Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File: e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier: hx6Nb72UeD+863fuv/rpzeVOzPyARghyEYOb1plWlqY=
Subject key identifier: BB:5C:4C:6B:D9:48:AB:13:40:2C:10:DE:AF:20:53:D7:AD:CF:20:14
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 0197B96A676B0D797147371FDCC672BE88CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 02:00:47 +0000
Manifest this update: Sun 29 Jun 2025 02:00:47 +0000
Manifest next update: Mon 30 Jun 2025 02:00:47 +0000
Files and hashes: 1: XWu-Cy3k4bG46jzu68jWDU2BUlE.roa (hash: oYNAZflFkpftatNeWIk412xMRJVARxZKG+FJn7voe4M=)
2: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: 8noYWyzmlUxpNst8M5W8E05NgJfMyJscXNFXg1pItI4=)
3: jYKhHXV1OB2pC6LjAmSh2r6YUk0.roa (hash: 7C9VKQGPhygAtV4ulo4sNDzQRhMNsoU08LmAQx4ncWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:67:6b:0d:79:71:47:37:1f:dc:c6:72:be:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Jun 29 02:00:47 2025 GMT
Not After : Jun 30 02:00:47 2025 GMT
Subject: CN=bb5c4c6bd948ab13402c10deaf2053d7adcf2014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:f9:ef:10:ae:1c:38:1d:85:42:82:3c:43:
12:f7:1a:8e:e7:63:4b:88:84:ae:3f:df:d0:ae:06:
46:0a:5a:c0:4d:08:8f:aa:7a:19:f0:8b:02:5f:7b:
1b:61:fe:9a:d6:2a:c3:3f:7c:4d:30:a6:ab:35:a2:
31:e1:a6:9b:68:89:6b:a9:5b:d3:29:ea:24:4a:b9:
53:2d:eb:73:1a:74:11:74:6e:c9:0b:55:9d:d6:ca:
4f:1f:6b:0d:8a:e6:6b:b4:fb:97:a5:c2:97:40:78:
69:73:5d:95:07:2a:bf:4a:7f:ca:ad:eb:e6:0e:4f:
e7:96:ec:9a:7c:bc:fb:88:01:cf:40:14:19:ca:ef:
f9:00:26:3a:07:bc:48:1f:d4:04:a5:f7:35:ac:d6:
31:b8:9c:52:61:a7:a5:e4:01:86:76:ad:62:7a:b8:
59:7c:01:aa:21:d8:6e:9f:23:ea:5d:65:dd:26:82:
7f:b1:ef:3f:30:cc:f4:82:d4:89:46:2f:15:e3:2b:
6f:a9:7c:44:f3:bb:b9:2c:27:34:cb:89:d2:93:f5:
07:05:7f:e8:d6:65:04:9c:28:fa:b4:0d:78:16:62:
ae:d9:a8:67:46:85:f0:37:9e:19:11:e2:3f:a7:38:
60:7c:01:94:2a:97:1a:6e:97:e9:53:ab:54:24:02:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5C:4C:6B:D9:48:AB:13:40:2C:10:DE:AF:20:53:D7:AD:CF:20:14
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9e:a4:1f:bf:16:f0:59:9d:5c:af:c3:e8:10:12:37:7d:57:
30:36:6f:3c:f8:b4:42:01:03:91:81:c5:90:6b:90:31:94:ec:
72:01:72:df:37:36:e1:a4:96:bd:ca:30:27:65:1e:e2:54:56:
51:f9:d7:db:6f:51:28:76:aa:75:71:4c:f3:98:8a:98:18:1e:
bb:a6:53:43:c2:fb:a0:94:b3:f7:3f:2d:93:bc:67:48:45:da:
69:a1:18:5f:1b:c5:b2:bf:43:fb:b2:d5:f5:11:cc:5c:dc:ae:
b4:ec:5d:89:56:50:7a:66:ba:f0:d9:53:25:f1:3d:ba:b1:aa:
b4:b4:a6:e1:47:f0:d6:d7:81:a0:9d:57:41:fe:1b:a7:1a:d3:
0b:e9:6e:59:67:2d:42:f0:9c:fb:7a:0f:32:39:ff:86:9a:ab:
e2:6d:14:f1:ce:d5:8c:79:17:18:4f:ed:87:3d:fb:d8:3c:67:
8d:14:ad:47:92:da:c0:ba:65:80:9f:cc:4d:ee:88:fd:e6:47:
4c:38:e8:92:6c:f2:36:36:2b:b8:3f:9c:5f:46:4c:f5:bc:06:
60:59:25:16:c6:11:80:88:7d:4f:72:ea:df:73:8a:c9:06:39:
a4:8e:89:f9:bf:c2:45:b2:78:f6:c5:7b:a5:2b:06:2a:af:9c:
fd:41:77:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5amdrDXlxRzcf3MZyvojKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi
MjJiOTEwHhcNMjUwNjI5MDIwMDQ3WhcNMjUwNjMwMDIwMDQ3WjAzMTEwLwYDVQQD
EyhiYjVjNGM2YmQ5NDhhYjEzNDAyYzEwZGVhZjIwNTNkN2FkY2YyMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83P57xCuHDgdhUKCPEMS9xqO52NL
iISuP9/QrgZGClrATQiPqnoZ8IsCX3sbYf6a1irDP3xNMKarNaIx4aabaIlrqVvT
KeokSrlTLetzGnQRdG7JC1Wd1spPH2sNiuZrtPuXpcKXQHhpc12VByq/Sn/Krevm
Dk/nluyafLz7iAHPQBQZyu/5ACY6B7xIH9QEpfc1rNYxuJxSYael5AGGdq1ierhZ
fAGqIdhunyPqXWXdJoJ/se8/MMz0gtSJRi8V4ytvqXxE87u5LCc0y4nSk/UHBX/o
1mUEnCj6tA14FmKu2ahnRoXwN54ZEeI/pzhgfAGUKpcabpfpU6tUJALBiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtcTGvZSKsTQCwQ3q8gU9etzyAUMB8GA1UdIwQY
MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt
NzQzNzY1YmQwZjNlLzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl
LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv56kH78W
8FmdXK/D6BASN31XMDZvPPi0QgEDkYHFkGuQMZTscgFy3zc24aSWvcowJ2Ue4lRW
UfnX229RKHaqdXFM85iKmBgeu6ZTQ8L7oJSz9z8tk7xnSEXaaaEYXxvFsr9D+7LV
9RHMXNyutOxdiVZQema68NlTJfE9urGqtLSm4Ufw1teBoJ1XQf4bpxrTC+luWWct
QvCc+3oPMjn/hpqr4m0U8c7VjHkXGE/thz372DxnjRStR5LawLplgJ/MTe6I/eZH
TDjokmzyNjYruD+cX0ZM9bwGYFklFsYRgIh9T3Lq33OKyQY5pI6J+b/CRbJ49sV7
pSsGKq+c/UF3DA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:20 2025 by rpki-client