Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File: eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier: JqMDjPNWss2uC2rXqyAj77R+uSU3MSUXI/bKFyi5dmQ=
Subject key identifier: CC:CC:15:95:5C:99:58:45:45:56:BF:60:8B:5E:39:F9:9B:09:4A:00
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer: /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial: 0197B70F6F7B99DC78BEC9744E278256F4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number: 12FA
Signing time: Sat 28 Jun 2025 15:02:11 +0000
Manifest this update: Sat 28 Jun 2025 15:02:11 +0000
Manifest next update: Sun 29 Jun 2025 15:02:11 +0000
Files and hashes: 1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: dxY0oyqNZSohoTdSUAVpiO231zft00Ta3DXajLwHtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:6f:7b:99:dc:78:be:c9:74:4e:27:82:56:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
Validity
Not Before: Jun 28 15:02:11 2025 GMT
Not After : Jun 29 15:02:11 2025 GMT
Subject: CN=cccc15955c9958454556bf608b5e39f99b094a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:97:82:c8:f2:c4:07:6f:63:29:d3:e9:7c:fd:
02:71:03:3e:9c:79:9e:03:f8:f7:da:a9:dc:19:b0:
12:30:21:88:b7:a2:ea:0b:d6:d7:78:14:58:e0:47:
8e:34:b5:c7:72:6b:02:42:35:e8:28:07:8b:98:c6:
05:b7:d9:98:01:00:66:77:d5:5e:fc:ae:59:64:93:
75:e4:68:8b:61:38:96:07:76:df:eb:25:2f:2c:9b:
71:22:03:00:07:35:f5:13:a3:c3:c9:69:78:66:1d:
d0:e5:1e:5a:cc:17:39:01:02:43:3f:86:48:eb:a7:
2a:b3:dd:f2:c4:cf:9c:1b:6b:68:a6:7f:b3:5f:1a:
17:14:43:33:ac:27:d4:32:84:8b:d8:6f:2c:15:37:
92:82:a4:44:7e:6a:c4:52:66:78:a2:c2:54:a0:bf:
f6:4d:c6:42:48:63:1e:10:db:b4:42:37:6c:ed:f3:
7e:00:dd:3e:6d:68:db:d8:99:b1:b5:75:81:a9:b3:
41:d1:ce:85:d8:77:f0:24:79:47:8c:97:36:70:8d:
9b:f9:09:1c:6c:c0:af:87:51:43:7d:12:45:f5:4d:
56:4c:79:62:15:32:4b:86:c9:51:a2:e6:aa:f1:93:
d4:05:7c:0b:10:e5:f2:85:64:34:25:4c:96:32:29:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:15:95:5C:99:58:45:45:56:BF:60:8B:5E:39:F9:9B:09:4A:00
X509v3 Authority Key Identifier:
keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:48:03:95:ec:8a:b3:c4:95:78:2e:30:e6:1d:87:2b:e3:e9:
3e:eb:e4:b9:78:7e:83:18:54:38:4c:77:1d:7e:c6:a0:da:8e:
e1:9a:33:cf:9d:21:9f:77:aa:fe:ab:ad:a6:24:e1:e4:6d:90:
86:a2:db:82:05:f0:95:cb:71:2d:9a:36:74:35:2a:5a:3e:a5:
2f:0b:33:95:ea:9b:e3:e5:e0:a6:7c:e5:f8:1c:e9:d8:59:ed:
48:b1:d8:1a:16:dd:dd:83:4d:51:41:ab:97:42:b0:42:9d:1e:
4f:84:c1:ea:10:84:b4:32:c9:42:98:3c:ed:02:7c:57:c3:f9:
84:76:31:a3:60:57:18:0a:42:20:e0:47:4e:46:3e:72:9b:9d:
53:d8:2b:54:f1:1e:48:75:80:64:55:d4:93:cb:3e:e4:04:07:
09:a8:11:79:70:b6:39:86:8b:61:dc:62:c0:c4:b5:46:e0:d6:
8f:cd:ee:ca:26:44:4f:ac:da:f2:1e:08:26:16:4c:95:59:a2:
83:bd:01:e3:93:a6:79:97:7b:4f:6e:7d:e3:69:d1:bd:11:79:
13:30:a5:58:c6:a9:40:7a:1c:fd:5a:f5:f0:93:d7:ba:be:86:
ea:c5:d5:f9:f9:7f:5b:52:f1:91:aa:f4:0b:e4:4a:4c:08:51:
0b:f9:cf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D297mdx4vsl0TieCVvTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MjMwNGNlY2U3ZmI2NTUxZDYyMWUyNTc3NDM3NTNkN2Qz
ZTdlYmEwHhcNMjUwNjI4MTUwMjExWhcNMjUwNjI5MTUwMjExWjAzMTEwLwYDVQQD
EyhjY2NjMTU5NTVjOTk1ODQ1NDU1NmJmNjA4YjVlMzlmOTliMDk0YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9peCyPLEB29jKdPpfP0CcQM+nHme
A/j32qncGbASMCGIt6LqC9bXeBRY4EeONLXHcmsCQjXoKAeLmMYFt9mYAQBmd9Ve
/K5ZZJN15GiLYTiWB3bf6yUvLJtxIgMABzX1E6PDyWl4Zh3Q5R5azBc5AQJDP4ZI
66cqs93yxM+cG2topn+zXxoXFEMzrCfUMoSL2G8sFTeSgqREfmrEUmZ4osJUoL/2
TcZCSGMeENu0Qjds7fN+AN0+bWjb2JmxtXWBqbNB0c6F2HfwJHlHjJc2cI2b+Qkc
bMCvh1FDfRJF9U1WTHliFTJLhslRouaq8ZPUBXwLEOXyhWQ0JUyWMile9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzMFZVcmVhFRVa/YIteOfmbCUoAMB8GA1UdIwQY
MBaAFHkjBM7Of7ZVHWIeJXdDdT19Pn66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEt
ZWQ4MmFlN2RiZDU5LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEtZWQ4MmFlN2RiZDU5
LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkgDleyK
s8SVeC4w5h2HK+PpPuvkuXh+gxhUOEx3HX7GoNqO4Zozz50hn3eq/qutpiTh5G2Q
hqLbggXwlctxLZo2dDUqWj6lLwszleqb4+Xgpnzl+Bzp2FntSLHYGhbd3YNNUUGr
l0KwQp0eT4TB6hCEtDLJQpg87QJ8V8P5hHYxo2BXGApCIOBHTkY+cpudU9grVPEe
SHWAZFXUk8s+5AQHCagReXC2OYaLYdxiwMS1RuDWj83uyiZET6za8h4IJhZMlVmi
g70B45OmeZd7T25942nRvRF5EzClWMapQHoc/Vr18JPXur6G6sXV+fl/W1Lxkar0
C+RKTAhRC/nPXg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:01 2025 by rpki-client