Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File: eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier: Sf+5cSJCRBRfj0LICpvnhg5Y1X73tjZDqzBrVGq59pw=
Subject key identifier: FF:D4:CA:CD:91:7F:C1:96:EF:B0:E3:E4:1C:A1:E5:C0:4B:8B:12:C5
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 0198D4E0E64CDAE0D651EBD751BC549D1F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number: 04B7
Signing time: Sat 23 Aug 2025 03:02:45 +0000
Manifest this update: Sat 23 Aug 2025 03:02:45 +0000
Manifest next update: Sun 24 Aug 2025 03:02:45 +0000
Files and hashes: 1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: HUAtubUqBYERjdigbku1OHrX+I0Os7D4Odeo3vTC9wI=)
2: goX035Hv0elR2rCiATveFLxA4oU.roa (hash: HjIa5HxfoLHz1fNA8faR+9nXcT/qazkCcjt+nSvQMlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e6:4c:da:e0:d6:51:eb:d7:51:bc:54:9d:1f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Aug 23 03:02:45 2025 GMT
Not After : Aug 24 03:02:45 2025 GMT
Subject: CN=ffd4cacd917fc196efb0e3e41ca1e5c04b8b12c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:3c:c4:5e:40:73:c0:97:c0:e3:ab:26:bb:
78:f5:50:55:9f:fb:72:e1:bc:27:f5:d5:3e:01:43:
d5:db:a0:21:72:69:27:69:c1:b3:50:d4:3d:0e:b4:
76:31:c7:77:f1:39:34:99:e4:f0:20:f8:c2:fd:f0:
93:d4:b8:13:66:31:de:35:07:a8:c6:20:f2:a9:cb:
25:0c:f9:30:80:c0:76:a4:06:fd:d9:1c:ac:ac:6f:
3e:ed:a1:8f:83:82:28:a5:b8:c9:e3:5d:e5:21:25:
83:09:ff:97:db:73:f8:e3:ec:7e:a3:ae:c8:64:05:
b1:42:a3:29:95:6f:d6:e9:0c:fa:c5:a3:19:8e:c8:
0f:54:07:5c:e9:42:b5:79:81:15:b7:b9:e5:7c:32:
a9:55:96:8a:77:92:cd:35:97:b6:82:9e:9f:20:4d:
0b:8a:0b:b7:3f:fc:53:69:1d:ee:a5:77:35:34:bf:
98:24:34:7d:70:28:6e:ed:9b:44:7c:ac:6d:b5:aa:
67:c5:74:d8:6a:23:16:29:01:fc:7a:d0:0b:0c:70:
02:68:fb:98:ab:c1:b4:48:f5:e4:94:0c:bd:54:69:
f7:35:ef:ed:98:6b:19:4c:60:9b:ac:63:04:3a:91:
97:71:c4:0f:cf:32:e1:e8:49:2e:31:a3:81:ee:92:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D4:CA:CD:91:7F:C1:96:EF:B0:E3:E4:1C:A1:E5:C0:4B:8B:12:C5
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7d:45:0c:6f:1c:1b:34:0c:7a:ba:26:cc:dd:dd:90:4f:b0:
21:13:0a:a9:ec:88:b9:ed:40:b3:b7:39:8d:d7:7f:c4:c9:6f:
27:7d:ae:64:12:9a:0b:e7:99:95:0d:67:74:5e:27:44:5f:1f:
41:ef:50:0e:42:6b:b0:5e:7c:40:19:f6:7a:9c:e8:68:83:c0:
71:f6:60:81:10:2b:b1:09:bb:f1:7a:b9:ef:fe:04:e8:6e:09:
fa:1e:79:c2:68:31:8d:f8:b9:da:3f:c5:0b:17:38:4a:f0:51:
0a:24:c2:a1:d8:e7:34:ad:6a:51:5e:f1:0d:e6:34:6a:0d:d7:
21:ff:9e:48:04:34:64:71:0d:10:a5:4e:28:cc:9d:63:a4:a0:
13:b2:90:98:d7:a2:00:4d:33:92:a5:74:c8:e3:9c:18:e2:89:
32:ec:2f:ca:bd:bd:f2:19:97:00:b4:37:f2:70:15:96:cc:fd:
a9:44:75:bb:3e:66:d3:2c:97:9b:0c:9d:8d:d0:f6:03:03:13:
93:09:2e:e1:ba:49:83:5f:96:ec:cf:7b:b0:f6:ed:a1:6a:8c:
ca:85:fa:80:59:50:2e:92:ac:ba:7f:88:06:7e:7b:26:24:f2:
21:0a:33:a1:90:ff:78:a0:67:7b:55:78:a6:34:ab:61:2b:4e:
2e:0a:7c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4OZM2uDWUevXUbxUnR93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFkMGVhNzMwZmNmY2IyMTQ5OTk1Yzc4Mjg5YmYyZDZk
MTg2ZmMwHhcNMjUwODIzMDMwMjQ1WhcNMjUwODI0MDMwMjQ1WjAzMTEwLwYDVQQD
EyhmZmQ0Y2FjZDkxN2ZjMTk2ZWZiMGUzZTQxY2ExZTVjMDRiOGIxMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgc8xF5Ac8CXwOOrJrt49VBVn/ty
4bwn9dU+AUPV26AhcmknacGzUNQ9DrR2Mcd38Tk0meTwIPjC/fCT1LgTZjHeNQeo
xiDyqcslDPkwgMB2pAb92RysrG8+7aGPg4IopbjJ413lISWDCf+X23P44+x+o67I
ZAWxQqMplW/W6Qz6xaMZjsgPVAdc6UK1eYEVt7nlfDKpVZaKd5LNNZe2gp6fIE0L
igu3P/xTaR3upXc1NL+YJDR9cChu7ZtEfKxttapnxXTYaiMWKQH8etALDHACaPuY
q8G0SPXklAy9VGn3Ne/tmGsZTGCbrGMEOpGXccQPzzLh6EkuMaOB7pLgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/Uys2Rf8GW77Dj5Byh5cBLixLFMB8GA1UdIwQY
MBaAFHmh0OpzD8/LIUmZXHgom/LW0Yb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEt
ODBhOTFhZjQyYTY1LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEtODBhOTFhZjQyYTY1
LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFX1FDG8c
GzQMeromzN3dkE+wIRMKqeyIue1As7c5jdd/xMlvJ32uZBKaC+eZlQ1ndF4nRF8f
Qe9QDkJrsF58QBn2epzoaIPAcfZggRArsQm78Xq57/4E6G4J+h55wmgxjfi52j/F
Cxc4SvBRCiTCodjnNK1qUV7xDeY0ag3XIf+eSAQ0ZHENEKVOKMydY6SgE7KQmNei
AE0zkqV0yOOcGOKJMuwvyr298hmXALQ38nAVlsz9qUR1uz5m0yyXmwydjdD2AwMT
kwku4bpJg1+W7M97sPbtoWqMyoX6gFlQLpKsun+IBn57JiTyIQozoZD/eKBne1V4
pjSrYStOLgp8zA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:30 2025 by rpki-client