Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: Tvgo2Bw6ZqbGJwG9Kct7S9DyO+FhcMSBvtxsDdKxMBE=
Subject key identifier: C0:64:A4:06:8D:0F:BC:60:C2:BE:C9:0D:54:C5:C3:B3:E5:1B:D1:96
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 0197B74525950D9DEC4848039DEF8C3E3005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: 0Jq5JRyrBHlUQNxlmjtnLhIH8nBh1NC5k8FQ3rtxZcw=)
2: l3o0cPreMKkY6Zin7N9ceMUABWg.roa (hash: IkZ3DQrsK1OPin+reh8WbUesG/v7qTfWkg1bNypSLzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:25:95:0d:9d:ec:48:48:03:9d:ef:8c:3e:30:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=c064a4068d0fbc60c2bec90d54c5c3b3e51bd196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:76:91:a9:4e:73:1d:25:3d:52:3b:bf:fa:
b8:a3:d6:a2:e7:13:28:9a:ca:12:6e:4d:2d:3f:a7:
af:46:62:9f:cd:8f:46:47:fc:ae:2e:29:30:2f:03:
61:17:3c:91:60:2c:9e:0b:1b:8d:48:26:40:b0:72:
42:03:92:49:bc:0d:70:93:86:de:57:7a:88:05:e1:
38:cb:b5:c4:d9:b4:55:9d:f7:fc:46:a8:60:64:ea:
e0:c8:a4:6a:bd:b0:db:50:89:ce:7b:e3:79:98:98:
f4:4f:b8:db:68:b6:0e:b3:e5:bf:fd:a0:1e:1b:21:
de:e2:e6:e6:32:76:87:4e:0e:76:b7:d9:41:60:09:
ca:16:42:5c:e7:5f:5d:b2:fa:ba:5b:d4:4c:9d:6e:
ee:af:8a:bb:5f:9a:58:e3:49:85:ed:57:16:0a:dd:
0f:4c:da:8c:05:1e:4a:13:7e:5b:a7:5a:eb:2a:f9:
79:bc:0f:35:4b:b6:cd:24:50:b4:96:59:85:06:dd:
4d:c4:20:49:2d:59:dd:6f:dd:40:fd:5c:5e:52:30:
81:93:1f:6b:03:07:41:9f:98:83:9d:32:3d:65:ab:
ea:f1:d2:59:33:f4:ac:d7:fc:ff:dd:74:40:fd:c6:
22:cf:f1:bf:4f:e6:a9:dc:54:55:9e:46:5e:99:a1:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:A4:06:8D:0F:BC:60:C2:BE:C9:0D:54:C5:C3:B3:E5:1B:D1:96
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:94:4c:90:2d:67:6e:9e:5a:55:ad:44:79:17:38:33:ef:df:
69:36:07:40:64:42:6f:e6:6d:cf:34:2b:52:1f:ee:0b:06:07:
7e:73:59:f0:f8:b7:8c:41:69:9d:55:28:41:91:f8:0f:f6:6d:
c2:19:d5:52:31:6f:6f:c8:20:22:7d:24:8f:ca:e3:3a:a4:71:
fc:51:7b:26:74:ae:d7:2c:f6:d2:6a:24:63:48:5a:4b:a5:f9:
24:ae:93:47:4f:96:61:44:b6:d9:e0:8f:9c:3f:3b:a1:2a:21:
cd:75:19:46:8c:cf:58:97:8a:1f:43:ea:38:67:c7:63:a0:93:
9a:32:b8:72:26:24:0e:37:55:ed:73:2a:6f:b7:4a:9b:42:55:
17:4b:50:78:b9:91:e6:c3:60:6b:f6:61:b1:0a:19:34:e1:67:
09:9a:6e:84:79:02:47:6c:6c:b8:5d:cf:01:6b:de:eb:4c:6e:
7c:f8:d4:bb:2d:d8:9e:f4:33:32:6c:a4:c3:9c:d2:19:d1:09:
79:69:76:5c:79:b6:77:18:0e:3b:c4:cc:95:0c:3a:b5:6b:83:
62:9e:59:ce:bd:74:04:24:97:b3:97:86:03:a0:d2:83:a0:2d:
6e:57:bb:cc:77:24:7e:79:3b:2c:5d:fe:8a:de:70:a2:53:ac:
c7:e8:77:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSWVDZ3sSEgDne+MPjAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2Q5YWRkMTYxMzdlOGJhYjk4ZDc4ZTJhMzM2MGJjOGJk
NmYwZjEwHhcNMjUwNjI4MTYwMDUxWhcNMjUwNjI5MTYwMDUxWjAzMTEwLwYDVQQD
EyhjMDY0YTQwNjhkMGZiYzYwYzJiZWM5MGQ1NGM1YzNiM2U1MWJkMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ92kalOcx0lPVI7v/q4o9ai5xMo
msoSbk0tP6evRmKfzY9GR/yuLikwLwNhFzyRYCyeCxuNSCZAsHJCA5JJvA1wk4be
V3qIBeE4y7XE2bRVnff8RqhgZOrgyKRqvbDbUInOe+N5mJj0T7jbaLYOs+W//aAe
GyHe4ubmMnaHTg52t9lBYAnKFkJc519dsvq6W9RMnW7ur4q7X5pY40mF7VcWCt0P
TNqMBR5KE35bp1rrKvl5vA81S7bNJFC0llmFBt1NxCBJLVndb91A/VxeUjCBkx9r
AwdBn5iDnTI9Zavq8dJZM/Ss1/z/3XRA/cYiz/G/T+ap3FRVnkZemaE+2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBkpAaND7xgwr7JDVTFw7PlG9GWMB8GA1UdIwQY
MBaAFBLNmt0WE36Lq5jXjiozYLyL1vDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMt
MTcyZGY2YmNkNDViLzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMtMTcyZGY2YmNkNDVi
LzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJRMkC1n
bp5aVa1EeRc4M+/faTYHQGRCb+ZtzzQrUh/uCwYHfnNZ8Pi3jEFpnVUoQZH4D/Zt
whnVUjFvb8ggIn0kj8rjOqRx/FF7JnSu1yz20mokY0haS6X5JK6TR0+WYUS22eCP
nD87oSohzXUZRozPWJeKH0PqOGfHY6CTmjK4ciYkDjdV7XMqb7dKm0JVF0tQeLmR
5sNga/ZhsQoZNOFnCZpuhHkCR2xsuF3PAWve60xufPjUuy3YnvQzMmykw5zSGdEJ
eWl2XHm2dxgOO8TMlQw6tWuDYp5Zzr10BCSXs5eGA6DSg6Atble7zHckfnk7LF3+
it5wolOsx+h3aQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:58:51 2025 by rpki-client