Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: QM8ar4gMNZYPttcdbV81QZvGy31EudI7UhGoA0fZ3ew=
Subject key identifier: 42:52:42:41:EB:DE:5C:09:E1:4F:9A:4A:87:22:9D:D3:91:87:DF:17
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 0197B77C0AE409F288C362E4934959396297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 0F7D
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=)
2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: Dy18e3DENIXR2Mjknb12DAgwUVfN8i1WSdsVN9T8qWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0a:e4:09:f2:88:c3:62:e4:93:49:59:39:62:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=42524241ebde5c09e14f9a4a87229dd39187df17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:d9:85:c4:b6:50:e3:c2:6a:10:f8:e8:26:
b2:9a:41:ff:09:da:05:f9:33:8e:a7:4c:b5:41:b4:
9b:8a:8a:92:ee:0b:7a:20:67:a0:af:5f:63:d4:77:
31:37:d0:af:54:22:90:34:9d:7c:e2:f4:eb:25:69:
f9:b4:4c:d6:f3:0b:da:de:83:ae:d8:e9:06:2c:7f:
ec:58:fa:ed:fe:09:f8:6f:f3:99:b2:23:91:4e:6d:
08:d4:c6:bc:65:45:ec:07:de:ae:9d:be:3d:52:ba:
d6:13:b7:bd:45:9b:72:77:0c:6c:de:e2:41:b7:63:
0e:28:46:1a:30:d4:45:a9:8b:59:69:15:20:b0:61:
87:3b:d5:42:3f:04:68:0c:7a:6c:0f:25:9d:5c:98:
b8:4a:88:55:5c:77:38:1e:b0:de:24:25:17:76:c4:
25:c4:e7:7e:5b:c9:84:39:80:44:8e:a3:86:25:d4:
44:d5:9b:7a:9f:8a:13:5c:19:90:2d:bf:3f:a4:46:
aa:f2:ad:19:5e:da:ab:e2:0f:7c:1d:13:4b:51:96:
4a:1b:da:94:ad:7e:83:c8:31:e8:49:14:c3:b3:c1:
5c:fb:da:aa:a8:22:79:cb:be:b3:fc:77:73:3b:51:
7e:b6:fc:d9:8a:75:4e:62:56:cd:cf:5e:59:33:86:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:42:41:EB:DE:5C:09:E1:4F:9A:4A:87:22:9D:D3:91:87:DF:17
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3f:c2:df:a8:37:4f:3c:fe:bf:cd:d5:8c:d0:4a:e4:ba:83:
7d:33:c9:06:b4:a8:34:9b:f2:9f:13:32:11:42:51:84:4d:74:
fd:fa:ef:a5:70:0c:b4:54:5a:3e:d2:b9:b6:eb:35:47:ba:19:
a2:f6:c8:5d:5a:b9:70:7b:45:6e:eb:fe:0e:2d:06:41:32:d9:
59:bf:d0:db:39:0c:76:f2:82:5a:e8:b3:3a:f4:e5:ee:34:d3:
6e:34:29:e6:33:b3:3e:1e:2f:7f:6b:9d:48:c9:db:cf:d3:c8:
22:19:cc:01:15:36:58:c6:ad:a7:6e:5a:f1:78:7d:b2:b8:69:
07:45:f1:83:f9:ab:67:12:fe:27:33:a3:bc:55:64:ea:a9:b5:
87:48:0c:33:fc:24:91:95:7f:b2:d5:67:94:bd:0a:3b:4e:82:
0a:26:bc:d0:36:e8:da:ea:67:72:0b:db:ba:5d:d4:e5:37:dc:
cd:a0:22:43:2b:11:a5:66:9d:e7:4c:12:d0:fd:27:4e:f8:5f:
6a:64:15:dc:94:01:3f:bb:1f:35:45:e3:ca:af:9b:9c:18:b8:
30:05:e1:42:04:8d:a2:4a:71:83:fa:7f:64:88:83:9a:08:8b:
33:97:fd:2a:e0:15:59:ba:ab:67:6e:32:13:88:08:73:89:f3:
b6:79:65:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fArkCfKIw2Lkk0lZOWKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMGU0NGM5MmFkNDkzMTE4YTRhZDJiYTgxMTQ1ZjFkMzRh
MThiY2EwHhcNMjUwNjI4MTcwMDQ5WhcNMjUwNjI5MTcwMDQ5WjAzMTEwLwYDVQQD
Eyg0MjUyNDI0MWViZGU1YzA5ZTE0ZjlhNGE4NzIyOWRkMzkxODdkZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNzZhcS2UOPCahD46CaymkH/CdoF
+TOOp0y1QbSbioqS7gt6IGegr19j1HcxN9CvVCKQNJ184vTrJWn5tEzW8wva3oOu
2OkGLH/sWPrt/gn4b/OZsiORTm0I1Ma8ZUXsB96unb49UrrWE7e9RZtydwxs3uJB
t2MOKEYaMNRFqYtZaRUgsGGHO9VCPwRoDHpsDyWdXJi4SohVXHc4HrDeJCUXdsQl
xOd+W8mEOYBEjqOGJdRE1Zt6n4oTXBmQLb8/pEaq8q0ZXtqr4g98HRNLUZZKG9qU
rX6DyDHoSRTDs8Fc+9qqqCJ5y76z/HdzO1F+tvzZinVOYlbNz15ZM4YncwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJSQkHr3lwJ4U+aSocindORh98XMB8GA1UdIwQY
MBaAFBAORMkq1JMRikrSuoEUXx00oYvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUt
NGY1MjEyMjkwNzY5LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUtNGY1MjEyMjkwNzY5
LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID/C36g3
Tzz+v83VjNBK5LqDfTPJBrSoNJvynxMyEUJRhE10/frvpXAMtFRaPtK5tus1R7oZ
ovbIXVq5cHtFbuv+Di0GQTLZWb/Q2zkMdvKCWuizOvTl7jTTbjQp5jOzPh4vf2ud
SMnbz9PIIhnMARU2WMatp25a8Xh9srhpB0Xxg/mrZxL+JzOjvFVk6qm1h0gMM/wk
kZV/stVnlL0KO06CCia80Dbo2upncgvbul3U5TfczaAiQysRpWad50wS0P0nTvhf
amQV3JQBP7sfNUXjyq+bnBi4MAXhQgSNokpxg/p/ZIiDmgiLM5f9KuAVWbqrZ24y
E4gIc4nztnllsA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:33 2025 by rpki-client