Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier: WsusWFVuTLyoaw5cuewrYfpw7PAdslXbOHkzrvHkPjU=
Subject key identifier: EE:07:0E:6B:C7:26:7A:B6:6A:6E:96:6A:43:8E:18:5E:92:F4:22:B2
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial: 0196C2026D40291D148BEAB1B460A604F5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number: 0251
Signing time: Mon 12 May 2025 01:01:00 +0000
Manifest this update: Mon 12 May 2025 01:01:00 +0000
Manifest next update: Tue 13 May 2025 01:01:00 +0000
Files and hashes: 1: 9xKnDYTGsncir9pGK8UvDoqBIrQ.roa (hash: ruj+NSfqLyzPa16DtiDqJuwEcOM3gn9igG3unI9kKcI=)
2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: Lc9yJIPDxDgGFicCgxaB6MeShK0QECASugZUY5+v1WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:6d:40:29:1d:14:8b:ea:b1:b4:60:a6:04:f5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Validity
Not Before: May 12 01:01:00 2025 GMT
Not After : May 13 01:01:00 2025 GMT
Subject: CN=ee070e6bc7267ab66a6e966a438e185e92f422b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8f:40:79:b2:4f:d1:f5:27:bb:6d:f9:b5:6d:
4a:f8:9c:a2:48:9b:fa:f5:aa:9f:ae:d9:9c:61:6d:
cc:f2:9f:05:68:5c:96:71:17:92:82:0a:9e:c1:c8:
70:a1:52:ff:f1:80:a0:46:37:67:e7:03:59:f2:89:
ad:52:2b:bd:a5:29:e3:ee:72:b6:4d:65:13:ec:c9:
07:d2:fa:49:14:83:d1:45:7e:f0:f9:20:f3:a4:6f:
82:db:0e:81:a2:16:08:21:91:3c:73:dc:70:4c:a1:
2d:09:bc:ef:69:a1:16:b6:32:87:e2:ea:c2:3a:fb:
9f:fa:ab:1d:18:da:fe:45:bc:35:7c:db:75:0e:2f:
47:b8:57:1e:58:a9:1b:be:c7:80:e6:21:8b:1d:c6:
84:4a:7f:cb:5b:58:1d:c0:c6:b9:da:d9:30:68:12:
9c:07:31:1e:d6:66:c5:2d:0f:59:fa:50:c8:53:5f:
b8:d3:6d:65:97:37:76:9a:36:87:b5:04:6d:5c:a4:
4b:63:bb:cd:20:85:46:e6:14:52:06:ed:93:63:f2:
d5:c1:54:79:e6:67:23:5a:f9:60:62:92:52:1c:79:
63:bc:ae:9a:55:cd:30:14:a5:7e:40:69:85:8d:32:
82:0f:e7:d2:03:d2:a2:df:24:26:04:04:d7:63:39:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:07:0E:6B:C7:26:7A:B6:6A:6E:96:6A:43:8E:18:5E:92:F4:22:B2
X509v3 Authority Key Identifier:
keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6d:88:cb:ab:ea:c5:37:b6:30:02:49:c2:83:4a:27:15:b7:
50:11:c7:4c:e8:61:9e:c3:81:7b:a2:f9:a2:e2:48:d7:2c:7b:
e8:9e:d6:6f:0a:2c:1c:10:88:d3:e2:e9:56:fb:bb:13:b2:24:
cf:f0:b7:d5:51:47:44:48:f9:01:5c:47:8c:c6:e3:31:d5:3d:
1a:b2:04:c6:5e:e3:4a:1a:24:0e:5b:23:df:07:a1:d3:8a:b7:
15:1e:2d:4d:22:29:6c:8e:d8:9f:2c:b1:b4:4b:1a:64:6f:7b:
52:16:63:7e:3f:a8:d6:d4:3f:b8:97:10:cf:83:be:6b:54:e1:
ce:51:47:c6:f0:96:b3:ea:9e:4c:b6:6e:da:39:1d:6a:e9:e3:
b9:7b:a6:f7:5d:77:0a:03:fa:a7:34:8d:9c:84:fe:4d:86:90:
cb:b6:99:f4:93:a0:1b:17:be:b4:19:b7:55:cf:79:a2:3b:23:
d4:77:c9:3d:7e:b8:5e:85:79:a1:88:b9:da:04:f7:09:20:b4:
db:15:4c:e4:6f:8b:4f:21:ab:aa:bd:12:40:03:99:2b:56:eb:
93:95:0b:3e:b4:07:b7:66:15:46:f9:e3:39:dc:ae:5c:86:ba:
de:5a:d6:de:18:a5:32:0c:91:06:f5:98:91:9f:7e:4c:1a:aa:
52:fa:e4:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAm1AKR0Ui+qxtGCmBPWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODNjNDM2Mjc5NTM3ZDRmNzI2ZDIzMTBjZWYxNGE0MmYx
YjJiOGEwHhcNMjUwNTEyMDEwMTAwWhcNMjUwNTEzMDEwMTAwWjAzMTEwLwYDVQQD
EyhlZTA3MGU2YmM3MjY3YWI2NmE2ZTk2NmE0MzhlMTg1ZTkyZjQyMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY9AebJP0fUnu235tW1K+JyiSJv6
9aqfrtmcYW3M8p8FaFyWcReSggqewchwoVL/8YCgRjdn5wNZ8omtUiu9pSnj7nK2
TWUT7MkH0vpJFIPRRX7w+SDzpG+C2w6BohYIIZE8c9xwTKEtCbzvaaEWtjKH4urC
Ovuf+qsdGNr+Rbw1fNt1Di9HuFceWKkbvseA5iGLHcaESn/LW1gdwMa52tkwaBKc
BzEe1mbFLQ9Z+lDIU1+4021llzd2mjaHtQRtXKRLY7vNIIVG5hRSBu2TY/LVwVR5
5mcjWvlgYpJSHHljvK6aVc0wFKV+QGmFjTKCD+fSA9Ki3yQmBATXYzniwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4HDmvHJnq2am6WakOOGF6S9CKyMB8GA1UdIwQY
MBaAFBCDxDYnlTfU9ybSMQzvFKQvGyuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTIt
ODEyMjQ4YjY1MzcwLzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTItODEyMjQ4YjY1Mzcw
LzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPm2Iy6vq
xTe2MAJJwoNKJxW3UBHHTOhhnsOBe6L5ouJI1yx76J7WbwosHBCI0+LpVvu7E7Ik
z/C31VFHREj5AVxHjMbjMdU9GrIExl7jShokDlsj3weh04q3FR4tTSIpbI7Ynyyx
tEsaZG97UhZjfj+o1tQ/uJcQz4O+a1ThzlFHxvCWs+qeTLZu2jkdaunjuXum9113
CgP6pzSNnIT+TYaQy7aZ9JOgGxe+tBm3Vc95ojsj1HfJPX64XoV5oYi52gT3CSC0
2xVM5G+LTyGrqr0SQAOZK1brk5ULPrQHt2YVRvnjOdyuXIa63lrW3hilMgyRBvWY
kZ9+TBqqUvrkOA==
-----END CERTIFICATE-----
Generated at Mon May 12 08:15:57 2025 by rpki-client