Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File: eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier: ekHsgMAB0PE+eE99pmcWWf9Cq50t5IaYH/vbHZTjL4I=
Subject key identifier: E4:78:16:B6:8A:BD:EF:9B:72:C5:45:C4:01:AA:47:CC:6C:07:4B:C3
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial: 0198D77320C56F63B791CBB6E5DC6ED7FDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number: 0235
Signing time: Sat 23 Aug 2025 15:01:43 +0000
Manifest this update: Sat 23 Aug 2025 15:01:43 +0000
Manifest next update: Sun 24 Aug 2025 15:01:43 +0000
Files and hashes: 1: eLGVH-huMc8rapx-zBQol7W6wbs.roa (hash: dBq0SVYODoTbT9noZtho2o8DhkqOnGRrlJMatl/O+48=)
2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: Xrn6/i22BI+/3pwXteZQQRKTbUDylLUqPv3wSGG33VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:20:c5:6f:63:b7:91:cb:b6:e5:dc:6e:d7:fd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Validity
Not Before: Aug 23 15:01:43 2025 GMT
Not After : Aug 24 15:01:43 2025 GMT
Subject: CN=e47816b68abdef9b72c545c401aa47cc6c074bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:96:9a:2c:c7:20:f6:f4:dd:50:28:fe:8e:
fd:47:35:9d:d2:0e:be:16:23:b2:1b:b4:6a:e0:c6:
79:a4:d9:15:86:4c:a7:06:d8:f5:50:c6:5a:d8:b8:
2a:2f:a6:a8:08:9d:0a:62:04:c3:e8:4d:c2:1f:73:
7a:3f:d4:94:17:19:7c:38:10:51:94:f8:ef:aa:56:
9b:49:c4:eb:af:78:81:0a:cc:d4:bf:48:e7:fc:80:
4b:a6:41:ac:7b:33:7d:c8:97:4f:ce:e7:44:0d:f0:
5a:ba:88:67:d5:c5:c0:77:9f:a1:90:91:08:72:a8:
43:9a:0e:60:eb:db:ef:78:04:83:cd:51:aa:92:08:
91:82:94:29:94:35:5c:30:1f:9d:8f:4a:e3:ac:35:
ce:03:fc:c4:27:06:c3:6a:9d:a7:41:a7:10:24:07:
6c:88:57:44:4a:e1:3e:bb:31:6d:65:ca:44:da:34:
8a:86:12:8e:35:f9:94:76:4e:3a:2d:55:91:50:d7:
ee:69:fb:84:ef:b5:a4:f5:6d:68:4d:01:8d:82:6e:
cd:05:79:39:6a:7d:8b:a8:88:16:09:15:fb:eb:49:
55:75:a6:91:65:c2:42:0b:1b:61:54:ce:82:e3:6c:
f3:52:ae:23:73:30:bd:b2:35:20:8e:5d:1c:3d:15:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:78:16:B6:8A:BD:EF:9B:72:C5:45:C4:01:AA:47:CC:6C:07:4B:C3
X509v3 Authority Key Identifier:
keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1f:be:22:d7:61:d8:ee:4a:70:4a:0c:f6:22:fb:d9:85:e1:
6f:98:88:29:14:82:ea:7b:97:2c:75:01:38:a0:2d:86:49:f8:
43:43:09:7d:10:2f:8e:8c:e3:5c:05:43:22:07:94:33:76:80:
ad:ae:7d:af:c1:33:38:f2:23:a0:c4:c2:a9:30:eb:b8:98:08:
95:85:cd:d3:10:79:96:80:1d:60:c9:a7:0a:6c:ff:8c:32:12:
a6:43:8e:7e:01:f1:63:bf:93:01:f0:f9:63:cb:89:8a:56:f9:
7e:9f:58:f8:55:2f:1e:51:3d:48:d9:42:cb:ce:f8:15:58:fb:
45:a8:f3:f5:ee:c7:f5:b8:57:14:e4:a1:ed:cc:15:05:14:7a:
5b:d5:21:82:63:dc:fa:f4:de:03:7d:ac:b7:36:5b:6f:3c:5c:
a8:05:b7:78:67:18:4a:f1:61:2a:88:16:24:23:31:a3:98:f5:
4c:07:c0:ad:04:e2:36:2d:b9:c5:30:8a:ba:92:18:c0:80:90:
54:14:cf:64:9d:69:69:be:c4:8c:1f:ff:a0:f2:75:3b:38:5f:
93:1e:e9:f1:4b:b9:83:5a:c2:c5:1a:e9:0f:25:a2:9b:a6:4b:
ac:75:9c:4d:da:23:52:68:84:fe:bd:0f:c5:49:35:07:ea:57:
e9:a6:ad:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXcyDFb2O3kcu25dxu1/2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MjdmNmQwMDYyYTk3NjZiZDU4ZjBkMDc1YzRmMGQxMDI1
N2U2MDYwHhcNMjUwODIzMTUwMTQzWhcNMjUwODI0MTUwMTQzWjAzMTEwLwYDVQQD
EyhlNDc4MTZiNjhhYmRlZjliNzJjNTQ1YzQwMWFhNDdjYzZjMDc0YmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKSWmizHIPb03VAo/o79RzWd0g6+
FiOyG7Rq4MZ5pNkVhkynBtj1UMZa2LgqL6aoCJ0KYgTD6E3CH3N6P9SUFxl8OBBR
lPjvqlabScTrr3iBCszUv0jn/IBLpkGsezN9yJdPzudEDfBauohn1cXAd5+hkJEI
cqhDmg5g69vveASDzVGqkgiRgpQplDVcMB+dj0rjrDXOA/zEJwbDap2nQacQJAds
iFdESuE+uzFtZcpE2jSKhhKONfmUdk46LVWRUNfuafuE77Wk9W1oTQGNgm7NBXk5
an2LqIgWCRX760lVdaaRZcJCCxthVM6C42zzUq4jczC9sjUgjl0cPRVKLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR4FraKve+bcsVFxAGqR8xsB0vDMB8GA1UdIwQY
MBaAFHkn9tAGKpdmvVjw0HXE8NECV+YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWIt
YzVkMGNiN2I3ZGY1LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWItYzVkMGNiN2I3ZGY1
LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh++Itdh
2O5KcEoM9iL72YXhb5iIKRSC6nuXLHUBOKAthkn4Q0MJfRAvjozjXAVDIgeUM3aA
ra59r8EzOPIjoMTCqTDruJgIlYXN0xB5loAdYMmnCmz/jDISpkOOfgHxY7+TAfD5
Y8uJilb5fp9Y+FUvHlE9SNlCy874FVj7Rajz9e7H9bhXFOSh7cwVBRR6W9UhgmPc
+vTeA32stzZbbzxcqAW3eGcYSvFhKogWJCMxo5j1TAfArQTiNi25xTCKupIYwICQ
VBTPZJ1pab7EjB//oPJ1Ozhfkx7p8Uu5g1rCxRrpDyWim6ZLrHWcTdojUmiE/r0P
xUk1B+pX6aatwA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:50:38 2025 by rpki-client