Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: PTMj03sZHdxS5utJHGdvgfDwrlMqOI9GiNMfxVO1jg0=
Subject key identifier: EC:2E:6D:DC:01:AE:5E:A5:BE:2A:65:8C:56:5F:CB:48:76:3E:2F:AA
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 019872CF4571B5E9D8F205DDDAD17DF072A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 02:00:42 +0000
Manifest this update: Mon 04 Aug 2025 02:00:42 +0000
Manifest next update: Tue 05 Aug 2025 02:00:42 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: D9mAFeWwqD8oLaXPHBSJP6+ljcVe2yuxrg1AeLFf574=)
2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:45:71:b5:e9:d8:f2:05:dd:da:d1:7d:f0:72:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Aug 4 02:00:42 2025 GMT
Not After : Aug 5 02:00:42 2025 GMT
Subject: CN=ec2e6ddc01ae5ea5be2a658c565fcb48763e2faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:33:91:b3:e4:70:5c:5c:df:ae:99:a5:57:
e7:24:30:a9:6f:e4:8e:bd:f1:b0:07:15:20:9b:ce:
36:61:b7:bb:a8:d8:c1:45:a0:39:b4:b6:f1:c1:59:
c9:b6:40:7b:74:18:ae:db:ea:d7:9a:79:07:90:44:
e2:33:e9:4a:f9:c2:60:9c:c4:84:e4:c2:8b:bd:b0:
9d:b0:6b:14:c0:d3:ab:8c:d4:04:1a:d0:54:54:86:
b0:d8:ac:98:cc:f6:6f:7b:46:07:f9:b9:2b:98:66:
73:3e:a7:5f:61:52:4f:1e:81:e7:4a:9e:c3:86:b0:
11:b6:77:37:e4:9d:04:0e:3d:c9:ad:89:b1:fa:f6:
31:65:5e:e6:ec:3a:b1:83:cd:3c:37:99:c8:71:da:
33:57:a6:0d:dd:e2:29:ab:f1:f6:e4:68:e9:51:fb:
f9:c5:e3:14:89:2f:b5:e0:79:c7:a7:a2:4a:d9:89:
5a:dd:19:18:32:3e:ba:33:e7:19:98:56:15:82:65:
a5:e9:6c:86:c8:91:95:0c:fe:da:84:fb:02:95:fc:
da:9c:d1:18:e1:ed:54:9f:9b:7b:eb:80:9d:60:b3:
9f:fb:d7:7c:fb:62:56:34:cd:b2:d4:58:32:92:2e:
05:b3:33:50:7e:03:fe:07:d4:4e:a7:72:56:7c:fe:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2E:6D:DC:01:AE:5E:A5:BE:2A:65:8C:56:5F:CB:48:76:3E:2F:AA
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:38:70:80:b5:26:ee:a6:4a:a7:f1:6b:28:fa:b4:10:54:43:
42:38:d2:4b:69:5a:57:ad:29:58:c8:8b:bb:4a:af:ba:0c:9f:
ca:55:b0:87:7f:28:3a:23:aa:f0:dd:cf:94:7f:07:c6:9f:93:
80:a8:d5:9a:01:90:c0:ed:89:08:67:6a:67:83:ec:bf:c4:1e:
0e:06:74:c3:4f:bd:25:ac:48:b4:a8:c4:52:6a:de:dd:7d:4a:
81:c1:48:b8:ce:11:fb:cb:8c:6a:da:2d:73:27:e6:ea:d8:30:
0f:f7:16:51:31:98:4b:10:5e:5c:00:78:11:b2:ad:18:8b:d3:
86:4c:9b:18:08:b3:bb:4a:09:d8:c8:1e:da:74:f7:ab:1c:14:
a6:d4:ff:65:ce:5a:b5:28:7a:a1:46:e5:a1:14:ce:9c:c0:38:
6c:41:be:cf:f4:e3:ed:6b:8e:2a:3f:a8:31:20:92:29:b9:bc:
02:dc:63:02:c2:48:1e:09:53:a2:b2:8f:64:0a:0d:fa:75:4f:
db:5b:64:29:ed:01:d0:94:f2:1b:0d:35:81:8c:60:8a:89:40:
ef:d5:9c:34:ce:e0:73:03:5a:93:25:9a:3f:10:53:d1:0a:dc:
2f:23:5d:e8:c1:b2:b9:ae:ff:fe:ee:36:41:d8:a2:3f:0c:84:
d8:59:24:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz0VxtenY8gXd2tF98HKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWUyMjU2MTRjNjVjZTJjZjUyNzVlYjQ2NDMzNDM5NWMw
NmY0MzAwHhcNMjUwODA0MDIwMDQyWhcNMjUwODA1MDIwMDQyWjAzMTEwLwYDVQQD
EyhlYzJlNmRkYzAxYWU1ZWE1YmUyYTY1OGM1NjVmY2I0ODc2M2UyZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7IzkbPkcFxc366ZpVfnJDCpb+SO
vfGwBxUgm842Ybe7qNjBRaA5tLbxwVnJtkB7dBiu2+rXmnkHkETiM+lK+cJgnMSE
5MKLvbCdsGsUwNOrjNQEGtBUVIaw2KyYzPZve0YH+bkrmGZzPqdfYVJPHoHnSp7D
hrARtnc35J0EDj3JrYmx+vYxZV7m7Dqxg808N5nIcdozV6YN3eIpq/H25GjpUfv5
xeMUiS+14HnHp6JK2Yla3RkYMj66M+cZmFYVgmWl6WyGyJGVDP7ahPsClfzanNEY
4e1Un5t764CdYLOf+9d8+2JWNM2y1Fgyki4FszNQfgP+B9ROp3JWfP7NAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwubdwBrl6lvipljFZfy0h2Pi+qMB8GA1UdIwQY
MBaAFO8eIlYUxlziz1J160ZDNDlcBvQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYt
MTFmOTUyNjhlYTc0LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYtMTFmOTUyNjhlYTc0
LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjhwgLUm
7qZKp/FrKPq0EFRDQjjSS2laV60pWMiLu0qvugyfylWwh38oOiOq8N3PlH8Hxp+T
gKjVmgGQwO2JCGdqZ4Psv8QeDgZ0w0+9JaxItKjEUmre3X1KgcFIuM4R+8uMatot
cyfm6tgwD/cWUTGYSxBeXAB4EbKtGIvThkybGAizu0oJ2Mge2nT3qxwUptT/Zc5a
tSh6oUbloRTOnMA4bEG+z/Tj7WuOKj+oMSCSKbm8AtxjAsJIHglTorKPZAoN+nVP
21tkKe0B0JTyGw01gYxgiolA79WcNM7gcwNakyWaPxBT0QrcLyNd6MGyua7//u42
QdiiPwyE2FkkRQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:38 2025 by rpki-client