Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: g12VbcxflhGO64hPAmcQ9uBs4LTPDHwtr6it5YOn6jQ=
Subject key identifier: 66:BD:1C:7E:CC:1A:8B:67:B9:23:19:0E:F4:C6:47:B4:D9:36:99:B4
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 0197B6D75A91E385847CFC36747E95764AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 10BF
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: rWfHb+MsrOclbZ7s98fHmU9de5oH7wA/N3FuukRO6KA=)
2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5a:91:e3:85:84:7c:fc:36:74:7e:95:76:4a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=66bd1c7ecc1a8b67b923190ef4c647b4d93699b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:dc:7d:54:98:b8:d7:70:0a:eb:36:71:e8:
a4:5b:15:e2:cf:fc:f8:ee:ef:ae:43:89:5f:e8:83:
94:95:cd:f5:c6:ed:57:14:dc:45:6c:85:9e:dc:e8:
df:c2:2f:2f:89:68:53:df:41:ef:60:fe:0c:57:eb:
f5:0e:30:81:da:28:0d:45:dd:7c:bd:80:56:da:28:
a6:9f:7e:c9:e2:34:2d:1e:bf:38:e2:e0:74:a0:77:
db:7a:5a:b7:dc:d0:48:a3:5c:57:ee:27:c6:e4:8c:
b7:35:03:b9:42:bd:64:2f:93:c9:d0:0a:51:b8:6c:
7c:8c:3d:12:5c:71:33:53:07:69:1e:14:d6:8b:e4:
e3:f0:8a:bc:61:55:d8:59:26:ac:a1:5e:16:4a:92:
e5:6a:78:0b:3f:7f:96:90:a0:30:23:55:96:84:0b:
e1:56:dc:af:7c:3c:ba:c6:5c:aa:f0:52:76:c1:d7:
a0:36:cb:85:83:69:2f:0b:a0:d5:fd:94:4a:76:0b:
a0:b6:6a:5b:12:c7:98:30:62:7c:31:c7:c6:b2:49:
05:27:70:93:ad:59:46:56:f3:c0:07:3e:16:49:93:
09:57:5e:e6:59:b4:52:b3:fb:52:b5:f6:9d:d8:b5:
ba:60:4d:57:00:b8:13:5c:e5:f9:24:6e:9e:40:81:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:1C:7E:CC:1A:8B:67:B9:23:19:0E:F4:C6:47:B4:D9:36:99:B4
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6b:f2:30:13:3b:fc:e3:b3:ea:c5:e4:e0:0b:54:54:02:4f:
cf:19:24:b0:9a:91:84:dc:4c:a6:1e:f4:4f:45:d0:97:59:96:
ae:71:a2:1e:a1:27:51:c2:2d:a6:76:6e:31:61:4c:cc:6f:b5:
ce:14:bf:33:28:c1:55:26:3e:57:b9:0d:07:59:cb:e5:4f:9d:
78:6a:9a:b1:c4:68:ab:1b:08:5c:45:20:cf:11:a8:9c:39:a4:
91:ab:d9:94:8c:0b:27:ea:61:b3:f6:a7:f1:75:c5:0e:0d:cd:
ac:7f:34:f8:31:2b:c7:f9:b4:a8:14:47:1b:b7:61:ae:72:ad:
ac:3e:d6:0c:e7:2b:5f:31:d2:a5:82:34:a6:36:69:9f:a3:73:
f9:6f:a4:df:bb:f4:e7:ac:8d:22:3a:d6:a0:d0:5e:e0:87:70:
82:b2:e2:a8:36:98:7f:de:d0:6c:01:6b:83:69:fe:09:90:6c:
b5:6a:00:13:58:8e:16:f5:52:d4:0d:d0:b7:5f:3c:2d:98:fa:
a9:36:c6:9b:23:33:39:97:b1:e2:ab:75:0b:1f:ca:71:44:08:
6b:e7:15:81:b5:80:cd:ae:1d:a8:e4:10:05:83:5c:3f:5a:9f:
bd:e7:f9:52:21:65:ea:8a:ac:82:6f:c8:18:bf:8c:db:44:fd:
45:82:60:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe211qR44WEfPw2dH6VdkrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0
Mjk2NzEwHhcNMjUwNjI4MTQwMDU2WhcNMjUwNjI5MTQwMDU2WjAzMTEwLwYDVQQD
Eyg2NmJkMWM3ZWNjMWE4YjY3YjkyMzE5MGVmNGM2NDdiNGQ5MzY5OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSzcfVSYuNdwCus2ceikWxXiz/z4
7u+uQ4lf6IOUlc31xu1XFNxFbIWe3Ojfwi8viWhT30HvYP4MV+v1DjCB2igNRd18
vYBW2iimn37J4jQtHr844uB0oHfbelq33NBIo1xX7ifG5Iy3NQO5Qr1kL5PJ0ApR
uGx8jD0SXHEzUwdpHhTWi+Tj8Iq8YVXYWSasoV4WSpLlangLP3+WkKAwI1WWhAvh
VtyvfDy6xlyq8FJ2wdegNsuFg2kvC6DV/ZRKdgugtmpbEseYMGJ8McfGskkFJ3CT
rVlGVvPABz4WSZMJV17mWbRSs/tStfad2LW6YE1XALgTXOX5JG6eQIF8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa9HH7MGotnuSMZDvTGR7TZNpm0MB8GA1UdIwQY
MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt
YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz
LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWvyMBM7
/OOz6sXk4AtUVAJPzxkksJqRhNxMph70T0XQl1mWrnGiHqEnUcItpnZuMWFMzG+1
zhS/MyjBVSY+V7kNB1nL5U+deGqascRoqxsIXEUgzxGonDmkkavZlIwLJ+phs/an
8XXFDg3NrH80+DErx/m0qBRHG7dhrnKtrD7WDOcrXzHSpYI0pjZpn6Nz+W+k37v0
56yNIjrWoNBe4IdwgrLiqDaYf97QbAFrg2n+CZBstWoAE1iOFvVS1A3Qt188LZj6
qTbGmyMzOZex4qt1Cx/KcUQIa+cVgbWAza4dqOQQBYNcP1qfvef5UiFl6oqsgm/I
GL+M20T9RYJgsw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:10 2025 by rpki-client