Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier: i8WKQMzMHmZa7JIh1O+tkGjnCn2D1jBZ63P64CfMapM=
Subject key identifier: 73:C4:D3:C8:9F:7A:7C:2B:C3:57:A8:66:6E:97:55:C6:DD:8F:03:BF
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial: 0197B6D7A7C87FC0B903DCF53DBE956F39AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number: 0284
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: 74ATKheJWNcB2IooqFs8z97/L1bR0cPlHJZoY/TH3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a7:c8:7f:c0:b9:03:dc:f5:3d:be:95:6f:39:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=73c4d3c89f7a7c2bc357a8666e9755c6dd8f03bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:96:22:14:b0:3a:1f:01:e4:31:7b:33:e3:
30:8c:d0:a7:39:25:3f:51:a8:17:7c:c2:85:9d:fd:
31:cd:d7:28:59:6c:8f:1a:d6:e8:51:cc:01:ea:25:
5a:43:a9:9d:95:2d:82:c9:ca:15:0f:42:d6:b3:11:
d2:32:b6:66:49:cb:34:8e:b4:ec:86:a3:89:67:10:
29:5c:31:c4:80:05:c5:b2:2b:5a:d5:1d:05:c5:38:
f0:da:8e:84:d3:3c:f3:58:82:05:9e:a2:a1:7c:41:
3c:61:13:07:3d:bf:88:6a:f2:2b:25:17:1f:be:de:
33:a4:a2:db:69:fc:f0:0d:b2:5c:fe:bf:54:2e:d0:
6e:87:f4:59:40:f0:17:75:af:57:1e:44:7d:b6:b5:
4f:d6:6f:b3:af:71:59:6a:65:59:0b:8e:73:7b:68:
67:fd:91:32:49:de:01:18:4f:5f:dd:43:a3:d6:01:
f5:14:7b:b8:37:b8:b5:2f:8b:00:e0:9a:61:ef:1f:
52:02:cb:aa:7e:1e:fb:5e:4e:15:19:c6:51:98:48:
68:52:e1:bc:07:3b:70:57:82:a9:0b:b4:4f:9f:1b:
9c:50:65:55:db:9c:5d:6b:09:1e:06:ac:4e:51:82:
e2:d8:a9:00:c7:d2:80:d9:ca:07:c4:f2:e4:87:c7:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C4:D3:C8:9F:7A:7C:2B:C3:57:A8:66:6E:97:55:C6:DD:8F:03:BF
X509v3 Authority Key Identifier:
keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1b:1f:33:41:f5:ad:15:35:85:d8:68:4d:41:7b:26:2f:80:
53:86:91:ca:ec:4a:be:3e:f4:cd:c3:75:d7:b2:df:da:2a:9c:
0a:b9:a0:50:08:47:4d:7b:61:1e:b7:4d:5a:f4:90:fb:8c:f9:
85:ae:da:b3:c2:65:0e:8c:ec:60:ea:cd:7a:48:35:83:82:46:
32:30:82:dd:01:e6:ce:30:d3:d9:6b:2e:c9:c2:f6:82:71:ee:
7a:ee:ad:05:12:46:b2:34:7e:ab:c5:80:7a:77:20:73:e8:04:
e2:2b:72:39:bb:d9:f5:a2:a7:fb:ba:93:7a:db:8c:46:7c:d4:
77:e9:37:91:c8:a0:2e:b7:aa:5e:bb:fa:b6:06:01:97:11:3a:
85:b8:9e:7e:f8:0d:3b:92:ce:d7:f6:2f:9a:d8:e2:a5:a8:be:
76:aa:e3:b3:97:a8:89:d7:a6:ef:c7:e6:46:bc:94:ec:c7:d8:
96:ff:cb:5c:1e:5e:9f:f4:a0:b2:6d:ae:38:c5:63:f8:51:51:
7a:2a:9f:86:18:7d:75:23:15:62:e9:80:2f:ca:68:b9:f6:45:
ac:4e:84:38:83:64:17:d2:d7:6e:b7:3c:60:66:3a:82:49:6a:
e9:4f:d2:ee:41:7d:ce:48:d4:0f:cf:77:cd:44:2c:74:43:27:
bf:b7:33:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216fIf8C5A9z1Pb6VbzmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGVkZTY2MjIwM2Y0NTllOWIxOTZkMjMzODdhYzI5ZTRh
N2M0ZTUwHhcNMjUwNjI4MTQwMTE1WhcNMjUwNjI5MTQwMTE1WjAzMTEwLwYDVQQD
Eyg3M2M0ZDNjODlmN2E3YzJiYzM1N2E4NjY2ZTk3NTVjNmRkOGYwM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37uWIhSwOh8B5DF7M+MwjNCnOSU/
UagXfMKFnf0xzdcoWWyPGtboUcwB6iVaQ6mdlS2CycoVD0LWsxHSMrZmScs0jrTs
hqOJZxApXDHEgAXFsita1R0FxTjw2o6E0zzzWIIFnqKhfEE8YRMHPb+IavIrJRcf
vt4zpKLbafzwDbJc/r9ULtBuh/RZQPAXda9XHkR9trVP1m+zr3FZamVZC45ze2hn
/ZEySd4BGE9f3UOj1gH1FHu4N7i1L4sA4Jph7x9SAsuqfh77Xk4VGcZRmEhoUuG8
BztwV4KpC7RPnxucUGVV25xdawkeBqxOUYLi2KkAx9KA2coHxPLkh8eDRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPE08ifenwrw1eoZm6XVcbdjwO/MB8GA1UdIwQY
MBaAFHkO3mYiA/RZ6bGW0jOHrCnkp8TlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMt
YzVkNGMxNzhlY2I1LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMtYzVkNGMxNzhlY2I1
LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhsfM0H1
rRU1hdhoTUF7Ji+AU4aRyuxKvj70zcN117Lf2iqcCrmgUAhHTXthHrdNWvSQ+4z5
ha7as8JlDozsYOrNekg1g4JGMjCC3QHmzjDT2WsuycL2gnHueu6tBRJGsjR+q8WA
encgc+gE4ityObvZ9aKn+7qTetuMRnzUd+k3kcigLreqXrv6tgYBlxE6hbiefvgN
O5LO1/Yvmtjipai+dqrjs5eoidem78fmRryU7MfYlv/LXB5en/Sgsm2uOMVj+FFR
eiqfhhh9dSMVYumAL8poufZFrE6EOINkF9LXbrc8YGY6gklq6U/S7kF9zkjUD893
zUQsdEMnv7czhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:01 2025 by rpki-client