a:52:04:f8:4d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Jun 13 16:00:54 2025 GMT
Not After : Jun 14 16:00:54 2025 GMT
Subject: CN=5ddf8d82b21b0b826020b14c5e821a6143e2ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:56:73:f6:8f:31:99:8c:1d:1f:c6:c2:0c:
7e:04:47:57:e5:a1:54:ee:41:2b:29:16:70:9a:80:
6b:bd:67:2d:c4:16:5a:56:f5:be:14:57:3e:eb:e9:
98:2f:86:ea:48:78:a6:b9:b3:b2:7d:90:58:ce:39:
a3:1c:c8:20:ec:4b:ab:15:24:33:dc:f0:64:bc:d1:
b9:20:80:90:e0:28:59:46:a2:7c:fa:b6:76:de:20:
79:b6:bf:25:62:4e:8c:11:b3:59:28:e5:96:7a:75:
63:6e:8e:3b:f4:0e:87:91:e9:f0:f7:88:33:8a:f0:
f6:f1:1d:52:11:23:8c:df:94:6b:52:1b:88:0a:bc:
79:eb:c9:62:25:34:a5:2e:8f:76:45:2c:8b:43:7d:
ab:b0:9e:65:a0:36:ef:cd:e5:3d:cb:fd:b3:ad:f0:
1b:5d:6c:9f:ce:6a:0b:4e:b9:6f:60:5c:04:fd:ab:
43:a3:1d:19:fe:2f:5d:8d:c9:7a:06:42:11:66:21:
9d:18:9c:54:a3:73:01:3d:44:f7:67:8f:8c:16:47:
24:85:55:4d:a7:7f:f0:0d:6f:23:61:27:9e:72:65:
e7:d9:10:32:f6:0b:63:4a:88:d6:5a:88:2f:64:a9:
72:08:ea:d1:bf:31:af:62:3e:6c:75:10:7a:68:68:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:8D:82:B2:1B:0B:82:60:20:B1:4C:5E:82:1A:61:43:E2:ED:72
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:9f:90:91:61:82:dc:7e:fa:24:74:44:1c:02:25:2f:25:85:
54:60:35:48:cd:05:69:cd:be:0c:1f:21:0f:0c:a6:d7:36:5b:
0d:50:16:c9:d0:a6:a1:bc:b2:49:98:49:dd:85:bd:01:7d:d3:
0b:4f:7f:37:7f:68:1f:3f:81:a9:2d:64:c7:3d:46:b3:0d:30:
6e:49:3e:6c:1a:9a:ac:5c:54:65:dc:71:b5:bd:97:82:65:75:
be:7f:30:cd:21:1c:59:37:07:a5:1b:3b:3f:dc:8f:2a:f0:16:
4b:fa:c8:e9:23:8f:17:c4:38:4f:1a:ee:ca:8a:b8:7d:81:36:
64:91:09:82:37:04:32:67:6c:7f:ad:40:20:e3:ce:57:23:21:
37:ac:fd:c0:7a:80:74:d1:f9:89:44:af:e2:07:3f:b3:0b:ee:
13:24:af:55:f0:6d:a0:be:03:56:f0:a8:80:f2:f6:1e:2c:7c:
a2:b5:3c:d5:66:1a:87:9f:48:62:b7:57:6c:65:04:b5:51:d3:
7a:64:88:cd:8a:2e:66:df:79:5c:c5:09:7a:46:a5:69:ec:8c:
5e:55:8d:81:61:75:11:97:4c:9c:49:2d:e5:a6:84:9c:b5:36:
02:e2:c6:f2:b9:37:81:57:90:45:a4:8f:71:6e:05:86:00:79:
28:06:c3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBcziGGBkuEWGGlIE+E2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMmVmZTNiNjNmYTliMmE3OTMyYzViNWVjODU0YjcwYzNm
MTg4MzkwHhcNMjUwNjEzMTYwMDU0WhcNMjUwNjE0MTYwMDU0WjAzMTEwLwYDVQQD
Eyg1ZGRmOGQ4MmIyMWIwYjgyNjAyMGIxNGM1ZTgyMWE2MTQzZTJlZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAVWc/aPMZmMHR/Gwgx+BEdX5aFU
7kErKRZwmoBrvWctxBZaVvW+FFc+6+mYL4bqSHimubOyfZBYzjmjHMgg7EurFSQz
3PBkvNG5IICQ4ChZRqJ8+rZ23iB5tr8lYk6MEbNZKOWWenVjbo479A6Hkenw94gz
ivD28R1SESOM35RrUhuICrx568liJTSlLo92RSyLQ32rsJ5loDbvzeU9y/2zrfAb
XWyfzmoLTrlvYFwE/atDox0Z/i9djcl6BkIRZiGdGJxUo3MBPUT3Z4+MFkckhVVN
p3/wDW8jYSeecmXn2RAy9gtjSojWWogvZKlyCOrRvzGvYj5sdRB6aGh4IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3fjYKyGwuCYCCxTF6CGmFD4u1yMB8GA1UdIwQY
MBaAFA0u/jtj+psqeTLFteyFS3DD8Yg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFM3LU8yUDZteXA1TXNXMTdJVkxjTVB4aURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hZTBhOTMtZjY5MC00ZTM2LWJlZmEt
OTFhMzQ5ZTc3NDc4LzEvRFM3LU8yUDZteXA1TXNXMTdJVkxjTVB4aURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hZTBhOTMtZjY5MC00ZTM2LWJlZmEtOTFhMzQ5ZTc3NDc4
LzEvRFM3LU8yUDZteXA1TXNXMTdJVkxjTVB4aURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzp+QkWGC
3H76JHREHAIlLyWFVGA1SM0Fac2+DB8hDwym1zZbDVAWydCmobyySZhJ3YW9AX3T
C09/N39oHz+BqS1kxz1Gsw0wbkk+bBqarFxUZdxxtb2XgmV1vn8wzSEcWTcHpRs7
P9yPKvAWS/rI6SOPF8Q4Txruyoq4fYE2ZJEJgjcEMmdsf61AIOPOVyMhN6z9wHqA
dNH5iUSv4gc/swvuEySvVfBtoL4DVvCogPL2Hix8orU81WYah59IYrdXbGUEtVHT
emSIzYouZt95XMUJekalaeyMXlWNgWF1EZdMnEkt5aaEnLU2AuLG8rk3gVeQRaSP
cW4FhgB5KAbD7g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:20 2025 by rpki-client