Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: 0IcDKv37vGeApbkpEEXccjBIXXv8Nr65QsdgLPNj3l0=
Subject key identifier: D3:25:F2:2B:0E:DB:C8:46:E1:A8:B5:D2:EA:AB:27:44:04:76:7E:1E
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 0197BAB4719CB3CA4B5700A345EC4750A27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 150E
Signing time: Sun 29 Jun 2025 08:01:17 +0000
Manifest this update: Sun 29 Jun 2025 08:01:17 +0000
Manifest next update: Mon 30 Jun 2025 08:01:17 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: u0YA4ce9RJZpXsucEn+UkXnyJGS5wUkbLWG46BG6zRA=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:71:9c:b3:ca:4b:57:00:a3:45:ec:47:50:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Jun 29 08:01:17 2025 GMT
Not After : Jun 30 08:01:17 2025 GMT
Subject: CN=d325f22b0edbc846e1a8b5d2eaab274404767e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:ed:eb:4c:75:2e:a4:02:1c:c0:72:33:b9:
0e:16:2e:a8:5a:d6:1d:d0:e1:89:26:38:57:35:87:
1e:d4:0c:5b:12:81:66:0d:99:43:11:e5:84:22:0c:
9c:b1:14:a1:3b:f7:74:cc:9a:5a:47:f0:8c:de:e6:
83:8e:46:ef:9f:97:46:1d:d0:71:49:e0:0b:45:3c:
af:c9:a1:a8:cb:20:24:16:14:ae:ce:a1:97:91:6a:
ef:b9:95:e7:65:47:1b:1c:a2:57:ec:96:58:c8:47:
bf:bd:8f:42:78:9e:c8:25:ad:b8:ac:f9:bf:b6:36:
75:19:86:e3:9b:1a:9c:29:04:0b:05:81:1a:6c:3c:
c3:93:ea:c3:01:39:bc:40:1d:0d:65:2a:3a:86:17:
76:54:df:d4:36:9c:a4:50:c5:24:cf:27:82:e6:04:
9d:2d:6e:19:87:77:96:f3:e2:c8:ff:80:03:50:4b:
f3:ba:bb:f8:8f:0d:dc:0a:b3:fa:5e:b7:da:fc:40:
8b:6c:f7:78:80:22:df:dc:07:e5:0c:a5:6e:25:9b:
8e:0a:70:b7:7c:0c:00:e0:f3:15:36:88:0b:f2:57:
9f:ab:ca:62:98:10:d7:cb:d9:7e:35:57:3e:32:3d:
86:4b:c1:4c:30:93:93:f5:5b:62:50:ef:22:85:b7:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:F2:2B:0E:DB:C8:46:E1:A8:B5:D2:EA:AB:27:44:04:76:7E:1E
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ff:41:70:68:95:8b:12:66:38:2c:0f:8e:c2:47:b3:5b:4d:
21:34:38:ab:ea:d8:7e:95:c8:31:0c:1c:34:3e:20:0b:b6:c2:
5b:b8:53:78:99:e3:9b:02:df:99:36:88:6c:56:be:5c:0f:de:
b1:f3:44:85:68:9c:c7:f3:2a:28:b8:47:38:42:b3:c5:7a:91:
59:fa:e7:76:1f:49:71:37:24:99:2d:d1:8b:32:b4:a4:8a:26:
a0:b1:20:db:23:36:52:42:e5:c1:36:f1:ee:87:33:4f:7d:6b:
d1:e9:83:93:a5:43:b1:b7:ba:c8:bf:53:bf:1b:12:9e:fa:77:
a8:69:70:6f:2d:e1:9e:bb:96:89:e9:66:90:f2:7e:07:1c:4b:
c6:ef:cd:5b:02:35:86:e8:5e:42:d0:67:99:96:0d:ed:79:60:
cc:ca:c1:e0:b3:0f:9a:1b:16:60:4a:54:e5:2c:3d:3d:af:fd:
bc:75:37:2f:9d:61:37:ee:59:20:5d:a3:06:fe:21:84:a9:bf:
ab:59:6a:8d:28:a3:f5:95:b1:58:00:f2:0b:20:c8:b1:d5:f2:
65:b5:8d:98:bb:fe:41:6f:1a:80:a7:c8:15:99:30:6d:b0:36:
83:fc:71:ac:a4:9b:4e:83:a4:d2:09:c5:80:b2:80:96:9f:70:
c5:e9:4a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tHGcs8pLVwCjRexHUKJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw
NmE1YjMwHhcNMjUwNjI5MDgwMTE3WhcNMjUwNjMwMDgwMTE3WjAzMTEwLwYDVQQD
EyhkMzI1ZjIyYjBlZGJjODQ2ZTFhOGI1ZDJlYWFiMjc0NDA0NzY3ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHrt60x1LqQCHMByM7kOFi6oWtYd
0OGJJjhXNYce1AxbEoFmDZlDEeWEIgycsRShO/d0zJpaR/CM3uaDjkbvn5dGHdBx
SeALRTyvyaGoyyAkFhSuzqGXkWrvuZXnZUcbHKJX7JZYyEe/vY9CeJ7IJa24rPm/
tjZ1GYbjmxqcKQQLBYEabDzDk+rDATm8QB0NZSo6hhd2VN/UNpykUMUkzyeC5gSd
LW4Zh3eW8+LI/4ADUEvzurv4jw3cCrP6Xrfa/ECLbPd4gCLf3AflDKVuJZuOCnC3
fAwA4PMVNogL8lefq8pimBDXy9l+NVc+Mj2GS8FMMJOT9VtiUO8ihbeKAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMl8isO28hG4ai10uqrJ0QEdn4eMB8GA1UdIwQY
MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt
YjhjNDZmOTU2NDBlLzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl
LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv9BcGiV
ixJmOCwPjsJHs1tNITQ4q+rYfpXIMQwcND4gC7bCW7hTeJnjmwLfmTaIbFa+XA/e
sfNEhWicx/MqKLhHOEKzxXqRWfrndh9JcTckmS3RizK0pIomoLEg2yM2UkLlwTbx
7oczT31r0emDk6VDsbe6yL9TvxsSnvp3qGlwby3hnruWielmkPJ+BxxLxu/NWwI1
huheQtBnmZYN7XlgzMrB4LMPmhsWYEpU5Sw9Pa/9vHU3L51hN+5ZIF2jBv4hhKm/
q1lqjSij9ZWxWADyCyDIsdXyZbWNmLv+QW8agKfIFZkwbbA2g/xxrKSbToOk0gnF
gLKAlp9wxelKaw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:54 2025 by rpki-client