Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier: cHuDQ/DukpzFo9qdjtPQxrCXCttuqGMIJqpPcDHsSQA=
Subject key identifier: E0:9F:8E:24:04:1A:75:D1:C8:C9:27:30:10:53:80:C3:FE:90:0B:35
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 01976CCF718827B16F6D316332171D5DC5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number: 0243
Signing time: Sat 14 Jun 2025 05:00:23 +0000
Manifest this update: Sat 14 Jun 2025 05:00:23 +0000
Manifest next update: Sun 15 Jun 2025 05:00:23 +0000
Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: i976kQyvL1onTAKv+AYjye1xDEEEFpQXjRBcDcTnwpg=)
2: _M5AIVuzgXvHBKWny-Hh6G3pi1U.roa (hash: kH4DLz70GCvpi7gNL0YvgZWTRLs57t6MIq2nfE5Mbu8=)
3: tv7BOR__D8ThJMIcJAUdIAlKkwg.roa (hash: jM8tfHRUbeU3G9E4ngQ7Zof6H/32R+jTu43wcHiKIrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:71:88:27:b1:6f:6d:31:63:32:17:1d:5d:c5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Jun 14 05:00:23 2025 GMT
Not After : Jun 15 05:00:23 2025 GMT
Subject: CN=e09f8e24041a75d1c8c92730105380c3fe900b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:e5:82:d0:79:8d:9e:b5:d4:73:ed:1c:c8:
a2:94:e3:5b:d6:58:3f:ea:0e:35:c5:ce:14:c5:c7:
03:b7:18:03:4e:00:a3:23:91:0d:18:ec:e2:34:0e:
e3:70:e6:b0:e0:b0:4d:32:4c:61:f4:c2:e8:30:d2:
7e:d6:88:b7:a1:8c:58:b4:d8:4c:cc:3f:4d:3b:fe:
43:1f:dd:60:56:b4:c1:71:9b:bf:27:b9:7a:d8:b6:
f8:63:eb:a3:83:f5:1b:63:d6:74:53:bf:49:db:18:
f8:c4:0b:0b:ef:66:67:82:ee:79:cc:19:b8:30:f5:
31:e9:53:e7:32:0c:49:a2:9f:e6:82:9f:85:9a:fd:
07:df:3b:06:5d:5e:30:67:5f:e5:a5:a6:28:c2:e7:
cb:2d:fa:a4:8c:94:4e:64:dd:ef:b9:cc:b3:a8:51:
2b:34:c5:42:71:5b:a0:ab:9e:f9:11:06:d5:96:87:
28:21:70:d8:0f:a8:d8:37:c9:d9:ec:34:65:39:4a:
8f:9d:56:3e:e0:f2:da:c4:ae:68:08:1a:e6:83:f0:
2b:64:0c:f7:f4:4b:f4:91:e2:86:e2:11:f6:00:1e:
50:48:68:3a:b5:41:fb:06:cf:94:0f:18:cd:9e:63:
9c:3a:94:24:68:eb:46:76:ee:0b:4d:41:be:dd:83:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9F:8E:24:04:1A:75:D1:C8:C9:27:30:10:53:80:C3:FE:90:0B:35
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:af:b0:e9:21:38:57:97:8c:c1:c6:2a:7d:9f:c8:94:13:
11:ca:a8:eb:96:4e:0d:32:70:77:d3:28:5a:96:bb:36:2d:73:
aa:d3:f7:3c:35:80:42:f3:d9:1f:e0:60:8e:e9:73:5d:a9:ea:
c2:e4:15:d7:1d:58:bf:94:72:e1:df:d0:ae:31:a6:88:4a:e0:
44:a7:ec:c8:df:0b:e2:f4:4d:04:a8:ff:c8:71:e4:bb:78:c9:
91:7b:18:29:a9:d2:53:fe:b1:f0:90:20:90:88:cf:86:2d:18:
e7:cb:b0:2f:d1:0b:cf:fb:7c:79:44:cb:14:ad:72:af:95:57:
92:e6:34:0e:be:a1:df:49:0a:be:ae:52:80:de:79:dc:f4:42:
b9:e7:35:bc:96:d4:05:c0:93:4d:e2:9e:8a:b7:9d:82:47:20:
82:73:e6:ee:fd:fa:a1:2b:28:9a:d7:c5:01:0f:6a:c9:fe:93:
10:8c:83:50:28:2f:86:bb:ce:c8:ea:bb:33:90:6b:f8:89:1a:
19:f4:6e:0f:32:4a:cb:d5:ce:67:d3:1f:e7:2a:f1:05:de:2a:
82:02:f8:f7:a8:13:66:1a:1d:d2:c2:18:46:0a:ea:04:e4:08:
28:db:d0:01:62:6c:fe:f1:55:24:2c:1b:70:59:1a:42:0a:86:
1a:70:b7:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz3GIJ7FvbTFjMhcdXcXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZTY0OThkMTc0YWRmNWM4OWEzNjVjMmQxZTQ3N2RjZjI0
Zjk4MmUwHhcNMjUwNjE0MDUwMDIzWhcNMjUwNjE1MDUwMDIzWjAzMTEwLwYDVQQD
EyhlMDlmOGUyNDA0MWE3NWQxYzhjOTI3MzAxMDUzODBjM2ZlOTAwYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+LlgtB5jZ611HPtHMiilONb1lg/
6g41xc4UxccDtxgDTgCjI5ENGOziNA7jcOaw4LBNMkxh9MLoMNJ+1oi3oYxYtNhM
zD9NO/5DH91gVrTBcZu/J7l62Lb4Y+ujg/UbY9Z0U79J2xj4xAsL72Zngu55zBm4
MPUx6VPnMgxJop/mgp+Fmv0H3zsGXV4wZ1/lpaYowufLLfqkjJROZN3vucyzqFEr
NMVCcVugq575EQbVlocoIXDYD6jYN8nZ7DRlOUqPnVY+4PLaxK5oCBrmg/ArZAz3
9Ev0keKG4hH2AB5QSGg6tUH7Bs+UDxjNnmOcOpQkaOtGdu4LTUG+3YNBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCfjiQEGnXRyMknMBBTgMP+kAs1MB8GA1UdIwQY
MBaAFOzmSY0XSt9ciaNlwtHkd9zyT5guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTIt
OWJlY2MxMzZjYzcxLzEvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84YWJiNTgtZjMwYy00ZjNiLWI5OTItOWJlY2MxMzZjYzcx
LzEvN09aSmpSZEszMXlKbzJYQzBlUjMzUEpQbUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZavsOkh
OFeXjMHGKn2fyJQTEcqo65ZODTJwd9MoWpa7Ni1zqtP3PDWAQvPZH+BgjulzXanq
wuQV1x1Yv5Ry4d/QrjGmiErgRKfsyN8L4vRNBKj/yHHku3jJkXsYKanSU/6x8JAg
kIjPhi0Y58uwL9ELz/t8eUTLFK1yr5VXkuY0Dr6h30kKvq5SgN553PRCuec1vJbU
BcCTTeKeiredgkcggnPm7v36oSsomtfFAQ9qyf6TEIyDUCgvhrvOyOq7M5Br+Ika
GfRuDzJKy9XOZ9Mf5yrxBd4qggL496gTZhod0sIYRgrqBOQIKNvQAWJs/vFVJCwb
cFkaQgqGGnC3+g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:35 2025 by rpki-client