Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: yzHnjgXwUsqje3LCATx+1ilknKOVHXysMoP4/PgROhk=
Subject key identifier: F1:F8:5A:9B:F1:86:3B:AD:17:A0:79:B5:C1:D9:D8:20:03:16:3C:4C
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 01978244E732AA4C321B88002171D09DBD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 12E4
Signing time: Wed 18 Jun 2025 09:00:43 +0000
Manifest this update: Wed 18 Jun 2025 09:00:43 +0000
Manifest next update: Thu 19 Jun 2025 09:00:43 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: 7R35feTAjkJ0MvsFNF3E+mt44zTPrIy/i4Iq41unBuk=)
2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=)
3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:e7:32:aa:4c:32:1b:88:00:21:71:d0:9d:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Jun 18 09:00:43 2025 GMT
Not After : Jun 19 09:00:43 2025 GMT
Subject: CN=f1f85a9bf1863bad17a079b5c1d9d82003163c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:ad:35:08:cd:98:59:21:be:aa:0b:4c:db:
8d:d2:01:6d:92:b3:b6:25:4d:fe:11:1c:22:dd:19:
93:7e:fb:f5:58:08:04:ef:2c:59:81:25:c4:5b:c8:
5c:2a:ef:15:3b:98:ea:32:ab:77:03:67:12:1c:df:
95:a4:90:83:17:6d:8c:d8:70:a7:db:95:a1:74:2f:
51:32:d1:91:d1:a6:40:df:06:35:8d:be:07:8e:24:
cc:19:4f:7a:68:99:00:a6:bc:4f:16:be:68:d0:9b:
e0:98:6a:4b:f2:4f:08:b6:2a:66:a4:66:ae:57:43:
8b:8a:2b:ee:03:01:17:d6:b3:7f:9f:b4:19:dd:c6:
55:18:be:4e:6c:74:b9:f6:a4:93:de:ab:b1:eb:b1:
6d:84:21:f1:d7:36:0b:c0:a9:50:ed:c4:0a:91:3e:
a6:58:41:be:4e:46:03:fb:6a:e8:b5:37:26:44:cb:
23:cd:1e:7c:a0:de:ca:b2:26:8f:63:f8:43:d3:56:
c3:95:00:30:27:32:ab:14:e0:f1:67:f0:f8:e7:2c:
95:cd:1c:7e:2f:96:8c:3c:d6:e4:17:19:18:51:4e:
40:44:2a:d6:1b:fa:ce:db:2d:e9:3b:c6:e1:7c:b9:
2d:9b:41:6f:61:be:5c:77:75:65:a9:34:28:b4:64:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:5A:9B:F1:86:3B:AD:17:A0:79:B5:C1:D9:D8:20:03:16:3C:4C
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:e6:76:2e:0f:e4:a0:fe:1d:8f:5e:81:cd:37:54:2a:2a:
6c:40:e8:49:44:ff:28:01:ee:14:39:58:34:50:8d:32:42:ad:
45:cc:42:a9:38:37:14:ac:8e:60:60:b6:71:df:3c:35:d4:6a:
c5:90:a5:77:bf:48:bf:bc:15:83:58:ec:79:19:a5:4a:f5:5e:
7f:db:65:31:54:61:e5:30:74:64:71:a4:aa:c2:00:d6:0a:87:
96:d0:a6:53:5e:7c:cb:96:af:65:79:11:7b:5b:a8:c6:26:f7:
19:da:30:16:a7:e0:a8:35:c4:c7:d5:4f:38:ac:c0:e2:bc:dc:
d1:5f:e1:89:b7:42:81:be:2c:d3:e0:87:e5:29:d1:44:d0:33:
8c:d5:97:ba:34:61:5d:c0:95:f7:50:c6:d7:63:f1:e1:d6:75:
0d:26:7e:b4:58:e3:58:2c:30:b5:18:1d:a7:01:6e:ed:81:99:
c0:5e:fc:76:6a:b3:d6:d2:aa:94:bc:8c:19:63:48:8a:50:e4:
d1:06:db:66:ce:ad:2f:c3:36:7d:15:7e:d1:09:76:92:c7:3e:
ea:fd:05:d6:ba:15:8d:f7:14:42:be:e0:72:83:76:c6:d8:bb:
a8:24:da:c3:26:75:44:de:01:af:65:b9:35:cf:a6:f5:c4:70:
e7:19:e2:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeCROcyqkwyG4gAIXHQnb2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1
ODlkYjkwHhcNMjUwNjE4MDkwMDQzWhcNMjUwNjE5MDkwMDQzWjAzMTEwLwYDVQQD
EyhmMWY4NWE5YmYxODYzYmFkMTdhMDc5YjVjMWQ5ZDgyMDAzMTYzYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB+tNQjNmFkhvqoLTNuN0gFtkrO2
JU3+ERwi3RmTfvv1WAgE7yxZgSXEW8hcKu8VO5jqMqt3A2cSHN+VpJCDF22M2HCn
25WhdC9RMtGR0aZA3wY1jb4HjiTMGU96aJkAprxPFr5o0JvgmGpL8k8ItipmpGau
V0OLiivuAwEX1rN/n7QZ3cZVGL5ObHS59qST3qux67FthCHx1zYLwKlQ7cQKkT6m
WEG+TkYD+2rotTcmRMsjzR58oN7KsiaPY/hD01bDlQAwJzKrFODxZ/D45yyVzRx+
L5aMPNbkFxkYUU5ARCrWG/rO2y3pO8bhfLktm0FvYb5cd3VlqTQotGRelwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH4WpvxhjutF6B5tcHZ2CADFjxMMB8GA1UdIwQY
MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt
ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3
LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJbmdi4P
5KD+HY9egc03VCoqbEDoSUT/KAHuFDlYNFCNMkKtRcxCqTg3FKyOYGC2cd88NdRq
xZCld79Iv7wVg1jseRmlSvVef9tlMVRh5TB0ZHGkqsIA1gqHltCmU158y5avZXkR
e1uoxib3GdowFqfgqDXEx9VPOKzA4rzc0V/hibdCgb4s0+CH5SnRRNAzjNWXujRh
XcCV91DG12Px4dZ1DSZ+tFjjWCwwtRgdpwFu7YGZwF78dmqz1tKqlLyMGWNIilDk
0QbbZs6tL8M2fRV+0Ql2ksc+6v0F1roVjfcUQr7gcoN2xti7qCTawyZ1RN4Br2W5
Nc+m9cRw5xni9Q==
-----END CERTIFICATE-----
Generated at Wed Jun 18 12:23:44 2025 by rpki-client