Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File: E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier: oMs7IcF//3/24cnUrOLxh9jVAzAWPJMWAg7H/h/JmfU=
Subject key identifier: E5:B0:73:9C:2E:0C:08:47:D7:90:3C:2C:A0:D4:03:57:E4:BB:54:54
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 0197BAEB99BD771A7000B2A843AA35174ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 09:01:31 +0000
Manifest this update: Sun 29 Jun 2025 09:01:31 +0000
Manifest next update: Mon 30 Jun 2025 09:01:31 +0000
Files and hashes: 1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=)
2: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=)
3: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: S8qVg1DKo4NZqgkRZZ3fGoPp+NCOSX+dv+KdWpA12fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:99:bd:77:1a:70:00:b2:a8:43:aa:35:17:4a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Jun 29 09:01:31 2025 GMT
Not After : Jun 30 09:01:31 2025 GMT
Subject: CN=e5b0739c2e0c0847d7903c2ca0d40357e4bb5454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:bb:b0:70:6d:34:c3:32:4f:31:6b:53:7f:
3d:31:3f:51:08:1f:32:15:92:c9:cf:20:50:4b:19:
cb:1a:0f:d4:bf:01:4a:21:10:b3:ae:a8:74:ad:bf:
68:66:21:31:e8:77:0b:1b:4d:3f:2a:76:f3:69:e4:
33:9d:e5:c3:6b:b0:fb:cc:37:42:e1:24:a1:59:4d:
d1:38:5b:8f:01:79:25:60:a6:6f:ea:55:68:ec:cd:
69:36:3c:42:53:35:f5:8e:87:35:3b:c3:02:14:b8:
13:6e:6d:3a:aa:ff:f7:f7:30:eb:da:0e:2f:c2:8a:
44:3f:8d:1a:32:5b:25:b4:ae:19:35:04:8b:94:82:
f3:33:a8:46:8a:21:39:15:d0:f9:00:a6:48:29:95:
1a:88:27:ee:2c:1a:3b:4a:75:a5:b2:f6:94:08:ea:
bb:fb:56:97:b2:66:56:12:1c:76:47:ea:41:ae:34:
e9:0e:8c:f0:21:d0:c4:d4:3c:93:8a:8b:d8:bb:9a:
a2:d5:af:72:a7:a1:a5:17:6a:f5:6e:95:75:71:f6:
07:3b:dc:8b:cc:ba:54:92:9b:f9:85:89:99:8c:71:
bc:da:aa:6d:de:00:b5:61:d0:43:46:5d:3e:55:cf:
4f:ab:2a:04:20:83:54:6b:25:fe:b0:a4:eb:0f:21:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B0:73:9C:2E:0C:08:47:D7:90:3C:2C:A0:D4:03:57:E4:BB:54:54
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:47:b6:34:bc:29:b3:a1:bb:07:37:58:ad:bd:dd:b0:9d:
f1:c9:61:58:f4:5a:a6:cc:a1:db:b4:1a:7f:c2:ba:d6:4f:c1:
91:ed:93:2a:d5:1c:e8:73:ab:f5:94:f1:06:9d:3d:f2:ba:e4:
52:48:68:f1:6d:99:e3:03:a3:18:ab:00:02:79:b1:38:89:37:
25:05:ad:41:f0:be:7a:c1:c3:2a:f3:0b:20:cf:bf:b9:8c:32:
17:34:4d:26:fb:24:05:8f:ad:45:96:c1:9a:dd:19:f5:4f:1b:
36:56:c5:a1:7d:14:ba:e4:a0:55:d3:33:65:08:40:f8:28:27:
0b:27:dd:33:70:7c:89:c6:93:0b:27:aa:d9:dd:a5:ad:1d:d4:
47:35:a9:9e:09:1b:30:e1:0f:db:46:46:ad:82:7f:60:c4:54:
f8:4b:05:01:85:55:1d:9e:0d:e9:27:04:4d:7c:f0:82:60:5d:
fd:59:aa:06:fd:c7:f2:72:cc:de:87:37:c2:2b:85:4e:d9:7f:
a1:2b:96:7f:42:2b:8f:77:1b:0a:55:92:b9:61:6c:1c:20:13:
4e:5b:7a:fd:dd:e7:1c:65:e1:a6:36:35:41:4b:ab:87:7f:be:
7d:50:35:b9:f5:c5:17:9e:cd:b2:3f:52:14:97:b6:6f:8a:2c:
76:4c:10:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe665m9dxpwALKoQ6o1F0reMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTE5YWVmNjgzOTY5ZWI5ODJmMmRkYjIxOWI0NjUyYWYy
NmI5NmQwHhcNMjUwNjI5MDkwMTMxWhcNMjUwNjMwMDkwMTMxWjAzMTEwLwYDVQQD
EyhlNWIwNzM5YzJlMGMwODQ3ZDc5MDNjMmNhMGQ0MDM1N2U0YmI1NDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl27sHBtNMMyTzFrU389MT9RCB8y
FZLJzyBQSxnLGg/UvwFKIRCzrqh0rb9oZiEx6HcLG00/KnbzaeQzneXDa7D7zDdC
4SShWU3ROFuPAXklYKZv6lVo7M1pNjxCUzX1joc1O8MCFLgTbm06qv/39zDr2g4v
wopEP40aMlsltK4ZNQSLlILzM6hGiiE5FdD5AKZIKZUaiCfuLBo7SnWlsvaUCOq7
+1aXsmZWEhx2R+pBrjTpDozwIdDE1DyTiovYu5qi1a9yp6GlF2r1bpV1cfYHO9yL
zLpUkpv5hYmZjHG82qpt3gC1YdBDRl0+Vc9PqyoEIINUayX+sKTrDyHguQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWwc5wuDAhH15A8LKDUA1fku1RUMB8GA1UdIwQY
MBaAFBPhmu9oOWnrmC8t2yGbRlKvJrltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQt
ZmY5NjkyOGE2ZGY0LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQtZmY5NjkyOGE2ZGY0
LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4JHtjS8
KbOhuwc3WK293bCd8clhWPRapsyh27Qaf8K61k/Bke2TKtUc6HOr9ZTxBp098rrk
Ukho8W2Z4wOjGKsAAnmxOIk3JQWtQfC+esHDKvMLIM+/uYwyFzRNJvskBY+tRZbB
mt0Z9U8bNlbFoX0UuuSgVdMzZQhA+CgnCyfdM3B8icaTCyeq2d2lrR3URzWpngkb
MOEP20ZGrYJ/YMRU+EsFAYVVHZ4N6ScETXzwgmBd/VmqBv3H8nLM3oc3wiuFTtl/
oSuWf0Irj3cbClWSuWFsHCATTlt6/d3nHGXhpjY1QUurh3++fVA1ufXFF57Nsj9S
FJe2b4osdkwQwQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:10 2025 by rpki-client