Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: AvNDmfq8M+NK+6/0UVD9My90VfDiZd0/mt6nBkvgAWM=
Subject key identifier: 86:FA:F4:F9:CF:99:3E:F7:45:89:E0:6B:56:B0:FC:71:E1:19:FB:EC
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 0197B63278009E9C79CFF786AEE4E9C034F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 0202
Signing time: Sat 28 Jun 2025 11:00:50 +0000
Manifest this update: Sat 28 Jun 2025 11:00:50 +0000
Manifest next update: Sun 29 Jun 2025 11:00:50 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: nufoT2I3yDWMkx7+UV7zGQPAaZY6Oxae5mV/1Gx0ZBo=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:78:00:9e:9c:79:cf:f7:86:ae:e4:e9:c0:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Jun 28 11:00:50 2025 GMT
Not After : Jun 29 11:00:50 2025 GMT
Subject: CN=86faf4f9cf993ef74589e06b56b0fc71e119fbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:51:de:52:c9:13:b9:2a:57:b3:c2:8d:5f:
86:a1:6b:df:d3:21:2b:ab:96:cd:19:e7:2e:78:1e:
f2:28:a9:da:36:c2:43:91:00:6c:32:52:b5:97:82:
a4:bd:00:dc:13:c2:dd:57:78:5e:5e:9b:1f:13:dc:
4f:3e:ee:0d:aa:fc:9e:60:b6:71:b4:f1:9b:52:dd:
8c:b9:1a:3f:45:68:f0:b1:01:99:1e:3c:ee:38:89:
1b:c7:a1:37:f6:b0:77:41:a9:28:c3:72:82:49:2e:
9e:64:c5:8f:d2:28:bd:a2:d6:7c:bf:d9:34:d0:ee:
1d:2a:68:3b:c5:ae:3b:aa:11:a8:22:15:d2:99:3d:
bf:a8:84:09:49:49:e0:e4:d3:cf:7d:83:87:8a:a6:
03:da:27:74:75:51:e8:28:30:24:32:64:cb:a9:65:
2b:0a:ca:01:f3:a5:b7:47:47:53:19:57:cf:79:0d:
b4:81:fd:12:7f:59:b0:42:f3:3e:6a:80:ad:56:24:
7c:b5:ff:15:ea:aa:88:74:a5:21:42:1a:87:3f:3b:
a6:97:b7:0e:b5:76:38:dd:07:43:b8:c2:dc:c4:b1:
47:70:a5:c6:41:e2:89:b7:89:d7:c7:f3:4f:c5:8b:
2b:eb:7d:19:aa:1d:d3:cc:d4:9f:fd:a3:d4:67:04:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:F4:F9:CF:99:3E:F7:45:89:E0:6B:56:B0:FC:71:E1:19:FB:EC
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a4:be:c0:0b:fe:87:8b:77:b2:c3:77:4d:10:14:24:4d:d3:
e6:df:36:ad:e0:39:22:88:44:93:f4:c8:73:bd:67:aa:ee:70:
0f:c4:9a:ef:0b:0a:39:30:6e:f8:3d:f8:07:b4:09:e8:96:f5:
fa:b4:6a:a4:6f:4f:f3:fc:50:bc:88:32:35:1b:62:43:bc:37:
43:2a:f5:fc:69:1f:7e:d7:da:19:a5:1d:e9:c9:ed:d7:8b:82:
68:2b:6c:64:ac:be:8f:2a:30:0a:93:35:2f:38:98:9a:34:b8:
b0:51:4c:99:6a:c9:9f:b8:96:69:94:34:e0:e7:0f:02:58:a0:
8b:b6:52:f8:04:87:a6:c9:40:54:69:f2:f4:12:57:d5:ad:68:
3f:2e:ed:4b:4f:7b:57:66:bc:99:d3:e3:45:57:6b:77:bf:ce:
1f:fd:ba:cf:c9:bb:ff:9e:fb:21:2f:2f:20:93:3d:aa:73:00:
f9:2a:f8:5e:d9:94:87:25:00:11:d7:ed:87:ff:04:3c:39:1d:
1f:25:d5:68:79:0c:ac:0a:bc:6b:95:ee:f5:5a:18:d4:cf:8c:
b3:e5:7f:5c:e0:fe:a8:7c:33:45:a5:0f:bc:a1:99:1f:91:b0:
03:99:1a:9c:cd:d7:8a:b4:10:53:d2:3d:28:80:6f:d5:20:11:
b2:8f:a1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MngAnpx5z/eGruTpwDT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTczZDFiM2UyMzFjNTdiMzUxOWU4ZDRlNTQ3ODY4NjA2
YzRmZDMwHhcNMjUwNjI4MTEwMDUwWhcNMjUwNjI5MTEwMDUwWjAzMTEwLwYDVQQD
Eyg4NmZhZjRmOWNmOTkzZWY3NDU4OWUwNmI1NmIwZmM3MWUxMTlmYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKJR3lLJE7kqV7PCjV+GoWvf0yEr
q5bNGecueB7yKKnaNsJDkQBsMlK1l4KkvQDcE8LdV3heXpsfE9xPPu4NqvyeYLZx
tPGbUt2MuRo/RWjwsQGZHjzuOIkbx6E39rB3Qakow3KCSS6eZMWP0ii9otZ8v9k0
0O4dKmg7xa47qhGoIhXSmT2/qIQJSUng5NPPfYOHiqYD2id0dVHoKDAkMmTLqWUr
CsoB86W3R0dTGVfPeQ20gf0Sf1mwQvM+aoCtViR8tf8V6qqIdKUhQhqHPzuml7cO
tXY43QdDuMLcxLFHcKXGQeKJt4nXx/NPxYsr630Zqh3TzNSf/aPUZwTrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb69PnPmT73RYnga1aw/HHhGfvsMB8GA1UdIwQY
MBaAFBIXPRs+IxxXs1GejU5UeGhgbE/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEt
M2Y4MzcyZDk2OGQwLzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEtM2Y4MzcyZDk2OGQw
LzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6S+wAv+
h4t3ssN3TRAUJE3T5t82reA5IohEk/TIc71nqu5wD8Sa7wsKOTBu+D34B7QJ6Jb1
+rRqpG9P8/xQvIgyNRtiQ7w3Qyr1/GkfftfaGaUd6cnt14uCaCtsZKy+jyowCpM1
LziYmjS4sFFMmWrJn7iWaZQ04OcPAligi7ZS+ASHpslAVGny9BJX1a1oPy7tS097
V2a8mdPjRVdrd7/OH/26z8m7/577IS8vIJM9qnMA+Sr4XtmUhyUAEdfth/8EPDkd
HyXVaHkMrAq8a5Xu9VoY1M+Ms+V/XOD+qHwzRaUPvKGZH5GwA5kanM3XirQQU9I9
KIBv1SARso+h+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:23 2025 by rpki-client