Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: hrS4mr8wkhWtGvBakpyT2FNKC6/xsYY7/wg9Duov73Y=
Subject key identifier: AA:A2:00:56:E1:E9:26:95:C1:4C:AB:3B:93:48:D4:AA:81:7E:39:4C
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 0197CC15C96F68398F8D7EEDFC29E7A46807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 17:01:09 +0000
Manifest this update: Wed 02 Jul 2025 17:01:09 +0000
Manifest next update: Thu 03 Jul 2025 17:01:09 +0000
Files and hashes: 1: 2JjyX_-1ihqsSblonAIGQ2WI8zE.roa (hash: zFek1n9vUOT2IuGKFpGhKS8yEEOPqAUeFGqimhy7H3I=)
2: 2zv-bqUF4ie6dLoJOvbHg-Khzrk.roa (hash: SuQwzPeSaf/HqGV5aFne0AqsUIDLEGL4BEqdCUksZzA=)
3: 90IBFTm1n0EdouWYts1bm2C2AV0.roa (hash: ERgPNr6bXt5OGFwKPUno3LLiwFJjlAJ5vniWmV4rL9o=)
4: IPDWq2JXklmZilVzAW_qJFHve_M.roa (hash: 8qLID3yci9mCWiyOl1eMby2l1Aaax7OKoB39T8J6xu0=)
5: Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa (hash: SAnzykFF7+yaqNzuYwleeCNNDy8d940iOSnUgG5s+iM=)
6: Zu3SmHOhZpwuSSti9wdImp6Ga-Q.roa (hash: 5ZnrCuNHa1wjQpFfQY/Zj6DgGr5ywhEPGA9N3saHG2U=)
7: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: EUqxoSh7czsV4Cevl0ICbN2ckM7uxl7m+sh5s1DOjp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:c9:6f:68:39:8f:8d:7e:ed:fc:29:e7:a4:68:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jul 2 17:01:09 2025 GMT
Not After : Jul 3 17:01:09 2025 GMT
Subject: CN=aaa20056e1e92695c14cab3b9348d4aa817e394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:40:ff:df:f6:ff:f5:58:25:45:35:f5:f1:
5c:a0:9c:c6:d5:bd:67:bd:98:7e:c6:19:0c:41:e3:
40:5d:20:de:a2:97:8b:73:e3:da:64:90:93:fb:b1:
3a:61:cc:f5:74:d6:45:04:f6:d6:9b:59:7c:86:5d:
01:40:41:5b:82:bf:0a:47:23:52:99:f6:61:56:bf:
1b:4c:1c:a2:8f:e5:3b:56:f4:62:1e:4e:55:8d:bc:
6c:25:e1:6f:95:ab:db:17:d9:f6:4d:d1:6c:89:51:
bb:c5:c1:f6:0a:e9:16:fd:bc:b0:dd:31:61:10:73:
76:40:a0:e2:07:38:64:14:0a:25:a9:b8:83:02:1e:
b4:71:b7:69:93:d6:d1:ab:79:cc:40:5b:ef:4e:b9:
e2:94:0e:9d:35:b7:34:47:23:05:22:4d:36:13:b8:
ad:b0:d7:3a:36:f1:38:2c:71:c1:dc:d4:7c:f1:54:
42:ed:e4:ea:e4:4b:80:57:f8:65:74:d4:db:ce:fa:
6c:66:1f:a9:b6:52:2f:f9:64:97:a9:d6:5e:4e:06:
4f:d1:27:c1:da:2c:d7:5a:dd:38:88:a5:c2:d8:8e:
37:07:d3:35:5b:57:18:39:22:d1:54:1f:a9:4c:18:
23:93:ac:0f:57:df:37:98:a4:f7:d2:d9:0e:7c:0c:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:00:56:E1:E9:26:95:C1:4C:AB:3B:93:48:D4:AA:81:7E:39:4C
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:84:ed:bc:d1:6b:06:08:33:13:74:64:66:84:e1:e2:b0:27:
f2:62:e1:07:fd:e1:a2:3b:d6:c7:cc:74:57:10:a4:3a:b7:98:
a3:60:b3:18:b2:79:15:1b:91:41:e3:8a:45:7f:00:54:45:17:
95:6b:f2:1d:8d:f9:04:83:d7:d7:e8:11:9c:b3:bb:6e:71:83:
85:fb:42:0c:7d:0b:12:f6:cc:8a:15:e8:0d:d6:f4:c3:e6:38:
e8:3e:62:a5:4d:21:ba:8d:6a:6b:b9:bc:b4:20:ac:33:5c:47:
b2:51:e3:c4:34:1f:65:f8:de:90:2a:75:6e:39:8c:aa:19:35:
00:89:82:6c:76:bd:ba:09:5d:27:98:1c:2c:ab:d0:43:c5:92:
0e:b9:b4:5e:94:6c:9e:8c:86:4c:9c:98:3c:38:db:97:b8:f7:
8d:57:4d:e2:20:b8:50:01:a4:9a:15:1a:0f:96:8b:2f:f4:02:
5a:08:ac:42:0a:72:07:12:56:26:21:19:53:da:b4:b9:a9:7f:
2d:cd:63:3e:de:bb:34:60:e9:d1:21:29:20:52:64:8c:35:d2:
3e:ba:13:b9:1d:4b:23:c7:ec:7f:00:0a:58:80:8e:7d:8a:e3:
e6:d2:f7:59:3d:17:d9:8b:b1:3f:ce:26:90:dc:99:a8:29:e3:
c8:5d:bd:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMFclvaDmPjX7t/CnnpGgHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx
ODRlMWQwHhcNMjUwNzAyMTcwMTA5WhcNMjUwNzAzMTcwMTA5WjAzMTEwLwYDVQQD
EyhhYWEyMDA1NmUxZTkyNjk1YzE0Y2FiM2I5MzQ4ZDRhYTgxN2UzOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPJA/9/2//VYJUU19fFcoJzG1b1n
vZh+xhkMQeNAXSDeopeLc+PaZJCT+7E6Ycz1dNZFBPbWm1l8hl0BQEFbgr8KRyNS
mfZhVr8bTByij+U7VvRiHk5VjbxsJeFvlavbF9n2TdFsiVG7xcH2CukW/byw3TFh
EHN2QKDiBzhkFAolqbiDAh60cbdpk9bRq3nMQFvvTrnilA6dNbc0RyMFIk02E7it
sNc6NvE4LHHB3NR88VRC7eTq5EuAV/hldNTbzvpsZh+ptlIv+WSXqdZeTgZP0SfB
2izXWt04iKXC2I43B9M1W1cYOSLRVB+pTBgjk6wPV983mKT30tkOfAzS3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqiAFbh6SaVwUyrO5NI1KqBfjlMMB8GA1UdIwQY
MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt
ZDAwM2U1NmZlNzUzLzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTktZDAwM2U1NmZlNzUz
LzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioTtvNFr
BggzE3RkZoTh4rAn8mLhB/3hojvWx8x0VxCkOreYo2CzGLJ5FRuRQeOKRX8AVEUX
lWvyHY35BIPX1+gRnLO7bnGDhftCDH0LEvbMihXoDdb0w+Y46D5ipU0huo1qa7m8
tCCsM1xHslHjxDQfZfjekCp1bjmMqhk1AImCbHa9ugldJ5gcLKvQQ8WSDrm0XpRs
noyGTJyYPDjbl7j3jVdN4iC4UAGkmhUaD5aLL/QCWgisQgpyBxJWJiEZU9q0ual/
Lc1jPt67NGDp0SEpIFJkjDXSProTuR1LI8fsfwAKWICOfYrj5tL3WT0X2YuxP84m
kNyZqCnjyF29Vg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:40:48 2025 by rpki-client