Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: 6c2WIOVbO/5Ce6uPmjoSL3LUM3FIMFPcHCub7NZwLy4=
Subject key identifier: 4F:A6:A2:BF:A4:B7:3E:4A:A4:D3:15:B0:14:04:B0:CD:CA:03:43:64
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 0197BC6D44AC86B16ECA51CED2E89632C126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 16:02:47 +0000
Manifest this update: Sun 29 Jun 2025 16:02:47 +0000
Manifest next update: Mon 30 Jun 2025 16:02:47 +0000
Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: B+RoGmX1wlVm8TGpmCGESzlVPJfELalwL6+ssmH1mII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6d:44:ac:86:b1:6e:ca:51:ce:d2:e8:96:32:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Jun 29 16:02:47 2025 GMT
Not After : Jun 30 16:02:47 2025 GMT
Subject: CN=4fa6a2bfa4b73e4aa4d315b01404b0cdca034364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:0d:24:9c:75:e1:f5:7a:9e:d6:56:4b:22:
2b:36:98:32:87:4a:45:40:36:69:1b:f1:4d:a3:0e:
4d:0d:44:24:af:17:4f:2e:6e:e7:6c:2c:2e:39:7d:
2e:f0:76:05:21:b2:c7:77:11:25:b0:6c:bb:cb:b8:
58:f9:93:19:1a:a1:96:c4:30:e4:b6:ad:82:92:42:
84:ae:76:47:d4:be:ff:df:94:9c:47:ce:a1:56:af:
12:c5:87:e7:7a:5d:11:26:a7:36:23:f0:46:56:60:
54:a6:21:e9:3e:07:2e:2a:bd:b2:32:6f:02:71:e0:
e3:30:8c:c7:b8:d4:4d:c2:5d:98:2d:fd:f7:79:c4:
aa:23:c0:ab:e6:e0:9e:be:c9:1f:56:d1:cb:38:83:
67:a1:1b:47:93:ea:19:e8:c8:cf:ae:6a:c4:21:7c:
4c:72:21:39:0f:25:f3:97:9a:41:cd:18:b2:a2:af:
ea:33:b8:52:38:fc:6b:ec:e5:7c:7b:ad:d9:6c:19:
8a:cb:d4:27:33:fb:4f:58:aa:e6:aa:f0:b6:e3:8f:
03:8d:12:06:e6:19:c7:92:a3:b3:e5:85:c0:2b:6e:
b7:21:7c:4a:69:cd:13:7b:b7:c3:a7:8e:10:9f:46:
f6:1c:c2:fa:03:a3:1f:7a:e3:79:78:de:02:41:60:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A6:A2:BF:A4:B7:3E:4A:A4:D3:15:B0:14:04:B0:CD:CA:03:43:64
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1b:41:d5:af:92:8e:ca:bf:6b:12:40:93:ef:c7:45:ff:ff:
54:88:ff:fd:96:6d:06:97:8b:d1:52:a1:43:58:69:25:85:27:
08:33:c9:fe:61:1b:2a:ee:0d:8b:21:40:93:ff:46:5b:55:dd:
8d:a4:80:cd:86:27:3c:51:89:7e:26:a1:36:33:19:ff:d6:ec:
3f:67:56:70:59:32:68:fa:26:e5:41:6e:d8:e4:d4:93:b8:e4:
b4:ae:b6:1c:f2:35:d8:8e:e4:3e:41:44:c9:e5:2a:96:cf:64:
ce:bc:ae:47:b6:87:66:ca:5e:0f:74:c1:f1:1b:f2:74:8a:1d:
47:3b:4c:cb:7c:e5:95:25:ae:0b:05:d6:83:53:97:8c:0f:22:
5c:09:07:bc:7d:8d:5f:b5:38:6a:1a:1b:74:7d:05:3a:56:87:
b2:b4:7c:94:0d:02:67:dc:d1:62:e6:95:a0:97:83:03:29:e5:
49:9e:f7:12:69:df:16:c1:c6:4f:b2:78:44:10:4c:57:25:39:
3d:ea:9a:0c:59:45:03:17:92:be:98:52:91:79:54:92:4e:3a:
73:da:9c:c7:17:06:12:40:d2:35:19:c7:8b:4c:a1:1b:fe:29:
74:9d:3b:e9:ba:28:3b:13:d1:f1:23:12:8d:17:c3:16:06:a7:
5f:69:09:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe8bUSshrFuylHO0uiWMsEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl
MmE5MWYwHhcNMjUwNjI5MTYwMjQ3WhcNMjUwNjMwMTYwMjQ3WjAzMTEwLwYDVQQD
Eyg0ZmE2YTJiZmE0YjczZTRhYTRkMzE1YjAxNDA0YjBjZGNhMDM0MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr38NJJx14fV6ntZWSyIrNpgyh0pF
QDZpG/FNow5NDUQkrxdPLm7nbCwuOX0u8HYFIbLHdxElsGy7y7hY+ZMZGqGWxDDk
tq2CkkKErnZH1L7/35ScR86hVq8SxYfnel0RJqc2I/BGVmBUpiHpPgcuKr2yMm8C
ceDjMIzHuNRNwl2YLf33ecSqI8Cr5uCevskfVtHLOINnoRtHk+oZ6MjPrmrEIXxM
ciE5DyXzl5pBzRiyoq/qM7hSOPxr7OV8e63ZbBmKy9QnM/tPWKrmqvC2448DjRIG
5hnHkqOz5YXAK263IXxKac0Te7fDp44Qn0b2HML6A6MfeuN5eN4CQWBYHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+mor+ktz5KpNMVsBQEsM3KA0NkMB8GA1UdIwQY
MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt
NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm
LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhtB1a+S
jsq/axJAk+/HRf//VIj//ZZtBpeL0VKhQ1hpJYUnCDPJ/mEbKu4NiyFAk/9GW1Xd
jaSAzYYnPFGJfiahNjMZ/9bsP2dWcFkyaPom5UFu2OTUk7jktK62HPI12I7kPkFE
yeUqls9kzryuR7aHZspeD3TB8RvydIodRztMy3zllSWuCwXWg1OXjA8iXAkHvH2N
X7U4ahobdH0FOlaHsrR8lA0CZ9zRYuaVoJeDAynlSZ73EmnfFsHGT7J4RBBMVyU5
PeqaDFlFAxeSvphSkXlUkk46c9qcxxcGEkDSNRnHi0yhG/4pdJ076booOxPR8SMS
jRfDFganX2kJ4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:06:14 2025 by rpki-client