Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: 20HTu9UMyB/5Wm3viqq6m3U1BIGkfC8gjjUHKXmtQFY=
Subject key identifier: 1D:DD:C6:E9:46:E3:FF:A6:EE:66:99:F4:CE:48:BE:00:90:A6:11:E8
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 0197B6A05C592309C7FDAF75F484D98BA9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: e6lvWfgNlp9Lq/ut/QJ9Ze0i6DWSQ4j/dQ+27rB3S00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5c:59:23:09:c7:fd:af:75:f4:84:d9:8b:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=1dddc6e946e3ffa6ee6699f4ce48be0090a611e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:52:bc:76:48:d4:57:58:36:58:80:ca:e4:
3f:b6:85:e7:13:8f:15:b2:48:0f:77:12:ee:a0:23:
51:9e:d5:b7:3e:df:94:c8:36:49:d1:a9:34:5d:18:
b7:53:1a:3c:a5:8d:43:36:e1:20:b7:6a:e0:ac:59:
7e:a3:ab:f6:fb:31:01:bf:00:0e:55:dc:6a:6b:14:
06:4b:bd:c0:31:17:22:98:56:ea:83:10:51:33:89:
66:3e:05:75:0e:92:6b:7a:30:13:02:3c:60:79:8b:
a4:e4:2e:3d:cf:7c:80:2a:2b:25:37:88:79:6a:00:
73:9f:c9:15:0b:2f:a6:cc:d8:6f:5d:06:59:ba:ce:
74:99:4c:3e:07:d4:69:ee:4f:74:94:60:0b:8c:67:
b0:67:b7:5c:d1:ce:bb:ce:1d:14:a6:b5:8f:06:34:
1f:b8:c4:fa:4c:e4:b8:03:88:bc:65:d8:41:86:c1:
dc:fd:e3:83:0d:ab:72:f3:e9:2b:d5:58:18:6e:cf:
e4:b6:e4:68:cf:8a:20:05:50:a1:30:7b:4c:36:e1:
16:cf:60:36:18:d9:6d:30:9f:94:ac:b6:a9:e5:84:
7c:6d:73:b3:d0:d5:76:48:3f:19:f5:85:d0:c6:d2:
ee:ec:35:37:a0:ff:82:11:8d:9f:de:d3:33:13:69:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:C6:E9:46:E3:FF:A6:EE:66:99:F4:CE:48:BE:00:90:A6:11:E8
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cb:3e:b4:c2:86:ba:79:f9:cb:49:04:c6:1f:33:77:8c:b3:
33:8a:f8:3c:e3:9e:15:54:2f:63:9f:62:47:ab:8c:be:06:71:
15:01:99:f9:6b:15:e2:bf:94:ac:66:eb:45:4a:6d:2e:71:ff:
20:06:e2:0d:68:2a:92:6c:fa:bc:79:dd:65:6b:c4:89:9d:b0:
e8:31:f5:8d:6f:bb:d7:7b:2c:f6:5d:ba:98:f0:63:97:d9:41:
14:b3:0b:b5:06:5b:22:ce:27:88:d7:50:2e:64:23:48:d7:93:
53:9d:a2:5a:e8:4a:0f:fe:c6:e2:2d:dd:24:17:f0:19:f6:aa:
d3:0e:8f:46:88:bb:22:72:f4:3f:5d:98:94:d6:5f:3f:72:1a:
9b:44:11:c2:0b:31:22:7b:5b:df:d5:4a:12:3f:61:bb:48:cc:
77:59:a1:62:63:9b:5c:5d:6b:c9:f8:34:36:92:a3:c8:29:ab:
71:20:b9:58:78:22:c4:1c:7b:24:2d:e9:00:cc:36:e7:26:50:
8f:a2:e8:7d:d0:8b:73:ce:9c:12:1c:11:95:50:4d:dd:36:39:
cc:63:2e:ff:ef:b1:33:f5:3b:75:d3:95:fe:89:8c:fd:3a:7d:
2e:5c:e3:4d:e3:69:4a:6e:b5:14:ab:80:f3:f2:ae:66:04:f4:
c0:11:aa:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oFxZIwnH/a919ITZi6nWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGRjODE0NTc1NTEwMWFjYzA4ODhhYTAwYmIyOGI5OTVi
OWM0ZjEwHhcNMjUwNjI4MTMwMDUyWhcNMjUwNjI5MTMwMDUyWjAzMTEwLwYDVQQD
EygxZGRkYzZlOTQ2ZTNmZmE2ZWU2Njk5ZjRjZTQ4YmUwMDkwYTYxMWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnhSvHZI1FdYNliAyuQ/toXnE48V
skgPdxLuoCNRntW3Pt+UyDZJ0ak0XRi3Uxo8pY1DNuEgt2rgrFl+o6v2+zEBvwAO
VdxqaxQGS73AMRcimFbqgxBRM4lmPgV1DpJrejATAjxgeYuk5C49z3yAKislN4h5
agBzn8kVCy+mzNhvXQZZus50mUw+B9Rp7k90lGALjGewZ7dc0c67zh0UprWPBjQf
uMT6TOS4A4i8ZdhBhsHc/eODDaty8+kr1VgYbs/ktuRoz4ogBVChMHtMNuEWz2A2
GNltMJ+UrLap5YR8bXOz0NV2SD8Z9YXQxtLu7DU3oP+CEY2f3tMzE2mVpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3dxulG4/+m7maZ9M5IvgCQphHoMB8GA1UdIwQY
MBaAFHkNyBRXVRAazAiIqgC7KLmVucTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUt
OTVjYWUwOWZmNTYzLzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUtOTVjYWUwOWZmNTYz
LzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcs+tMKG
unn5y0kExh8zd4yzM4r4POOeFVQvY59iR6uMvgZxFQGZ+WsV4r+UrGbrRUptLnH/
IAbiDWgqkmz6vHndZWvEiZ2w6DH1jW+713ss9l26mPBjl9lBFLMLtQZbIs4niNdQ
LmQjSNeTU52iWuhKD/7G4i3dJBfwGfaq0w6PRoi7InL0P12YlNZfP3Iam0QRwgsx
Intb39VKEj9hu0jMd1mhYmObXF1ryfg0NpKjyCmrcSC5WHgixBx7JC3pAMw25yZQ
j6LofdCLc86cEhwRlVBN3TY5zGMu/++xM/U7ddOV/omM/Tp9LlzjTeNpSm61FKuA
8/KuZgT0wBGqxw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:22 2025 by rpki-client