Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
File: EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json)
Hash identifier: MQNNkDXRe339DDhovxMabH7/I3s8xJVxNL76sNgo6zM=
Subject key identifier: 7B:FA:C3:A4:F8:AF:BD:6B:17:E1:A2:C1:68:74:38:B0:37:EE:3B:81
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Certificate issuer: /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial: 0197B77CB78B63BEB4C52C665858CF402B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
Manifest number: 0571
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: Zq13p4RuE3jD3Nivz0ed3PcwqA5mz15lRuaBVtMA/B4=)
2: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (hash: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b7:8b:63:be:b4:c5:2c:66:58:58:cf:40:2b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=7bfac3a4f8afbd6b17e1a2c1687438b037ee3b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:2c:0d:22:8f:2c:f8:94:8d:96:4f:65:8d:
db:00:a8:6e:f2:6d:c4:5e:58:87:24:c9:3f:02:b0:
74:f5:37:76:3b:7d:08:1c:9c:91:6b:02:68:10:54:
0d:10:d6:5b:dd:a3:65:64:3c:70:e0:93:5b:e6:85:
9e:7d:e7:d2:73:5f:0d:3c:ca:db:24:b3:f5:62:58:
ec:87:11:87:4a:d8:e4:98:10:0c:e2:28:11:aa:e0:
69:7e:70:0a:fa:96:d0:2b:dd:b8:d9:9c:3b:a2:af:
d0:7d:35:b3:ac:49:66:bb:8b:ab:d1:5c:e3:65:0f:
03:fe:5e:08:ea:5b:92:92:1d:ea:e8:75:62:3e:00:
11:21:ca:5a:25:aa:c8:dc:4d:81:01:b6:12:b6:9f:
1b:5e:dc:69:4b:96:1e:27:f0:b3:84:40:0e:5a:e8:
fb:92:ce:b5:cd:2d:a4:b0:38:f2:b7:1c:5d:d1:7d:
34:b3:d0:4a:3c:4e:a4:7a:a3:15:d5:27:c3:14:68:
69:89:8b:0b:2b:07:ab:8c:32:ad:71:e2:d7:75:db:
e2:47:d3:7a:0c:bc:cf:dd:75:73:be:65:7b:71:c6:
dc:77:ed:fe:52:d8:48:f4:18:06:1a:2d:dd:dd:b0:
2f:62:a7:35:1b:1a:57:d9:1b:16:c0:cc:bc:f2:5c:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FA:C3:A4:F8:AF:BD:6B:17:E1:A2:C1:68:74:38:B0:37:EE:3B:81
X509v3 Authority Key Identifier:
keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5f:0a:89:41:1a:fc:39:0a:05:d7:5a:8e:ce:9c:73:4b:b6:
7c:2c:0a:43:4a:39:34:b9:f8:57:22:2a:92:e0:db:b5:c3:59:
fc:6f:2f:b0:81:6d:a3:c9:5a:58:64:e6:1b:87:e9:1b:9b:93:
3e:de:eb:f7:ab:67:76:40:6f:fb:6d:d6:3d:6e:78:d6:d5:38:
11:0b:30:ca:f3:43:5b:4c:01:59:34:53:a3:0b:f1:f2:c6:b3:
01:8e:1f:3e:ff:9c:86:62:c6:49:f6:52:d6:72:0f:e8:11:b3:
f3:86:07:59:36:cc:ac:40:6a:16:67:6b:1b:96:04:88:7b:ac:
b0:e6:20:7a:bf:f1:fd:cb:e7:bd:33:29:e4:90:2b:e5:86:c7:
61:c4:bf:e7:c6:b6:fa:7d:7c:9f:69:12:68:4e:4e:e9:93:73:
d1:ba:39:d4:33:27:f0:9a:2c:d9:c5:06:39:8f:a9:d9:02:ff:
92:24:85:93:30:1a:05:80:9d:e9:8b:cf:3d:7c:70:31:fa:70:
ce:c6:9f:f0:1e:c9:b4:48:fe:0a:33:18:f9:ef:6b:bf:61:cb:
76:1f:d8:8f:31:af:ed:2b:d6:27:78:4a:56:37:49:8a:ee:04:
17:68:c9:41:dc:ba:24:82:d2:c7:0d:17:d6:56:88:fd:da:a6:
f0:d2:e7:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fLeLY760xSxmWFjPQCubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDRkY2UyYjQ1YzcxZjQ1YmFmOGI1M2M2ODllYmRmYWNi
YWZlYzMwHhcNMjUwNjI4MTcwMTMzWhcNMjUwNjI5MTcwMTMzWjAzMTEwLwYDVQQD
Eyg3YmZhYzNhNGY4YWZiZDZiMTdlMWEyYzE2ODc0MzhiMDM3ZWUzYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKksDSKPLPiUjZZPZY3bAKhu8m3E
XliHJMk/ArB09Td2O30IHJyRawJoEFQNENZb3aNlZDxw4JNb5oWefefSc18NPMrb
JLP1YljshxGHStjkmBAM4igRquBpfnAK+pbQK9242Zw7oq/QfTWzrElmu4ur0Vzj
ZQ8D/l4I6luSkh3q6HViPgARIcpaJarI3E2BAbYStp8bXtxpS5YeJ/CzhEAOWuj7
ks61zS2ksDjytxxd0X00s9BKPE6keqMV1SfDFGhpiYsLKwerjDKtceLXddviR9N6
DLzP3XVzvmV7ccbcd+3+UthI9BgGGi3d3bAvYqc1GxpX2RsWwMy88lw3ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv6w6T4r71rF+GiwWh0OLA37juBMB8GA1UdIwQY
MBaAFBJE3OK0XHH0W6+LU8aJ69+suv7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zMjY1NmItMjM3Yi00YWNmLWI4MjQt
OTIzNmM2OGVmNDI3LzEvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zMjY1NmItMjM3Yi00YWNmLWI4MjQtOTIzNmM2OGVmNDI3
LzEvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV8KiUEa
/DkKBddajs6cc0u2fCwKQ0o5NLn4VyIqkuDbtcNZ/G8vsIFto8laWGTmG4fpG5uT
Pt7r96tndkBv+23WPW541tU4EQswyvNDW0wBWTRTowvx8sazAY4fPv+chmLGSfZS
1nIP6BGz84YHWTbMrEBqFmdrG5YEiHussOYger/x/cvnvTMp5JAr5YbHYcS/58a2
+n18n2kSaE5O6ZNz0bo51DMn8Jos2cUGOY+p2QL/kiSFkzAaBYCd6YvPPXxwMfpw
zsaf8B7JtEj+CjMY+e9rv2HLdh/YjzGv7SvWJ3hKVjdJiu4EF2jJQdy6JILSxw0X
1laI/dqm8NLnoA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:55 2025 by rpki-client