Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: EzV2tmjWNyJUvi6Zs/0p/Ff3nH27WodAN13yhTtd1eY=
Subject key identifier: 07:DC:52:63:07:AC:A9:01:3C:8D:C3:08:27:49:FE:31:3B:9D:59:C0
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 0197B70E53FCB306ACA4BE053F6678911E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0BF8
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: 066OPqZ6/NCR7EWuWvjBv3X2Uyqcb8JoWrNmroTPQrc=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:53:fc:b3:06:ac:a4:be:05:3f:66:78:91:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=07dc526307aca9013c8dc3082749fe313b9d59c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:2e:6c:01:13:82:47:33:de:ab:0e:bd:b5:
c0:3f:8f:cf:53:19:8e:ac:7f:75:94:75:4d:a1:97:
c0:ca:5b:f0:d0:11:9d:39:87:76:d6:eb:dc:fe:c6:
e2:47:00:7f:ca:ce:10:34:89:cc:ce:33:a2:01:f5:
2a:58:97:80:82:2f:e4:17:bd:b5:24:1f:b4:d2:87:
f4:44:5a:29:65:4f:cc:72:9f:e6:2f:4e:40:08:b2:
70:cc:bb:f0:d1:f6:bb:c5:56:bf:ec:d3:92:37:73:
a3:71:d5:c4:0e:26:20:2b:bb:56:81:a9:64:84:0d:
c1:a3:11:fb:ef:71:7d:21:03:ce:cd:f5:80:8a:08:
4a:71:99:23:f8:cc:6e:ca:79:5d:b2:72:5d:61:70:
1f:81:d4:7e:f8:1b:cf:40:91:56:99:d6:a0:5d:ec:
89:d8:e5:8a:98:07:31:0c:ff:0d:75:0e:6c:71:e2:
86:b9:69:ed:ac:db:05:d8:5d:44:3b:61:17:70:88:
42:09:77:20:1d:38:57:08:16:48:5c:c4:6b:1c:7c:
c2:a2:c4:6f:ec:74:29:f3:17:2f:c9:76:a4:83:aa:
87:47:76:24:99:5a:7c:56:7b:52:e6:76:0c:5d:47:
4d:0b:a9:48:9d:37:83:ce:a9:91:2f:aa:65:65:3b:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:52:63:07:AC:A9:01:3C:8D:C3:08:27:49:FE:31:3B:9D:59:C0
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5e:69:ee:0f:55:5c:5e:42:e6:ca:c8:74:48:62:c8:0e:dc:
70:c7:e3:8b:7c:41:38:b8:6c:0f:ad:18:e2:1a:1d:3c:91:e2:
8b:35:35:3c:ea:63:9a:5f:eb:f1:65:c4:96:61:a1:5d:7e:b3:
ac:a7:f4:ae:5b:9a:37:b4:f2:21:ac:9d:40:3e:85:94:11:72:
a4:34:92:30:40:f0:0a:5f:3a:dc:0f:41:9f:b0:c0:1d:a5:c0:
98:73:35:e3:e1:8a:e0:76:5c:c6:33:e8:08:0d:4f:ff:60:ef:
57:8c:4d:d0:4c:10:f3:2f:07:8e:0f:b7:9a:80:ef:ae:8e:c9:
f1:e0:a2:62:04:45:bd:ef:6b:f3:50:c9:e7:98:7a:c4:11:75:
d9:69:77:ae:c7:a1:e1:07:bf:18:11:89:93:b6:56:86:13:c5:
8c:0e:74:f0:7e:ae:f0:0c:f3:95:30:45:66:ff:3c:3b:05:cd:
b5:39:aa:96:03:e7:be:ae:ea:92:96:f1:92:cc:eb:7d:ed:c5:
9d:b0:ef:ba:3c:a8:3d:55:33:dd:84:5f:fe:64:90:61:b5:d8:
21:c0:50:ff:c4:01:af:d4:f4:c8:eb:81:f3:2d:e3:e9:70:4d:
5d:de:24:1d:79:c2:e8:93:7e:02:7e:0d:f3:5c:49:b9:c7:8c:
41:ec:d2:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DlP8swaspL4FP2Z4kR5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDgwNDJhMjgwMTVkMjdmMzViMWYxYWI3MzYxMWU4NTEx
YjY5MjMwHhcNMjUwNjI4MTUwMDU4WhcNMjUwNjI5MTUwMDU4WjAzMTEwLwYDVQQD
EygwN2RjNTI2MzA3YWNhOTAxM2M4ZGMzMDgyNzQ5ZmUzMTNiOWQ1OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyMubAETgkcz3qsOvbXAP4/PUxmO
rH91lHVNoZfAylvw0BGdOYd21uvc/sbiRwB/ys4QNInMzjOiAfUqWJeAgi/kF721
JB+00of0RFopZU/Mcp/mL05ACLJwzLvw0fa7xVa/7NOSN3OjcdXEDiYgK7tWgalk
hA3BoxH773F9IQPOzfWAighKcZkj+MxuynldsnJdYXAfgdR++BvPQJFWmdagXeyJ
2OWKmAcxDP8NdQ5sceKGuWntrNsF2F1EO2EXcIhCCXcgHThXCBZIXMRrHHzCosRv
7HQp8xcvyXakg6qHR3YkmVp8VntS5nYMXUdNC6lInTeDzqmRL6plZTvk2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfcUmMHrKkBPI3DCCdJ/jE7nVnAMB8GA1UdIwQY
MBaAFBPYBCooAV0n81sfGrc2EehRG2kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt
YTQyOTZhZDk4NjM1LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1
LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnF5p7g9V
XF5C5srIdEhiyA7ccMfji3xBOLhsD60Y4hodPJHiizU1POpjml/r8WXElmGhXX6z
rKf0rluaN7TyIaydQD6FlBFypDSSMEDwCl863A9Bn7DAHaXAmHM14+GK4HZcxjPo
CA1P/2DvV4xN0EwQ8y8Hjg+3moDvro7J8eCiYgRFve9r81DJ55h6xBF12Wl3rseh
4Qe/GBGJk7ZWhhPFjA508H6u8AzzlTBFZv88OwXNtTmqlgPnvq7qkpbxkszrfe3F
nbDvujyoPVUz3YRf/mSQYbXYIcBQ/8QBr9T0yOuB8y3j6XBNXd4kHXnC6JN+An4N
81xJuceMQezS0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:54 2025 by rpki-client