Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: yj6N5TiQVHVcMENRVXM9wmiZRc5+NidOEBJUM0nXYc8=
Subject key identifier: 78:3E:E0:DE:6C:C2:6A:5F:BE:DF:B0:88:F9:B5:68:D2:FA:47:68:0B
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 01988733BE803F1371722F3EA2A96E847E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 12D3
Signing time: Fri 08 Aug 2025 01:02:51 +0000
Manifest this update: Fri 08 Aug 2025 01:02:51 +0000
Manifest next update: Sat 09 Aug 2025 01:02:51 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: 5U+Fsq38gm1790lrytyoTcToDzlJ/ieuPrf5kVBm6+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:33:be:80:3f:13:71:72:2f:3e:a2:a9:6e:84:7e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Aug 8 01:02:51 2025 GMT
Not After : Aug 9 01:02:51 2025 GMT
Subject: CN=783ee0de6cc26a5fbedfb088f9b568d2fa47680b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:12:ed:6b:f2:32:2c:e4:bf:85:9b:29:d5:
05:22:9d:c9:68:2c:a8:9d:36:44:17:59:74:ae:d4:
c2:cc:1b:ff:d8:1a:1b:41:75:9f:ef:d0:27:e3:b7:
e9:f0:9b:88:bf:7d:3e:02:3d:81:64:fa:99:c5:bc:
1e:76:f5:59:8b:f3:13:de:45:77:47:a8:72:67:1b:
05:22:7b:72:a8:5a:2d:97:52:4c:f3:aa:eb:17:7d:
08:e9:d1:d0:7a:24:90:e7:64:af:d5:45:39:91:b6:
71:b5:32:69:b7:9a:65:3f:6a:a2:06:90:ef:60:47:
16:f2:0d:39:ad:de:74:7c:36:3f:fb:76:cb:e1:d0:
06:0c:36:c8:a1:ea:35:da:bc:07:c2:c8:61:80:90:
bd:cd:08:3a:69:1f:e8:0c:cd:06:99:90:7c:b3:34:
fb:eb:08:1c:5e:d0:8a:88:c1:19:ac:fb:93:ca:05:
50:15:42:09:7e:38:a9:75:ab:84:d6:86:0f:71:da:
3a:95:56:4a:ca:6e:43:50:05:a0:94:71:55:09:36:
08:75:30:36:19:72:a8:17:b9:dc:8d:84:65:56:da:
f1:7c:c4:dc:73:47:0e:c3:1b:6f:3f:47:b9:53:75:
32:12:16:ba:d6:f6:05:9c:b4:ba:2b:09:20:15:cd:
57:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:E0:DE:6C:C2:6A:5F:BE:DF:B0:88:F9:B5:68:D2:FA:47:68:0B
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:67:18:d6:c0:f5:25:d2:c7:7c:eb:44:60:3f:86:5d:41:90:
96:d1:75:35:4d:be:f5:06:f3:6e:e5:18:23:d5:b3:01:90:32:
38:82:30:05:f0:e5:be:74:b7:5e:48:9f:18:4a:fe:32:d5:fc:
96:cd:3a:fb:7b:fc:df:d0:4a:51:ac:48:86:36:eb:f6:af:a2:
b8:21:1c:77:27:c2:c5:02:0b:00:34:a5:a8:af:37:ad:65:6b:
12:d5:00:83:64:26:57:87:5c:8e:91:42:32:70:35:cc:09:6c:
4c:70:79:80:a4:05:1b:c7:2c:b8:2c:64:d7:10:67:09:de:c8:
90:50:ee:42:58:57:3b:bd:2e:a1:52:bb:14:7d:ff:01:cf:64:
5e:10:37:7e:91:8d:9e:58:a3:9f:66:7a:ed:a4:4e:52:c6:7e:
bd:e0:10:ac:c5:35:64:c8:1f:f0:04:be:08:9c:0a:17:3b:63:
16:7c:59:1e:44:97:03:38:82:54:5c:5c:b0:8f:e5:4d:ed:11:
1b:29:b6:00:19:31:f6:0f:d4:b7:57:1b:fb:ad:30:5b:ad:53:
7f:ff:8a:9a:56:3c:73:02:5e:4d:f5:b3:c3:85:3a:e1:ea:89:
96:16:bf:0f:bb:40:79:f8:ac:bd:db:e1:b8:bd:a1:c8:ad:01:
67:10:62:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHM76APxNxci8+oqluhH4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjVkNTEyZjkxMDQ0Yjc4NmExNTU4OWE2MjRhOGQ4Y2I5
MjllNDgwHhcNMjUwODA4MDEwMjUxWhcNMjUwODA5MDEwMjUxWjAzMTEwLwYDVQQD
Eyg3ODNlZTBkZTZjYzI2YTVmYmVkZmIwODhmOWI1NjhkMmZhNDc2ODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y8S7WvyMizkv4WbKdUFIp3JaCyo
nTZEF1l0rtTCzBv/2BobQXWf79An47fp8JuIv30+Aj2BZPqZxbwedvVZi/MT3kV3
R6hyZxsFIntyqFotl1JM86rrF30I6dHQeiSQ52Sv1UU5kbZxtTJpt5plP2qiBpDv
YEcW8g05rd50fDY/+3bL4dAGDDbIoeo12rwHwshhgJC9zQg6aR/oDM0GmZB8szT7
6wgcXtCKiMEZrPuTygVQFUIJfjipdauE1oYPcdo6lVZKym5DUAWglHFVCTYIdTA2
GXKoF7ncjYRlVtrxfMTcc0cOwxtvP0e5U3UyEha61vYFnLS6KwkgFc1X/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg+4N5swmpfvt+wiPm1aNL6R2gLMB8GA1UdIwQY
MBaAFOz11RL5EES3hqFViaYkqNjLkp5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUt
YzE0ODFkZjdkYTQxLzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUtYzE0ODFkZjdkYTQx
LzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2cY1sD1
JdLHfOtEYD+GXUGQltF1NU2+9QbzbuUYI9WzAZAyOIIwBfDlvnS3XkifGEr+MtX8
ls06+3v839BKUaxIhjbr9q+iuCEcdyfCxQILADSlqK83rWVrEtUAg2QmV4dcjpFC
MnA1zAlsTHB5gKQFG8csuCxk1xBnCd7IkFDuQlhXO70uoVK7FH3/Ac9kXhA3fpGN
nlijn2Z67aROUsZ+veAQrMU1ZMgf8AS+CJwKFztjFnxZHkSXAziCVFxcsI/lTe0R
Gym2ABkx9g/Ut1cb+60wW61Tf/+KmlY8cwJeTfWzw4U64eqJlha/D7tAefisvdvh
uL2hyK0BZxBiog==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:54 2025 by rpki-client