Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: /4nPacQhPNFg58jG++9U9IUBIxogK4Rx2yJ4l5ZqpP4=
Subject key identifier: D7:F3:BF:6C:D1:E3:E7:DF:18:05:FB:44:35:C8:A7:36:3E:EB:41:F2
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 0197B8C6073B927ED9CC8E7639F6895369D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 11DC
Signing time: Sat 28 Jun 2025 23:01:14 +0000
Manifest this update: Sat 28 Jun 2025 23:01:14 +0000
Manifest next update: Sun 29 Jun 2025 23:01:14 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: XpC6sE5Zv2js0UbF4/tK6w/KymNrKjm3fymFP7x/xwo=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:07:3b:92:7e:d9:cc:8e:76:39:f6:89:53:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jun 28 23:01:14 2025 GMT
Not After : Jun 29 23:01:14 2025 GMT
Subject: CN=d7f3bf6cd1e3e7df1805fb4435c8a7363eeb41f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:e6:91:27:8f:a7:95:4a:13:00:6f:10:50:
98:de:46:71:58:78:38:24:a2:ff:3b:2e:33:37:15:
56:a7:55:ae:0f:0e:7f:30:ca:d5:a3:f8:e2:81:63:
67:ee:b0:ea:4b:2a:f1:89:a1:a4:82:b6:6c:ce:99:
ed:d3:df:83:4d:9b:49:a2:c2:f1:ab:40:2a:3b:c8:
99:3f:b4:6e:de:01:0b:14:e4:b5:f9:f9:ec:3f:a3:
ac:66:96:4a:1b:9b:c0:84:78:8f:a2:1b:35:e7:37:
a7:19:70:d0:1f:ce:28:51:a5:a6:2d:bf:ee:ec:c5:
bb:89:16:ee:e9:98:ea:ce:d5:59:26:3d:05:32:04:
ad:26:e1:d6:b7:25:e3:28:bd:6d:8d:23:f5:3a:ea:
d0:ee:55:19:c6:e2:14:f5:dc:72:d5:3b:34:36:fa:
8c:8e:88:27:e8:18:ce:64:2f:3a:3d:6f:b0:1d:c6:
06:58:40:de:cf:44:1f:c7:56:08:01:70:db:37:60:
72:de:b3:b5:1b:83:d5:21:30:3c:af:c5:71:de:a4:
a7:5e:4e:88:de:b3:2b:26:75:e3:ed:19:8b:5b:07:
56:21:e8:62:35:0f:21:61:e0:ab:a9:68:80:ef:0a:
77:79:72:6a:ac:06:db:f8:c6:19:4f:c8:5b:91:1c:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F3:BF:6C:D1:E3:E7:DF:18:05:FB:44:35:C8:A7:36:3E:EB:41:F2
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:8e:0b:c6:b9:83:46:60:68:40:52:d9:63:20:b9:d1:42:
05:24:7f:0b:8c:7b:80:97:08:3c:73:9b:8f:8c:80:ae:1b:71:
c7:4a:48:30:5b:a2:b2:30:46:85:22:27:cb:6a:70:16:5f:80:
b5:4e:4f:60:59:d9:a7:5d:c2:1d:6b:b9:f0:a7:d3:8b:15:e7:
40:17:5a:74:a0:02:f3:a0:38:d3:18:09:b2:02:95:8f:f1:1b:
68:ad:5e:20:89:bb:c7:11:4a:c9:47:e8:b0:76:d1:ce:e3:dc:
59:20:91:9a:90:c1:b7:d8:c4:e6:95:23:db:5f:fa:79:a4:87:
12:a7:92:43:0d:4d:bf:c0:40:cb:f6:bb:49:08:c0:6b:29:93:
86:9d:31:57:1d:2c:26:51:4d:4f:41:22:cf:b8:d8:02:d2:82:
ee:8b:1f:b1:c8:dd:97:65:bb:b4:2d:17:b1:2d:66:39:a1:dd:
ee:65:49:5b:3b:9c:72:37:3b:25:1b:fb:a7:93:8d:f3:28:d8:
7e:fb:93:f4:aa:1a:41:24:f3:8d:5c:5b:6f:05:50:88:09:c6:
bf:a2:1a:fd:5e:9f:a1:85:0f:65:e4:a8:0b:2c:35:b5:de:d9:
ed:3c:d4:ac:7d:fa:2a:a6:75:a4:f9:07:68:e7:d8:42:6e:65:
82:7b:40:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xgc7kn7ZzI52OfaJU2nWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz
YjRjYzMwHhcNMjUwNjI4MjMwMTE0WhcNMjUwNjI5MjMwMTE0WjAzMTEwLwYDVQQD
EyhkN2YzYmY2Y2QxZTNlN2RmMTgwNWZiNDQzNWM4YTczNjNlZWI0MWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XvmkSePp5VKEwBvEFCY3kZxWHg4
JKL/Oy4zNxVWp1WuDw5/MMrVo/jigWNn7rDqSyrxiaGkgrZszpnt09+DTZtJosLx
q0AqO8iZP7Ru3gELFOS1+fnsP6OsZpZKG5vAhHiPohs15zenGXDQH84oUaWmLb/u
7MW7iRbu6ZjqztVZJj0FMgStJuHWtyXjKL1tjSP1OurQ7lUZxuIU9dxy1Ts0NvqM
jogn6BjOZC86PW+wHcYGWEDez0Qfx1YIAXDbN2By3rO1G4PVITA8r8Vx3qSnXk6I
3rMrJnXj7RmLWwdWIehiNQ8hYeCrqWiA7wp3eXJqrAbb+MYZT8hbkRxSEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfzv2zR4+ffGAX7RDXIpzY+60HyMB8GA1UdIwQY
MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt
M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx
LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxGOC8a5
g0ZgaEBS2WMgudFCBSR/C4x7gJcIPHObj4yArhtxx0pIMFuisjBGhSIny2pwFl+A
tU5PYFnZp13CHWu58KfTixXnQBdadKAC86A40xgJsgKVj/EbaK1eIIm7xxFKyUfo
sHbRzuPcWSCRmpDBt9jE5pUj21/6eaSHEqeSQw1Nv8BAy/a7SQjAaymThp0xVx0s
JlFNT0Eiz7jYAtKC7osfscjdl2W7tC0XsS1mOaHd7mVJWzuccjc7JRv7p5ON8yjY
fvuT9KoaQSTzjVxbbwVQiAnGv6Ia/V6foYUPZeSoCyw1td7Z7TzUrH36KqZ1pPkH
aOfYQm5lgntA1g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:16 2025 by rpki-client