Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: iueb/BcAl/feIpxXGG5yFRobKSySLBCmSNC4TEm+KLE=
Subject key identifier: ED:13:4A:07:59:A3:A2:FD:D4:3E:48:28:11:84:9A:F7:D9:32:F3:96
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 0197B6A1DDC27E806B0A7A2961EA04AA13AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0CCE
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: el1keAmTPHj9qczqtH6zS+gcetLMzfyLAvc7Jm9LkxQ=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:dd:c2:7e:80:6b:0a:7a:29:61:ea:04:aa:13:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=ed134a0759a3a2fdd43e482811849af7d932f396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:2c:ef:02:15:86:6a:c8:e3:77:89:26:e3:
c9:dc:dd:4b:b7:5e:7c:cb:cf:31:18:10:59:b0:0b:
c7:15:94:0e:fe:1b:ef:cd:b3:90:f5:57:bf:e6:88:
4d:5e:f3:49:95:93:ff:b9:29:20:ca:3f:61:c8:0b:
04:1a:96:70:b3:ee:08:2c:8d:97:9f:04:fd:10:9d:
4c:80:aa:73:85:57:77:90:eb:94:ff:37:ac:cb:05:
7e:9b:b5:b6:93:85:5e:9c:ac:4a:fc:ab:0b:36:bb:
cd:8e:1d:fb:a2:86:79:e1:a7:95:2d:02:0c:5c:e2:
cc:25:3a:96:f2:a2:45:4d:b9:ec:da:22:3c:b8:6f:
36:5d:08:d7:e5:30:cb:99:9d:7b:12:c7:d6:51:9e:
be:4a:a6:bd:44:25:92:b2:07:3a:db:af:fa:54:76:
c3:e0:fb:d4:d0:75:b6:ee:09:87:37:2f:40:20:1b:
c3:17:12:f4:af:56:fb:12:06:88:fd:d0:5b:6d:90:
99:72:dc:92:68:5d:c6:89:19:85:26:d4:c0:5b:24:
af:49:30:8f:57:03:88:b2:e1:01:1a:06:00:ab:9f:
ae:f8:37:ff:26:59:de:d8:89:05:06:b4:44:6d:56:
77:09:fe:b4:06:06:41:57:1e:de:1e:bd:70:8d:ba:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:4A:07:59:A3:A2:FD:D4:3E:48:28:11:84:9A:F7:D9:32:F3:96
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:31:7f:50:c1:07:c8:45:cc:42:23:09:e6:46:91:87:70:
3b:13:f6:8b:cf:62:d0:f6:1c:bf:a8:ec:5a:ff:fa:63:b7:88:
25:5f:b8:dd:16:cd:06:68:d0:2b:20:e7:ca:34:c0:a3:24:c7:
20:d1:23:e1:d7:11:e7:23:9a:d0:6f:91:72:fa:22:af:a7:d1:
ea:e1:57:03:fc:10:07:9c:87:6b:75:bf:bf:7c:b4:fc:68:65:
ab:1c:10:9e:fe:8b:9f:4e:67:fe:c2:14:fd:9e:de:41:a4:f0:
8f:7e:40:c3:01:5e:bf:0d:0c:fa:0e:1f:ab:3d:5c:2b:1f:f3:
85:71:58:3c:5a:7e:c2:5c:72:9d:fe:0a:0d:b0:d6:e3:0c:34:
d8:e0:92:33:13:a0:0c:e8:72:58:21:76:f9:3e:5a:d3:cf:e1:
cf:73:ae:67:19:91:c2:bb:10:a0:5c:55:29:0f:5d:f4:bc:21:
dd:05:1a:79:df:32:7c:09:0f:d6:f0:f4:eb:5b:d8:6d:13:22:
56:1b:9f:b0:5e:f5:e4:d0:5b:b1:66:2e:c6:9b:02:77:c9:1a:
90:2c:a1:9c:94:d4:10:8f:e1:3b:e2:43:d4:98:5b:59:80:c5:
cf:c1:33:da:57:3e:94:e4:26:03:55:15:da:ce:00:95:2b:8b:
c1:87:9b:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2od3CfoBrCnopYeoEqhOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDI0NjZmOGY4NjQ1YzlmMzlmMDQ4NzRkZGFkZjBkNzEz
NmY2N2YwHhcNMjUwNjI4MTMwMjMwWhcNMjUwNjI5MTMwMjMwWjAzMTEwLwYDVQQD
EyhlZDEzNGEwNzU5YTNhMmZkZDQzZTQ4MjgxMTg0OWFmN2Q5MzJmMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud8s7wIVhmrI43eJJuPJ3N1Lt158
y88xGBBZsAvHFZQO/hvvzbOQ9Ve/5ohNXvNJlZP/uSkgyj9hyAsEGpZws+4ILI2X
nwT9EJ1MgKpzhVd3kOuU/zesywV+m7W2k4VenKxK/KsLNrvNjh37ooZ54aeVLQIM
XOLMJTqW8qJFTbns2iI8uG82XQjX5TDLmZ17EsfWUZ6+Sqa9RCWSsgc626/6VHbD
4PvU0HW27gmHNy9AIBvDFxL0r1b7EgaI/dBbbZCZctySaF3GiRmFJtTAWySvSTCP
VwOIsuEBGgYAq5+u+Df/Jlne2IkFBrREbVZ3Cf60BgZBVx7eHr1wjbrJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0TSgdZo6L91D5IKBGEmvfZMvOWMB8GA1UdIwQY
MBaAFBJCRm+PhkXJ858Eh03a3w1xNvZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUt
MGY1NWVhMzNhZmUzLzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUtMGY1NWVhMzNhZmUz
LzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNIxf1DB
B8hFzEIjCeZGkYdwOxP2i89i0PYcv6jsWv/6Y7eIJV+43RbNBmjQKyDnyjTAoyTH
INEj4dcR5yOa0G+Rcvoir6fR6uFXA/wQB5yHa3W/v3y0/GhlqxwQnv6Ln05n/sIU
/Z7eQaTwj35AwwFevw0M+g4fqz1cKx/zhXFYPFp+wlxynf4KDbDW4ww02OCSMxOg
DOhyWCF2+T5a08/hz3OuZxmRwrsQoFxVKQ9d9Lwh3QUaed8yfAkP1vD061vYbRMi
VhufsF715NBbsWYuxpsCd8kakCyhnJTUEI/hO+JD1JhbWYDFz8Ez2lc+lOQmA1UV
2s4AlSuLwYebRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:22 2025 by rpki-client