
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier: Z1KtDcZ5luG0jJn9zq59CenSd6SbOkJ9qmBy6FtAZfE=
Subject key identifier: AB:32:E6:74:01:4C:54:DD:F2:20:1E:73:F6:91:F2:16:A6:8A:C7:1C
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 0197B7EA83861639ADBAFE6E7051A5CA3D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number: 15D2
Signing time: Sat 28 Jun 2025 19:01:28 +0000
Manifest this update: Sat 28 Jun 2025 19:01:28 +0000
Manifest next update: Sun 29 Jun 2025 19:01:28 +0000
Files and hashes: 1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: IyPjcv1LsMBS6ngA8dt1hunQsKkhFcdPfPUAOwp0DI8=)
2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
3: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
4: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
5: ibV6SVEOzYK-uCJ2IJP7n2XGoFE.roa (hash: 367ZTo8bU7FXxL+j4Dkgjzx4iuXuZnPhTMCWZPMb+Q4=)
6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:83:86:16:39:ad:ba:fe:6e:70:51:a5:ca:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jun 28 19:01:28 2025 GMT
Not After : Jun 29 19:01:28 2025 GMT
Subject: CN=ab32e674014c54ddf2201e73f691f216a68ac71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:1c:56:1a:ea:cc:0f:ac:b5:4f:01:91:fa:
40:6d:b7:87:9e:36:fd:03:b0:33:b4:73:5e:b1:6b:
5b:6f:2b:24:79:04:1e:27:03:72:a6:bf:73:39:e3:
7f:80:7b:2d:82:08:cd:2a:3f:54:cd:51:02:9e:0e:
f9:cb:77:1a:e2:e4:ec:c1:f8:2e:d1:ca:06:13:7b:
cf:3c:74:c2:19:14:76:3c:c2:38:95:8c:d4:ef:40:
e8:b8:01:f0:81:ea:f1:bf:0b:b9:fd:ad:86:46:f1:
81:57:ae:4e:7a:de:fb:f4:90:c8:50:2a:eb:6f:af:
1c:30:e2:c1:60:69:64:64:ea:23:99:d3:43:9d:b6:
6a:ab:2d:f4:ca:9b:ec:7e:c8:34:81:83:af:9c:1a:
fc:c3:fe:03:a0:24:e2:f4:cc:f9:9e:39:73:70:1f:
90:b1:24:2d:73:fe:37:9c:48:26:b5:bd:0a:fe:06:
83:3f:b8:3b:47:ec:ca:7b:87:fd:1d:0b:0a:8e:19:
e3:d1:57:ab:ac:7f:72:23:da:9f:53:0c:00:cb:33:
9d:e8:15:2d:0f:a2:93:e1:d9:ed:1d:01:18:ed:3f:
7e:47:90:97:cc:03:9f:00:8c:7f:6a:17:59:ce:af:
70:ac:e5:d2:d7:f5:93:64:3a:7f:b9:1c:57:43:9b:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:E6:74:01:4C:54:DD:F2:20:1E:73:F6:91:F2:16:A6:8A:C7:1C
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e8:43:e9:b9:b5:d1:2c:3b:af:66:f8:21:5b:fb:4e:5d:cd:
85:68:e6:c0:5e:ff:91:3e:5a:56:a1:02:68:27:e5:75:36:a1:
5f:ab:b6:7a:79:c6:ae:21:01:c7:0b:4f:71:d9:82:c6:e3:1a:
3c:7b:d0:43:a1:32:e6:15:e1:14:81:dd:31:c3:34:fd:53:21:
9c:73:51:7c:12:f3:8e:82:8e:dd:4b:bd:78:48:54:67:94:c5:
df:92:da:4e:fa:8e:ce:90:b8:a7:5d:b9:86:a9:75:2e:04:86:
a5:6d:a9:ba:90:6d:97:d2:4c:1a:de:14:5f:da:4a:04:3e:07:
13:15:5a:aa:af:86:2c:1a:98:c5:d0:9c:72:d2:62:25:3f:4a:
79:cd:ea:0d:78:8b:7f:7c:ef:27:25:c7:54:c1:81:00:99:01:
e0:12:6f:76:29:c7:d4:4d:ff:83:a7:95:c0:f4:73:2d:1d:e5:
e3:2d:a3:a2:07:17:a2:a7:24:9d:50:1a:f9:cf:a5:78:64:c7:
1a:a8:e4:14:16:a2:21:85:46:33:f4:00:d0:48:67:da:17:71:
ac:bc:83:28:a3:28:a2:be:16:de:c2:3e:88:12:cd:d7:d4:99:
af:85:6d:53:a3:6d:58:74:89:76:be:4c:fe:62:1a:4a:cb:c6:
85:ab:e2:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36oOGFjmtuv5ucFGlyj0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3
YWRhY2EwHhcNMjUwNjI4MTkwMTI4WhcNMjUwNjI5MTkwMTI4WjAzMTEwLwYDVQQD
EyhhYjMyZTY3NDAxNGM1NGRkZjIyMDFlNzNmNjkxZjIxNmE2OGFjNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp4cVhrqzA+stU8BkfpAbbeHnjb9
A7AztHNesWtbbyskeQQeJwNypr9zOeN/gHstggjNKj9UzVECng75y3ca4uTswfgu
0coGE3vPPHTCGRR2PMI4lYzU70DouAHwgerxvwu5/a2GRvGBV65Oet779JDIUCrr
b68cMOLBYGlkZOojmdNDnbZqqy30ypvsfsg0gYOvnBr8w/4DoCTi9Mz5njlzcB+Q
sSQtc/43nEgmtb0K/gaDP7g7R+zKe4f9HQsKjhnj0VerrH9yI9qfUwwAyzOd6BUt
D6KT4dntHQEY7T9+R5CXzAOfAIx/ahdZzq9wrOXS1/WTZDp/uRxXQ5vEuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsy5nQBTFTd8iAec/aR8hamisccMB8GA1UdIwQY
MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt
MDY0NDE0ZDAzNDBmLzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm
LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuhD6bm1
0Sw7r2b4IVv7Tl3NhWjmwF7/kT5aVqECaCfldTahX6u2ennGriEBxwtPcdmCxuMa
PHvQQ6Ey5hXhFIHdMcM0/VMhnHNRfBLzjoKO3Uu9eEhUZ5TF35LaTvqOzpC4p125
hql1LgSGpW2pupBtl9JMGt4UX9pKBD4HExVaqq+GLBqYxdCcctJiJT9Kec3qDXiL
f3zvJyXHVMGBAJkB4BJvdinH1E3/g6eVwPRzLR3l4y2jogcXoqcknVAa+c+leGTH
GqjkFBaiIYVGM/QA0Ehn2hdxrLyDKKMoor4W3sI+iBLN19SZr4VtU6NtWHSJdr5M
/mIaSsvGhavixQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:57 2025 by rpki-client