Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: ZB8k9LNvKvUXBI/zZAgYGWrg0Sf3ZSnEOJgXlm+/eTA=
Subject key identifier: 24:F3:0F:38:4B:84:E6:39:B7:0B:80:59:17:4E:00:D9:37:87:BE:70
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 0197B6A20E2DC182817E74CBC4F0E45C693F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: nWeicI5xOfHeGz+USUN07QmQPFcGB0UYx+KkAz1SVfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0e:2d:c1:82:81:7e:74:cb:c4:f0:e4:5c:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=24f30f384b84e639b70b8059174e00d93787be70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:ab:00:c5:46:4c:dc:1a:6b:0f:de:23:87:
00:9d:3f:85:07:a3:5e:c7:28:23:72:dd:b5:d4:68:
1e:b1:20:8a:97:11:f2:ee:5c:47:cb:c5:df:11:5d:
9e:93:59:6a:01:f4:d4:c4:c4:2c:80:a6:96:0f:ea:
89:6a:7c:98:39:d0:57:62:b6:3d:2b:9a:13:13:4c:
9c:04:5a:c4:83:1b:65:cf:c6:5e:d5:d0:bc:95:c1:
3a:ca:c2:51:a1:e4:a5:39:a6:d0:bf:f7:49:73:28:
3f:e5:71:1b:b7:0f:1c:09:fd:85:73:4a:6e:b6:6a:
0b:2e:db:9f:73:d9:9d:41:51:22:d0:29:c2:db:1b:
b1:b9:f0:c2:99:c0:1f:44:8b:a3:4c:2b:b3:e1:52:
20:be:4d:b6:f4:b9:b0:91:9f:72:ac:92:19:c6:33:
e1:76:81:fc:37:d4:70:ad:61:c4:18:a4:94:a7:a9:
56:7b:29:a2:ba:5c:bd:66:90:0e:d8:e6:ee:24:70:
9d:9e:12:91:af:d7:46:93:ae:9b:de:5e:99:a2:fb:
c5:cc:74:1c:ff:63:c1:57:c8:7a:f9:78:52:c3:dd:
2d:2a:78:1f:d6:00:15:b8:82:a4:7d:79:a9:c9:b4:
11:a8:6b:86:66:99:13:62:12:ee:6b:48:fc:46:79:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F3:0F:38:4B:84:E6:39:B7:0B:80:59:17:4E:00:D9:37:87:BE:70
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:20:aa:41:8d:df:0f:94:c9:50:69:7d:5d:1d:0a:80:3d:a2:
c7:eb:ca:61:92:16:f5:4b:75:6a:65:7f:40:91:47:2e:81:4e:
68:fd:2f:d3:c4:3d:a1:61:1c:ef:e7:eb:70:1b:65:b4:b3:94:
64:7a:8e:54:24:ff:c8:84:d4:f2:c8:16:49:a5:26:af:b8:00:
4b:b1:72:fb:07:30:bf:dc:d5:18:dd:19:6e:f2:72:42:10:d9:
bf:6b:f7:3c:39:f2:e5:d0:59:ce:b0:85:b6:91:73:f9:17:5d:
c2:c7:0d:46:9e:29:54:9c:c7:f4:1b:e1:c7:57:b3:cb:47:0e:
f9:a4:03:a2:bf:41:f2:4f:f0:b7:c3:f1:1b:f2:4c:ab:77:c3:
d2:08:46:5c:45:fa:5e:2a:2d:3c:a4:1d:78:8e:40:f5:ba:72:
cf:d7:7d:82:90:e7:cb:7b:7e:39:e0:88:3f:d6:48:e4:ec:62:
d6:57:1e:4c:e2:b3:1e:e9:5f:29:08:96:dd:62:91:62:5f:8e:
4d:77:57:52:b6:0f:0a:b3:90:1b:ae:0e:47:9f:6e:11:f2:fb:
28:20:2d:17:17:2c:55:2d:7d:29:6a:a4:b7:f7:db:15:f4:16:
c2:37:55:fc:26:4b:36:52:68:95:5f:64:c5:78:44:2c:ae:88:
10:7d:41:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2og4twYKBfnTLxPDkXGk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj
ZTA3MjcwHhcNMjUwNjI4MTMwMjQzWhcNMjUwNjI5MTMwMjQzWjAzMTEwLwYDVQQD
EygyNGYzMGYzODRiODRlNjM5YjcwYjgwNTkxNzRlMDBkOTM3ODdiZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NmrAMVGTNwaaw/eI4cAnT+FB6Ne
xygjct211GgesSCKlxHy7lxHy8XfEV2ek1lqAfTUxMQsgKaWD+qJanyYOdBXYrY9
K5oTE0ycBFrEgxtlz8Ze1dC8lcE6ysJRoeSlOabQv/dJcyg/5XEbtw8cCf2Fc0pu
tmoLLtufc9mdQVEi0CnC2xuxufDCmcAfRIujTCuz4VIgvk229LmwkZ9yrJIZxjPh
doH8N9RwrWHEGKSUp6lWeymiuly9ZpAO2ObuJHCdnhKRr9dGk66b3l6ZovvFzHQc
/2PBV8h6+XhSw90tKngf1gAVuIKkfXmpybQRqGuGZpkTYhLua0j8Rnm+qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTzDzhLhOY5twuAWRdOANk3h75wMB8GA1UdIwQY
MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt
NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1
LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSCqQY3f
D5TJUGl9XR0KgD2ix+vKYZIW9Ut1amV/QJFHLoFOaP0v08Q9oWEc7+frcBtltLOU
ZHqOVCT/yITU8sgWSaUmr7gAS7Fy+wcwv9zVGN0ZbvJyQhDZv2v3PDny5dBZzrCF
tpFz+RddwscNRp4pVJzH9Bvhx1ezy0cO+aQDor9B8k/wt8PxG/JMq3fD0ghGXEX6
XiotPKQdeI5A9bpyz9d9gpDny3t+OeCIP9ZI5Oxi1lceTOKzHulfKQiW3WKRYl+O
TXdXUrYPCrOQG64OR59uEfL7KCAtFxcsVS19KWqkt/fbFfQWwjdV/CZLNlJolV9k
xXhELK6IEH1B4A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:20 2025 by rpki-client