Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier: PXAZ+tuunwvc8OvJUxRiTdiDBJ9MZMfohhvFlRkdl0Y=
Subject key identifier: 41:FB:98:E8:DA:80:E9:A3:E0:F4:22:E1:74:12:F7:4D:D1:EF:46:D0
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer: /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial: 0197C426AFA0E444B15AAED48BB85166B390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number: 0161
Signing time: Tue 01 Jul 2025 04:02:38 +0000
Manifest this update: Tue 01 Jul 2025 04:02:38 +0000
Manifest next update: Wed 02 Jul 2025 04:02:38 +0000
Files and hashes: 1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: ST/I04+XGreZxIwLyDKWZ51plOWvWMmTKrL7+EZMLDk=)
2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:af:a0:e4:44:b1:5a:ae:d4:8b:b8:51:66:b3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
Validity
Not Before: Jul 1 04:02:38 2025 GMT
Not After : Jul 2 04:02:38 2025 GMT
Subject: CN=41fb98e8da80e9a3e0f422e17412f74dd1ef46d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:df:86:a2:ba:7d:d8:9c:b7:62:68:37:0b:
75:84:a1:cc:24:49:74:b7:96:dd:c3:a6:d7:7b:95:
f2:9e:cd:d9:8a:4e:11:ba:09:e0:e2:8b:f1:a4:b1:
dc:2e:17:49:d3:a7:62:7f:20:ea:2d:50:07:fb:57:
56:bc:bb:81:c0:08:35:d9:47:ae:c2:1c:d0:b1:c4:
ea:da:40:34:7f:61:fd:3f:b3:c4:18:45:04:03:ac:
14:8a:2c:ef:89:e3:00:9f:6f:9f:e5:a4:8a:5c:36:
93:21:c1:1f:c4:e5:c1:b5:3d:59:56:e1:1f:e1:ee:
9c:51:5a:f4:cf:29:c3:81:44:e7:31:5b:b0:ab:87:
ca:45:13:4b:9c:d3:0e:f2:66:a0:fb:dc:af:04:ba:
0e:3b:de:5e:e5:2a:30:31:7d:2a:a9:c8:75:9b:c9:
ca:b2:ab:de:51:da:3e:72:e2:b0:2f:a1:3b:b3:53:
32:9c:ec:ee:04:40:51:38:3f:a8:0c:62:72:7d:23:
ff:09:c1:ae:35:98:26:5f:11:3b:db:e1:10:60:69:
07:d3:d2:79:74:8a:2d:2b:8e:8c:09:2a:a3:dd:26:
f7:27:4a:0f:80:4b:5a:76:0c:c7:06:58:49:97:0f:
52:3d:08:f3:81:4d:10:da:1d:61:af:94:03:00:75:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:98:E8:DA:80:E9:A3:E0:F4:22:E1:74:12:F7:4D:D1:EF:46:D0
X509v3 Authority Key Identifier:
keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:05:20:c8:b5:37:2b:c2:f1:f7:8b:25:df:53:09:f2:67:80:
8d:ad:35:6f:d1:5a:f8:ae:77:32:82:db:b6:4a:1c:6d:b9:bd:
76:21:de:a7:5a:ec:3a:14:a5:cf:69:8c:58:d9:a7:82:7d:7f:
cd:9d:4f:9b:21:fb:fb:19:cf:93:eb:97:cc:b6:e9:dd:79:87:
11:de:ff:fc:d7:69:cf:29:1e:f4:d7:82:8e:59:22:eb:ba:58:
26:d5:1c:b0:a7:86:a4:62:27:bc:c7:0d:c6:5c:6f:49:2f:30:
cb:fa:6f:8c:f1:48:b2:1d:9f:70:6c:d2:8a:e3:a7:df:5b:7a:
7c:47:e2:19:0c:4c:d8:22:af:7f:8b:83:07:90:01:33:de:00:
09:dd:39:fd:c4:34:f3:5d:b4:9e:df:e8:f4:f9:48:9b:f1:fa:
d5:72:cf:3d:44:b5:e0:21:3b:ee:cb:d4:e9:be:d0:45:9b:79:
38:bb:0b:2d:e7:4a:db:6b:fd:d7:78:d0:69:98:9e:1c:55:37:
33:66:2d:c5:7c:9d:8d:79:4b:87:dc:8c:f5:c2:0a:14:7a:c8:
b9:5c:ca:ca:9f:4b:3a:ff:8e:8e:ab:9a:52:33:de:db:c1:e9:
d5:77:3a:f0:51:0d:c8:9b:46:63:ec:02:f4:bb:35:f7:86:35:
11:66:4e:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJq+g5ESxWq7Ui7hRZrOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDMyYzEyMTczNTQ0OWYxNTM4ZmYwMDM2ZjRhYmQwNjAw
YTgyNWYwHhcNMjUwNzAxMDQwMjM4WhcNMjUwNzAyMDQwMjM4WjAzMTEwLwYDVQQD
Eyg0MWZiOThlOGRhODBlOWEzZTBmNDIyZTE3NDEyZjc0ZGQxZWY0NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X3fhqK6fdict2JoNwt1hKHMJEl0
t5bdw6bXe5Xyns3Zik4Rugng4ovxpLHcLhdJ06difyDqLVAH+1dWvLuBwAg12Ueu
whzQscTq2kA0f2H9P7PEGEUEA6wUiizvieMAn2+f5aSKXDaTIcEfxOXBtT1ZVuEf
4e6cUVr0zynDgUTnMVuwq4fKRRNLnNMO8mag+9yvBLoOO95e5SowMX0qqch1m8nK
sqveUdo+cuKwL6E7s1MynOzuBEBROD+oDGJyfSP/CcGuNZgmXxE72+EQYGkH09J5
dIotK46MCSqj3Sb3J0oPgEtadgzHBlhJlw9SPQjzgU0Q2h1hr5QDAHWfkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH7mOjagOmj4PQi4XQS903R70bQMB8GA1UdIwQY
MBaAFHjTLBIXNUSfFTj/ADb0q9BgCoJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUt
MzRhM2FhMGI2YWEwLzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUtMzRhM2FhMGI2YWEw
LzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgUgyLU3
K8Lx94sl31MJ8meAja01b9Fa+K53MoLbtkocbbm9diHep1rsOhSlz2mMWNmngn1/
zZ1PmyH7+xnPk+uXzLbp3XmHEd7//Ndpzyke9NeCjlki67pYJtUcsKeGpGInvMcN
xlxvSS8wy/pvjPFIsh2fcGzSiuOn31t6fEfiGQxM2CKvf4uDB5ABM94ACd05/cQ0
8120nt/o9PlIm/H61XLPPUS14CE77svU6b7QRZt5OLsLLedK22v913jQaZieHFU3
M2YtxXydjXlLh9yM9cIKFHrIuVzKyp9LOv+OjquaUjPe28Hp1Xc68FENyJtGY+wC
9Ls194Y1EWZOeg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 12:53:07 2025 by rpki-client