Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: zDh8/68o9ciMK9EiqibWdwXMwCwWs140cpYSDggQ0SQ=
Subject key identifier: D0:20:DD:7B:91:C6:19:A6:B6:89:F2:9B:30:6E:79:50:5C:CC:B9:44
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 0197C803535CF5F6D204874A94F4C7B23145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 22:02:30 +0000
Manifest this update: Tue 01 Jul 2025 22:02:30 +0000
Manifest next update: Wed 02 Jul 2025 22:02:30 +0000
Files and hashes: 1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=)
2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: NpUf96EuIHEeue7zYfgyTuJ7xizw2cR5q4wUQoDeMkM=)
3: hpKUEYSoGHkE0FTfiYlqZGeAk1A.roa (hash: aS+EY09klLsP1Q0iTAqB6odVzuvAAWvABKFa+TlzvPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:03:53:5c:f5:f6:d2:04:87:4a:94:f4:c7:b2:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Jul 1 22:02:30 2025 GMT
Not After : Jul 2 22:02:30 2025 GMT
Subject: CN=d020dd7b91c619a6b689f29b306e79505cccb944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:e8:3e:d4:45:97:c7:7d:25:dd:4f:e5:fe:
c0:c3:1d:6f:1b:c8:6e:2f:e7:f9:e7:e1:4e:09:17:
4e:33:6c:40:df:3a:cb:43:3b:9d:86:4c:92:ed:ab:
48:4a:da:19:2b:20:45:bb:86:38:5f:32:40:7a:f9:
20:b7:b3:9b:f1:ca:b0:b1:ac:ea:c1:30:17:e5:28:
d5:67:34:75:85:d3:ff:1e:68:55:03:29:71:6c:ac:
7a:8b:06:ae:1a:b3:e5:d8:22:2b:16:91:d0:43:0e:
f8:51:cc:ac:e3:ae:1d:94:5a:29:dc:74:fc:3a:b9:
04:45:2a:c2:d7:7a:63:7d:48:3a:23:82:bf:59:31:
cb:c4:27:33:62:12:5d:57:52:12:e8:ee:d8:81:b8:
66:37:37:67:14:f4:76:bd:65:31:46:85:f3:a2:d3:
36:d9:c6:74:29:73:cc:a2:a6:c8:05:fc:64:77:4a:
63:c9:66:5e:af:a0:b6:a6:87:af:a2:30:ae:d9:4a:
5e:d1:8a:59:93:0e:d2:d5:a4:cc:fb:29:36:c8:aa:
88:e1:e3:b1:82:06:eb:e7:8b:c2:55:bb:41:a7:4a:
86:3a:1e:18:d7:7b:54:47:f5:81:7e:05:e3:85:7e:
58:c9:af:ac:ca:92:5c:62:ff:5c:00:19:60:83:c4:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:DD:7B:91:C6:19:A6:B6:89:F2:9B:30:6E:79:50:5C:CC:B9:44
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:0d:ee:2c:11:96:71:55:78:10:57:9c:cd:13:7b:08:58:
a9:88:64:49:55:40:c6:67:a4:53:cc:7a:b2:b4:c2:68:c5:ea:
1a:8b:ed:a6:0f:2f:3e:86:ba:79:61:b9:90:f6:a7:a5:b4:b9:
a5:7e:7f:7f:11:1c:60:21:54:27:60:ea:91:f6:fe:b3:27:7a:
0b:14:76:d9:11:8e:68:cb:19:00:e2:91:65:35:25:ad:b0:38:
6b:46:ff:a2:d6:c5:7b:34:6a:ab:e3:c7:66:d7:98:56:50:b1:
9a:25:56:cf:53:e5:bd:b8:14:8a:9e:c1:65:7f:0d:91:7c:1d:
36:df:b0:53:e7:ae:78:02:86:4d:40:74:2f:01:fa:46:75:0d:
10:d8:d1:cc:e6:97:0c:b0:6f:b8:98:7a:60:1e:ff:41:e3:b4:
31:1c:8d:ad:6f:bc:05:f8:82:1a:3b:a4:3c:03:86:19:a9:73:
52:be:f6:9c:72:7f:93:47:1a:a9:2c:01:96:4b:cb:5b:3f:ec:
40:55:f5:fc:48:78:ef:26:ed:20:cc:95:0e:8e:54:25:d4:95:
e5:70:6a:7a:6f:3d:2c:60:bc:06:4f:cd:22:19:66:8d:b5:76:
43:ec:64:37:4b:59:e4:e5:09:a5:10:45:a1:cd:26:14:a0:63:
f3:e3:32:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIA1Nc9fbSBIdKlPTHsjFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjQzNThjNGYxNmMxOWZmYWQzN2YzY2FmZTBjOGY2YWNi
ZjY1YjEwHhcNMjUwNzAxMjIwMjMwWhcNMjUwNzAyMjIwMjMwWjAzMTEwLwYDVQQD
EyhkMDIwZGQ3YjkxYzYxOWE2YjY4OWYyOWIzMDZlNzk1MDVjY2NiOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlvoPtRFl8d9Jd1P5f7Awx1vG8hu
L+f55+FOCRdOM2xA3zrLQzudhkyS7atIStoZKyBFu4Y4XzJAevkgt7Ob8cqwsazq
wTAX5SjVZzR1hdP/HmhVAylxbKx6iwauGrPl2CIrFpHQQw74Ucys464dlFop3HT8
OrkERSrC13pjfUg6I4K/WTHLxCczYhJdV1IS6O7YgbhmNzdnFPR2vWUxRoXzotM2
2cZ0KXPMoqbIBfxkd0pjyWZer6C2poevojCu2Upe0YpZkw7S1aTM+yk2yKqI4eOx
ggbr54vCVbtBp0qGOh4Y13tUR/WBfgXjhX5Yya+sypJcYv9cABlgg8QjgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAg3XuRxhmmtonymzBueVBczLlEMB8GA1UdIwQY
MBaAFHskNYxPFsGf+tN/PK/gyPasv2WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYt
MGQ3YzUyMTU0MTgzLzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYtMGQ3YzUyMTU0MTgz
LzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN0N7iwR
lnFVeBBXnM0TewhYqYhkSVVAxmekU8x6srTCaMXqGovtpg8vPoa6eWG5kPanpbS5
pX5/fxEcYCFUJ2Dqkfb+syd6CxR22RGOaMsZAOKRZTUlrbA4a0b/otbFezRqq+PH
ZteYVlCxmiVWz1PlvbgUip7BZX8NkXwdNt+wU+eueAKGTUB0LwH6RnUNENjRzOaX
DLBvuJh6YB7/QeO0MRyNrW+8BfiCGjukPAOGGalzUr72nHJ/k0caqSwBlkvLWz/s
QFX1/Eh47ybtIMyVDo5UJdSV5XBqem89LGC8Bk/NIhlmjbV2Q+xkN0tZ5OUJpRBF
oc0mFKBj8+MyyA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:12:07 2025 by rpki-client