Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File: E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier: iW451tC+rXHNUjVBjcwv52131G7cMN6pNGVDk8G9nm4=
Subject key identifier: EB:83:F6:A8:E4:76:D8:30:D0:B2:25:74:40:ED:5F:14:A3:BB:4A:DE
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 0198D4E0368A8817D1D4DFE3098F66BB3DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=)
2: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=)
3: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: C/ivEzOaKacRJ8WzyKglkj3iPcNTI+HHzhkTP2OoKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:36:8a:88:17:d1:d4:df:e3:09:8f:66:bb:3d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=eb83f6a8e476d830d0b2257440ed5f14a3bb4ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:11:98:17:e3:3f:da:9c:20:21:9c:1b:1d:
ca:c6:f9:7c:aa:ca:a5:ec:b0:bf:99:21:d3:af:73:
9e:f7:05:eb:b9:79:d1:2a:e3:22:6e:bb:a1:5b:bb:
bc:b2:04:80:f8:a5:47:76:97:45:eb:39:d4:63:fc:
59:45:c4:9d:10:fc:a6:a7:29:08:63:08:6a:e7:c1:
9f:50:7b:95:38:10:41:52:06:45:86:85:5a:3a:ee:
16:94:da:42:f2:0e:6a:87:78:98:7a:56:13:31:20:
73:eb:8c:f7:9e:1b:85:73:ee:3e:95:e2:f5:f4:a2:
4f:70:c1:d6:f5:6c:18:ca:6e:a6:2a:1a:c7:1f:52:
b3:b0:30:60:56:0b:5a:f6:b1:35:e5:88:c3:bd:39:
6e:f2:c0:02:03:08:85:3e:60:a4:52:3b:95:52:0c:
28:3b:e0:29:28:f4:31:49:f3:c4:71:90:f9:46:7e:
70:67:90:35:81:c0:28:cd:6f:b2:55:c5:17:4f:5b:
3d:84:49:9d:db:5a:7d:e2:57:6b:0c:c0:02:79:9d:
d4:95:26:3f:2f:3a:29:57:b4:c5:eb:ba:6e:87:c1:
8e:b6:96:87:a5:3e:62:58:89:fd:6a:28:ae:62:76:
e1:2a:f1:7b:65:a8:8f:82:d4:73:ae:d7:27:68:04:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:F6:A8:E4:76:D8:30:D0:B2:25:74:40:ED:5F:14:A3:BB:4A:DE
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:cd:9d:e8:84:a3:ab:85:81:58:86:f1:ea:6a:2c:bb:5c:
83:06:8e:81:3e:d2:3b:2f:bf:8a:be:15:ba:0c:c7:2e:8f:70:
9a:e6:6e:13:d1:23:6c:27:1d:e3:6a:1e:6e:0f:75:5e:89:92:
54:b5:2f:15:53:b7:cc:97:8c:16:0c:ff:0e:c2:69:3f:f4:e7:
1d:33:a2:9e:e8:ee:19:93:2d:44:07:7e:50:91:6a:58:22:51:
a6:9a:93:04:95:52:c2:1b:da:f0:45:2a:78:aa:9d:0a:e6:49:
38:3a:5a:4c:74:7e:b9:ed:cb:6b:e0:22:5e:23:1d:8b:b9:52:
e1:5a:9b:dc:21:46:2e:aa:0c:23:03:6a:f1:fd:39:f1:a1:d8:
9d:2e:af:56:f7:c5:76:7a:08:8c:fb:67:06:64:2c:b3:e7:6e:
21:9a:d1:d5:c0:cd:0d:2f:9f:00:8f:7f:df:10:58:c4:70:e1:
e0:fe:8d:ff:48:8a:59:fb:9b:d0:73:2c:37:f7:61:c8:b6:a7:
a4:c2:19:d4:1a:6d:85:7e:d9:b7:60:cd:8b:8e:f3:2b:da:90:
ba:28:a0:4d:d9:02:e3:fd:e9:43:fe:a4:e0:31:71:f3:69:7d:
d0:e4:c2:02:97:06:4e:a3:f4:54:5b:c0:13:89:17:ff:d2:e6:
d3:b1:32:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4DaKiBfR1N/jCY9muz3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTE5YWVmNjgzOTY5ZWI5ODJmMmRkYjIxOWI0NjUyYWYy
NmI5NmQwHhcNMjUwODIzMDMwMjAwWhcNMjUwODI0MDMwMjAwWjAzMTEwLwYDVQQD
EyhlYjgzZjZhOGU0NzZkODMwZDBiMjI1NzQ0MGVkNWYxNGEzYmI0YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulcRmBfjP9qcICGcGx3Kxvl8qsql
7LC/mSHTr3Oe9wXruXnRKuMibruhW7u8sgSA+KVHdpdF6znUY/xZRcSdEPympykI
Ywhq58GfUHuVOBBBUgZFhoVaOu4WlNpC8g5qh3iYelYTMSBz64z3nhuFc+4+leL1
9KJPcMHW9WwYym6mKhrHH1KzsDBgVgta9rE15YjDvTlu8sACAwiFPmCkUjuVUgwo
O+ApKPQxSfPEcZD5Rn5wZ5A1gcAozW+yVcUXT1s9hEmd21p94ldrDMACeZ3UlSY/
LzopV7TF67puh8GOtpaHpT5iWIn9aiiuYnbhKvF7ZaiPgtRzrtcnaATpQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuD9qjkdtgw0LIldEDtXxSju0reMB8GA1UdIwQY
MBaAFBPhmu9oOWnrmC8t2yGbRlKvJrltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQt
ZmY5NjkyOGE2ZGY0LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQtZmY5NjkyOGE2ZGY0
LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxjNneiE
o6uFgViG8epqLLtcgwaOgT7SOy+/ir4VugzHLo9wmuZuE9EjbCcd42oebg91XomS
VLUvFVO3zJeMFgz/DsJpP/TnHTOinujuGZMtRAd+UJFqWCJRppqTBJVSwhva8EUq
eKqdCuZJODpaTHR+ue3La+AiXiMdi7lS4Vqb3CFGLqoMIwNq8f058aHYnS6vVvfF
dnoIjPtnBmQss+duIZrR1cDNDS+fAI9/3xBYxHDh4P6N/0iKWfub0HMsN/dhyLan
pMIZ1BpthX7Zt2DNi47zK9qQuiigTdkC4/3pQ/6k4DFx82l90OTCApcGTqP0VFvA
E4kX/9Lm07EyKw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:40 2025 by rpki-client