Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
File: eeJLR_iUPK1uBMn2RssQd8FA_fs.mft (raw, json)
Hash identifier: Ga1NXcqFu88tLLLLAEzHFxFpIdho/KFKJ1hQay650tQ=
Subject key identifier: B8:11:F8:C6:1C:97:FF:C2:9B:0B:8D:92:6F:72:18:F5:56:26:CE:42
Authority key identifier: 79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
Certificate issuer: /CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Certificate serial: 0196AE44AA5E8495014124EE1114E6174E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
Manifest number: 08E1
Signing time: Thu 08 May 2025 05:00:57 +0000
Manifest this update: Thu 08 May 2025 05:00:57 +0000
Manifest next update: Fri 09 May 2025 05:00:57 +0000
Files and hashes: 1: Ff0yLRBnCd2a-1PZFAaKXEt87-w.roa (hash: QzNWCIaA542I7LzlR5+5wOCVAclFkGjaeVPYZqjN+Sg=)
2: HmjrrvNNU1yqGq3_xmYXZ7xuiFg.roa (hash: Kbry8XJIb38Dn/hCakpXS7cXVbuwiYg0BYs5Jt2kXbk=)
3: eeJLR_iUPK1uBMn2RssQd8FA_fs.crl (hash: kPExl5ju0UMGbuYzAvHHzb71/5ohOEL6y7/wxlA49Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:aa:5e:84:95:01:41:24:ee:11:14:e6:17:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Validity
Not Before: May 8 05:00:57 2025 GMT
Not After : May 9 05:00:57 2025 GMT
Subject: CN=b811f8c61c97ffc29b0b8d926f7218f55626ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:96:a5:79:8c:09:4d:de:00:c4:6f:3e:c2:
76:5b:e6:19:e5:cf:9d:9b:67:8b:4d:40:fa:c1:f4:
54:da:84:b3:aa:28:11:b7:51:3e:0c:5f:60:ee:6e:
c1:46:36:fb:be:10:d8:37:83:9b:fd:6a:42:51:97:
20:60:87:00:73:e7:9a:5c:62:03:8d:08:89:34:92:
be:71:02:34:37:0a:3d:94:6a:d1:40:9c:00:1c:1c:
cb:da:9b:e1:d3:9f:c6:0c:9a:fc:36:4a:51:74:6b:
9e:65:4c:d1:be:6d:1f:05:ce:02:cd:44:f7:bb:21:
c6:19:63:b4:fb:eb:2d:c1:bd:10:e3:89:28:92:2f:
5a:69:55:91:97:74:aa:b4:46:e1:43:dd:96:cc:f4:
f0:b1:3e:00:4b:13:41:1b:73:92:2d:85:ab:08:14:
f4:78:5b:95:40:6d:6b:89:ab:41:01:f9:30:2d:89:
02:18:5d:a9:a6:cb:5e:c1:e4:4e:00:8a:d7:f3:6f:
91:b9:c9:fa:2f:15:f6:27:3d:25:b1:cb:8f:4c:fb:
04:d9:f4:48:ed:10:73:8d:c5:35:21:cc:cd:c6:bb:
1f:45:89:d0:80:eb:f2:a1:c1:ab:b6:4f:ce:6e:3a:
2f:6d:05:55:39:76:d6:97:fa:ff:f6:01:cb:25:9b:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:F8:C6:1C:97:FF:C2:9B:0B:8D:92:6F:72:18:F5:56:26:CE:42
X509v3 Authority Key Identifier:
keyid:79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:68:7e:37:3a:d6:ae:90:52:3d:de:ab:24:cd:2d:6e:d3:df:
2a:7d:ae:15:ed:e6:00:c6:8d:15:19:a2:24:7c:1c:85:10:9e:
25:e0:65:31:12:14:7b:16:ae:b3:f7:44:f7:51:58:1f:cd:9c:
8d:0c:04:46:3b:08:2e:be:7a:99:e8:aa:9c:32:e9:13:e9:bc:
e9:79:4a:a6:49:d5:22:c8:a0:4e:68:a5:0d:f3:51:eb:ba:8b:
4f:a6:ed:96:fa:62:5a:37:d2:e2:29:d3:ec:9f:33:b2:7f:4e:
1b:34:61:6c:23:62:1b:49:a0:00:d9:c8:e9:f4:25:12:ac:08:
ae:40:42:ab:1f:a8:47:d7:ad:2d:e4:24:90:f2:0a:28:e6:da:
0f:af:e2:b9:b4:e6:d1:5d:cb:97:52:39:83:74:6a:1c:65:a3:
65:66:d9:7c:58:6a:05:d1:17:e9:ef:7d:52:fa:94:99:07:88:
6e:e3:6e:2f:86:59:d8:26:52:2b:56:4c:33:ea:eb:52:74:da:
e5:91:ff:78:3e:f9:13:d1:40:09:78:73:7e:2c:32:29:9c:ff:
23:e1:f2:5f:8b:23:1e:5e:dc:ba:25:f9:91:0e:42:39:cf:04:
6b:26:28:c5:cd:84:82:99:9b:ff:d7:26:6d:62:7b:99:1d:40:
0e:b6:b9:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauRKpehJUBQSTuERTmF05qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZTI0YjQ3Zjg5NDNjYWQ2ZTA0YzlmNjQ2Y2IxMDc3YzE0
MGZkZmIwHhcNMjUwNTA4MDUwMDU3WhcNMjUwNTA5MDUwMDU3WjAzMTEwLwYDVQQD
EyhiODExZjhjNjFjOTdmZmMyOWIwYjhkOTI2ZjcyMThmNTU2MjZjZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzqWpXmMCU3eAMRvPsJ2W+YZ5c+d
m2eLTUD6wfRU2oSzqigRt1E+DF9g7m7BRjb7vhDYN4Ob/WpCUZcgYIcAc+eaXGID
jQiJNJK+cQI0Nwo9lGrRQJwAHBzL2pvh05/GDJr8NkpRdGueZUzRvm0fBc4CzUT3
uyHGGWO0++stwb0Q44koki9aaVWRl3SqtEbhQ92WzPTwsT4ASxNBG3OSLYWrCBT0
eFuVQG1riatBAfkwLYkCGF2ppsteweROAIrX82+Rucn6LxX2Jz0lscuPTPsE2fRI
7RBzjcU1IczNxrsfRYnQgOvyocGrtk/ObjovbQVVOXbWl/r/9gHLJZvU1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgR+MYcl//CmwuNkm9yGPVWJs5CMB8GA1UdIwQY
MBaAFHniS0f4lDytbgTJ9kbLEHfBQP37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWVKTFJfaVVQSzF1Qk1uMlJzc1FkOEZBX2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81NGE2NWItY2YwYi00OThmLTgwZDQt
YmM1ODRiMzZjYmVmLzEvZWVKTFJfaVVQSzF1Qk1uMlJzc1FkOEZBX2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81NGE2NWItY2YwYi00OThmLTgwZDQtYmM1ODRiMzZjYmVm
LzEvZWVKTFJfaVVQSzF1Qk1uMlJzc1FkOEZBX2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmh+NzrW
rpBSPd6rJM0tbtPfKn2uFe3mAMaNFRmiJHwchRCeJeBlMRIUexaus/dE91FYH82c
jQwERjsILr56meiqnDLpE+m86XlKpknVIsigTmilDfNR67qLT6btlvpiWjfS4inT
7J8zsn9OGzRhbCNiG0mgANnI6fQlEqwIrkBCqx+oR9etLeQkkPIKKObaD6/iubTm
0V3Ll1I5g3RqHGWjZWbZfFhqBdEX6e99UvqUmQeIbuNuL4ZZ2CZSK1ZMM+rrUnTa
5ZH/eD75E9FACXhzfiwyKZz/I+HyX4sjHl7cuiX5kQ5COc8EayYoxc2Egpmb/9cm
bWJ7mR1ADra5hg==
-----END CERTIFICATE-----
Generated at Thu May 8 15:13:08 2025 by rpki-client