Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: VuDR+y9hcVN3cycWIbjCjumOQMWvgQu6qykfCciEENs=
Subject key identifier: 74:0A:B8:C8:70:29:61:2C:3A:8C:43:E8:4A:CF:D6:E6:0B:9F:E7:A0
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 0197B88F8FBA3E17E5318DF09E69E26DA21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 073E
Signing time: Sat 28 Jun 2025 22:01:45 +0000
Manifest this update: Sat 28 Jun 2025 22:01:45 +0000
Manifest next update: Sun 29 Jun 2025 22:01:45 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: TxG1YFj0HLzjvfI6bGEYrBe34dBFTozA92Hnqy3bft0=)
2: s4gZLWdCbjdScQy92lhU1qj4INY.roa (hash: xkF7VCE+qi9EQz5A3LDxMLzmcYX7S6EBBQO/VGtQ7OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:8f:ba:3e:17:e5:31:8d:f0:9e:69:e2:6d:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Jun 28 22:01:45 2025 GMT
Not After : Jun 29 22:01:45 2025 GMT
Subject: CN=740ab8c87029612c3a8c43e84acfd6e60b9fe7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:b0:9a:9c:7b:a8:ab:74:02:9d:f5:f6:16:
e2:7e:64:73:fa:a1:61:94:d2:54:d5:df:c2:db:8d:
e5:ba:54:5f:57:5d:01:0a:0e:a0:c9:81:1c:e0:05:
1b:d0:77:03:f1:64:67:e8:3f:ff:e6:20:62:ab:ba:
5f:3a:c1:cc:92:d3:1d:e0:57:72:a5:0a:f2:c6:83:
85:b7:6e:1d:b4:10:64:e2:e3:2f:00:be:74:9a:8b:
dd:23:7c:f3:8a:78:79:d3:95:f0:32:9d:45:99:86:
f4:0b:2b:9a:11:e5:42:c7:2c:54:80:98:96:d3:83:
30:35:36:12:ea:cc:89:be:6c:15:0e:a8:d3:fc:aa:
f5:9e:b8:25:2a:de:62:b2:c6:9b:a1:75:78:88:08:
7c:f9:33:6d:2c:24:e8:03:7b:1a:74:dc:66:6b:dc:
57:80:39:b0:bb:15:a7:ac:8a:45:24:d9:72:ba:7a:
67:b2:22:12:30:a7:43:1a:5d:75:3a:99:4c:e9:4e:
5a:04:e7:7a:22:ff:3d:7e:ef:56:2c:c0:83:e4:a2:
5d:b6:b2:dd:8c:4b:27:c3:37:22:ae:d8:e1:1f:36:
3d:cb:d3:8f:fc:84:19:4d:49:a1:65:cc:24:b1:99:
4d:11:0e:fa:b0:86:69:89:01:e8:63:a5:9a:99:55:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:B8:C8:70:29:61:2C:3A:8C:43:E8:4A:CF:D6:E6:0B:9F:E7:A0
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:59:1a:d6:f8:c2:54:13:61:c9:ac:34:7c:27:55:27:b7:
f5:90:65:5e:2e:aa:38:83:40:5e:a6:42:67:42:22:81:d6:59:
ca:b3:d5:8e:64:99:09:d5:43:49:18:8d:13:eb:ed:4d:58:11:
b4:83:cd:38:92:7a:46:24:bd:88:27:a0:d0:d0:55:3c:e6:55:
07:e9:9d:2e:97:0a:6b:c5:26:ee:cf:ea:21:8d:db:ca:49:ae:
23:db:75:36:b3:91:28:bc:93:95:91:da:40:d5:2c:a6:f9:0a:
76:bc:3b:24:23:f4:58:78:dd:96:06:9a:d2:7b:1f:4d:1e:e0:
fe:82:8a:3c:7d:b1:43:3a:18:5d:cb:b4:08:36:b5:47:96:29:
a5:15:5b:74:ff:1b:c9:05:2e:d6:2c:6e:3e:36:30:fc:60:95:
d0:27:89:fc:be:26:28:dd:f7:d0:ea:85:ef:b7:57:33:b1:8c:
03:05:e1:0a:7e:98:d7:6a:db:03:96:4f:86:43:1c:4e:d7:8d:
d7:93:da:df:2e:3d:c2:71:de:1f:f4:c4:e3:e9:34:18:3a:70:
46:03:7c:03:b5:7e:f8:6f:7e:41:90:f8:4c:2a:76:24:71:6f:
43:4c:eb:e7:6a:6e:73:e4:67:04:b1:dc:6d:81:c2:75:f7:63:
47:77:e8:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j4+6PhflMY3wnmnibaIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMDg1YzU0MGMxMTRmYzg5NTdhMDI1MGJiNDlmNDg0Yjc0
MzU3YjkwHhcNMjUwNjI4MjIwMTQ1WhcNMjUwNjI5MjIwMTQ1WjAzMTEwLwYDVQQD
Eyg3NDBhYjhjODcwMjk2MTJjM2E4YzQzZTg0YWNmZDZlNjBiOWZlN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOKwmpx7qKt0Ap319hbifmRz+qFh
lNJU1d/C243lulRfV10BCg6gyYEc4AUb0HcD8WRn6D//5iBiq7pfOsHMktMd4Fdy
pQryxoOFt24dtBBk4uMvAL50movdI3zzinh505XwMp1FmYb0CyuaEeVCxyxUgJiW
04MwNTYS6syJvmwVDqjT/Kr1nrglKt5issaboXV4iAh8+TNtLCToA3sadNxma9xX
gDmwuxWnrIpFJNlyunpnsiISMKdDGl11OplM6U5aBOd6Iv89fu9WLMCD5KJdtrLd
jEsnwzcirtjhHzY9y9OP/IQZTUmhZcwksZlNEQ76sIZpiQHoY6WamVUmywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQKuMhwKWEsOoxD6ErP1uYLn+egMB8GA1UdIwQY
MBaAFBIIXFQMEU/IlXoCULtJ9IS3Q1e5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAt
OGFhNmY2YzE3MGZmLzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAtOGFhNmY2YzE3MGZm
LzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1BZGtb4
wlQTYcmsNHwnVSe39ZBlXi6qOINAXqZCZ0IigdZZyrPVjmSZCdVDSRiNE+vtTVgR
tIPNOJJ6RiS9iCeg0NBVPOZVB+mdLpcKa8Um7s/qIY3bykmuI9t1NrORKLyTlZHa
QNUspvkKdrw7JCP0WHjdlgaa0nsfTR7g/oKKPH2xQzoYXcu0CDa1R5YppRVbdP8b
yQUu1ixuPjYw/GCV0CeJ/L4mKN330OqF77dXM7GMAwXhCn6Y12rbA5ZPhkMcTteN
15Pa3y49wnHeH/TE4+k0GDpwRgN8A7V++G9+QZD4TCp2JHFvQ0zr52puc+RnBLHc
bYHCdfdjR3fosw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:50 2025 by rpki-client