Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: owFyHajhLIoCD60gwz5ahf+cvUztykSWgihaJWQMrdI=
Subject key identifier: 1E:4E:77:E7:29:61:02:BB:35:D4:37:83:EB:8A:62:97:88:E5:0F:E0
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 0197B7EAA604E85F71B906E5EC00582D9307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0639
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: J7ZLWnZ9BjTDNutmea4YbjBU56DpKtdYiQmwvGWfoDk=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a6:04:e8:5f:71:b9:06:e5:ec:00:58:2d:93:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=1e4e77e7296102bb35d43783eb8a629788e50fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:85:72:7e:44:28:8e:b1:3f:25:49:0f:3c:35:
d6:2f:e8:f4:e2:18:e3:19:3a:e9:bf:38:8d:93:5b:
7c:bb:e9:db:b8:f7:27:e3:f7:d4:24:c4:11:f8:30:
6d:f9:21:42:3d:75:9f:7e:28:4e:46:09:e3:41:6d:
67:be:6a:f0:a6:b6:8c:96:e0:3d:e3:62:97:eb:13:
a5:27:77:5d:f4:7f:2a:5a:62:93:a0:d9:1f:85:e9:
39:75:86:76:58:8a:4e:3b:3f:dc:d0:69:99:75:1b:
85:e7:db:45:15:b3:8c:e1:78:02:09:3d:d2:70:1d:
5b:09:eb:e0:cd:62:94:b3:29:ae:03:d3:cb:c2:9b:
0b:dd:c9:16:0a:c0:21:81:bf:72:e9:d7:23:10:62:
ee:cb:0e:06:a7:21:ba:8c:13:ea:13:2e:70:5d:10:
5a:6e:a1:00:45:e3:52:e4:33:00:97:ee:19:42:0e:
3b:18:97:09:22:53:a9:64:4b:04:9f:39:3c:46:30:
42:c3:0f:fc:8a:8c:7f:54:15:b8:08:c9:c0:42:a7:
15:3e:c0:4f:e9:8e:e6:06:b3:7c:c0:6b:a8:09:6f:
d5:b2:1d:d9:b8:25:a2:2e:68:80:0f:83:50:25:48:
c2:58:65:be:cf:02:cb:07:86:64:e4:60:9a:c1:27:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4E:77:E7:29:61:02:BB:35:D4:37:83:EB:8A:62:97:88:E5:0F:E0
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f7:48:ca:88:d3:23:93:6d:85:8d:54:b0:13:69:74:4d:ca:
5b:d8:e9:86:c4:5d:52:74:1a:14:26:05:68:d6:be:9f:6c:56:
b4:da:b4:be:fe:28:2e:9c:07:3e:d3:77:a0:60:5c:48:23:c5:
1c:ef:33:be:db:f4:cb:d1:ed:c9:e0:b2:a4:4a:17:8f:87:ce:
02:94:b7:52:0a:84:fe:bb:bd:6c:61:d7:20:b8:3a:7c:f0:6a:
95:df:6c:28:46:35:91:01:c0:ee:5c:c8:2d:22:cc:22:28:97:
a3:31:69:e0:09:f0:97:29:a6:b7:66:51:df:ff:28:0b:2f:02:
45:08:66:6e:be:2d:80:99:76:ce:a7:3f:df:59:d5:67:98:8c:
f7:1f:82:91:4f:12:a1:9c:50:28:d0:d0:df:1d:ea:c7:64:61:
4d:a0:82:9c:a2:a6:94:f6:1a:b1:28:fd:90:48:b5:1f:31:12:
6c:cd:20:3f:b7:e6:cd:ee:83:68:65:c1:93:ee:ff:6e:a2:7c:
ba:c9:ac:76:b2:1e:be:a9:32:f1:80:3e:cc:69:89:40:85:2c:
81:8d:73:11:a6:7c:2c:51:41:bc:14:44:3c:ce:32:eb:33:83:
40:20:b1:5c:ca:19:a9:90:e2:e2:a5:1f:b2:13:24:6f:72:ab:
19:15:95:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36qYE6F9xuQbl7ABYLZMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk
OGFlM2YwHhcNMjUwNjI4MTkwMTM3WhcNMjUwNjI5MTkwMTM3WjAzMTEwLwYDVQQD
EygxZTRlNzdlNzI5NjEwMmJiMzVkNDM3ODNlYjhhNjI5Nzg4ZTUwZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84VyfkQojrE/JUkPPDXWL+j04hjj
GTrpvziNk1t8u+nbuPcn4/fUJMQR+DBt+SFCPXWffihORgnjQW1nvmrwpraMluA9
42KX6xOlJ3dd9H8qWmKToNkfhek5dYZ2WIpOOz/c0GmZdRuF59tFFbOM4XgCCT3S
cB1bCevgzWKUsymuA9PLwpsL3ckWCsAhgb9y6dcjEGLuyw4GpyG6jBPqEy5wXRBa
bqEAReNS5DMAl+4ZQg47GJcJIlOpZEsEnzk8RjBCww/8iox/VBW4CMnAQqcVPsBP
6Y7mBrN8wGuoCW/Vsh3ZuCWiLmiAD4NQJUjCWGW+zwLLB4Zk5GCawSex6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5Od+cpYQK7NdQ3g+uKYpeI5Q/gMB8GA1UdIwQY
MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt
ZjM3MWY5OGE3NTNiLzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi
LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfdIyojT
I5NthY1UsBNpdE3KW9jphsRdUnQaFCYFaNa+n2xWtNq0vv4oLpwHPtN3oGBcSCPF
HO8zvtv0y9HtyeCypEoXj4fOApS3UgqE/ru9bGHXILg6fPBqld9sKEY1kQHA7lzI
LSLMIiiXozFp4Anwlymmt2ZR3/8oCy8CRQhmbr4tgJl2zqc/31nVZ5iM9x+CkU8S
oZxQKNDQ3x3qx2RhTaCCnKKmlPYasSj9kEi1HzESbM0gP7fmze6DaGXBk+7/bqJ8
usmsdrIevqky8YA+zGmJQIUsgY1zEaZ8LFFBvBREPM4y6zODQCCxXMoZqZDi4qUf
shMkb3KrGRWVFA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:55 2025 by rpki-client