Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: L98rFxDFk+MpVy4zKUPHQ4PDNTw5sp0Cy2YhTK5Nu+Q=
Subject key identifier: 2D:DD:14:C2:11:9D:32:6A:81:90:78:DB:F5:F5:CC:58:02:A1:A2:9E
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 0198D6618F8F348CD3A6B92BBB36F5C208ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0858
Signing time: Sat 23 Aug 2025 10:02:54 +0000
Manifest this update: Sat 23 Aug 2025 10:02:54 +0000
Manifest next update: Sun 24 Aug 2025 10:02:54 +0000
Files and hashes: 1: 5cdSX-zrncWspL0K6fL133Q3uNs.roa (hash: RtUr90lsO7bvirIbH36Twsg4zf98Kyt3Rbxenxpq4mM=)
2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: M0hGvTYCQWYvuPX93nplp2Jp1aS3RyQ4yzJ11xY7wu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:8f:8f:34:8c:d3:a6:b9:2b:bb:36:f5:c2:08:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Aug 23 10:02:54 2025 GMT
Not After : Aug 24 10:02:54 2025 GMT
Subject: CN=2ddd14c2119d326a819078dbf5f5cc5802a1a29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:42:dd:46:f3:bf:8c:ef:d8:44:ad:23:ee:
52:e9:4d:48:66:e2:62:b4:24:bf:f7:f5:bb:a1:00:
42:dd:00:84:fb:b5:15:c2:41:c3:4e:ac:7b:4a:1b:
d8:f3:12:91:9c:2d:41:8d:7e:42:43:dc:4c:e6:79:
56:ad:11:fa:6f:3a:50:10:96:9b:70:d7:c7:47:a7:
28:fc:29:97:3a:50:bf:5f:60:20:ad:ab:16:6a:e5:
1d:27:99:ba:d9:c2:41:27:66:f2:a4:9d:f5:a8:bb:
79:7b:ed:79:03:b5:cc:c4:67:ec:ef:ae:a6:89:c2:
ef:7e:8d:2d:8c:f2:e7:45:14:ad:ec:18:9b:1e:20:
c9:92:8d:5e:3b:f3:ed:0c:c7:d4:c5:5b:92:fa:3c:
ce:56:1f:12:8e:37:ee:79:4e:ec:ad:59:e3:75:99:
68:cf:4e:08:fb:c4:a2:de:2e:61:53:e6:a0:c2:6d:
b5:ea:81:d1:fd:17:1d:77:7a:04:05:55:59:5d:03:
f7:ef:33:a9:56:1b:6c:f2:be:b6:d0:b6:9f:a1:3a:
0c:db:32:9c:4e:95:9e:b9:a5:7c:3a:45:49:21:cc:
ad:45:37:12:d8:b4:d8:34:b4:ab:4c:e3:e3:35:1d:
45:94:01:c7:c8:98:0d:1b:ce:c9:f3:c9:d0:93:4f:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DD:14:C2:11:9D:32:6A:81:90:78:DB:F5:F5:CC:58:02:A1:A2:9E
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:f9:11:83:e3:b4:be:22:6a:0c:4a:7d:29:87:4b:f3:a3:
70:60:5d:c7:a5:5e:14:3c:29:23:43:7a:d8:7f:75:63:40:bb:
46:27:61:e3:9b:3f:ad:bc:53:73:03:7d:c3:53:bf:05:ae:c2:
c1:92:8c:29:4b:a7:7e:d5:1c:a3:a2:02:54:c2:10:c1:71:c1:
c1:56:f6:4b:28:ac:be:09:d9:44:da:41:c8:93:b4:43:ac:16:
f1:b3:d8:49:f4:33:c6:f5:f1:00:20:15:ef:46:4f:c7:dc:84:
e3:32:0e:82:f9:97:94:56:d7:69:04:a3:bc:10:e4:24:b2:be:
bc:bb:7f:b4:02:c2:d4:72:db:5c:a6:11:36:9e:59:b5:7c:75:
24:ab:0d:e3:c3:02:b0:f5:96:9b:c3:0f:cf:8e:1e:00:b6:85:
54:0a:29:9b:4c:c2:0a:1d:5d:8e:70:c4:9b:e9:62:5f:3d:5e:
37:8c:dd:b7:c4:00:9a:bb:98:68:83:f7:28:76:94:22:3f:48:
eb:95:05:6b:61:b5:56:53:29:6c:30:24:ef:38:f7:29:04:b4:
34:98:72:6b:ee:89:d4:9c:20:7c:33:a2:0d:d5:c8:2c:3d:a7:
b0:a6:4e:5a:ac:89:31:46:42:b1:f4:da:4e:16:d3:8a:c0:0a:
2c:ae:ae:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYY+PNIzTprkruzb1wgjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWI1N2FiMGU5NjUxODY3OTExNGNiZjBlZThhZjU0YmJm
ZGE1ZjUwHhcNMjUwODIzMTAwMjU0WhcNMjUwODI0MTAwMjU0WjAzMTEwLwYDVQQD
EygyZGRkMTRjMjExOWQzMjZhODE5MDc4ZGJmNWY1Y2M1ODAyYTFhMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk69C3Ubzv4zv2EStI+5S6U1IZuJi
tCS/9/W7oQBC3QCE+7UVwkHDTqx7ShvY8xKRnC1BjX5CQ9xM5nlWrRH6bzpQEJab
cNfHR6co/CmXOlC/X2AgrasWauUdJ5m62cJBJ2bypJ31qLt5e+15A7XMxGfs766m
icLvfo0tjPLnRRSt7BibHiDJko1eO/PtDMfUxVuS+jzOVh8SjjfueU7srVnjdZlo
z04I+8Si3i5hU+agwm216oHR/Rcdd3oEBVVZXQP37zOpVhts8r620LafoToM2zKc
TpWeuaV8OkVJIcytRTcS2LTYNLSrTOPjNR1FlAHHyJgNG87J88nQk0/UZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3dFMIRnTJqgZB42/X1zFgCoaKeMB8GA1UdIwQY
MBaAFBCrV6sOllGGeRFMvw7or1S7/aX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUt
ZjM4MGJmMGZkZDg0LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUtZjM4MGJmMGZkZDg0
LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi35EYPj
tL4iagxKfSmHS/OjcGBdx6VeFDwpI0N62H91Y0C7Ridh45s/rbxTcwN9w1O/Ba7C
wZKMKUunftUco6ICVMIQwXHBwVb2SyisvgnZRNpByJO0Q6wW8bPYSfQzxvXxACAV
70ZPx9yE4zIOgvmXlFbXaQSjvBDkJLK+vLt/tALC1HLbXKYRNp5ZtXx1JKsN48MC
sPWWm8MPz44eALaFVAopm0zCCh1djnDEm+liXz1eN4zdt8QAmruYaIP3KHaUIj9I
65UFa2G1VlMpbDAk7zj3KQS0NJhya+6J1JwgfDOiDdXILD2nsKZOWqyJMUZCsfTa
ThbTisAKLK6udw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:52 2025 by rpki-client