Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: wOUCqyZAPA0jcRXfY++LduwrVliLU5MlwZbJJRvRkFY=
Subject key identifier: D1:2E:2B:A7:1C:F0:E8:90:DF:D6:D4:67:57:4B:1E:FA:2A:A5:0F:AB
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 0196C1CAD7102AE0BD55AB05116D9C564ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0B79
Signing time: Mon 12 May 2025 00:00:18 +0000
Manifest this update: Mon 12 May 2025 00:00:18 +0000
Manifest next update: Tue 13 May 2025 00:00:18 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: JCprgH/OgQ2xtUUOL1Gog34DwkMxxpGTUMtigm+7m9I=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:d7:10:2a:e0:bd:55:ab:05:11:6d:9c:56:4e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: May 12 00:00:18 2025 GMT
Not After : May 13 00:00:18 2025 GMT
Subject: CN=d12e2ba71cf0e890dfd6d467574b1efa2aa50fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:6c:58:5f:ee:b0:40:50:fd:1e:58:dd:8d:
97:7a:ae:ce:ad:1b:65:95:e6:ad:c8:c8:50:c0:a3:
a5:e1:bd:bd:86:07:8f:bf:95:8f:ce:00:94:e5:92:
22:35:4b:ca:c3:c4:ff:71:ac:1e:9c:20:b0:ef:35:
2c:30:38:91:86:29:c7:27:cd:d8:74:51:c1:72:39:
ec:46:4c:97:10:c6:84:af:b8:a0:0e:69:42:02:8c:
7c:b2:1f:4c:c8:dc:e6:47:21:8d:11:37:be:d4:ab:
25:70:e5:76:b1:b1:a8:1c:88:b5:37:15:bf:e2:52:
58:b2:6b:50:cc:89:5a:e2:de:c7:01:e7:64:4d:99:
3f:15:15:1b:cd:19:ee:de:77:9f:e0:68:e8:7b:f0:
9b:db:25:92:82:f0:2a:ed:80:17:ca:12:f2:10:42:
c3:e3:5b:77:26:28:d5:89:1d:11:3d:08:6c:99:e8:
e6:f3:4e:4b:24:4f:57:5e:71:34:ed:15:1e:67:42:
e6:20:6a:9f:49:a7:af:52:9d:9d:7f:b2:5c:09:b7:
df:72:e4:be:55:2f:a8:0e:c4:c0:c0:5e:67:d4:89:
bc:93:84:cc:7f:e0:9e:96:bb:95:9a:08:ab:b2:83:
d8:8c:ad:5e:ad:57:01:30:59:58:30:29:89:dd:b4:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:2B:A7:1C:F0:E8:90:DF:D6:D4:67:57:4B:1E:FA:2A:A5:0F:AB
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:15:84:b1:41:b8:39:cf:62:f6:7c:55:3e:cf:1d:ca:0a:
11:44:48:68:aa:19:d8:68:4a:90:d7:f6:1d:80:5c:40:4b:73:
09:76:89:d0:a5:1d:5c:67:38:c0:a4:25:f3:79:eb:69:de:91:
1a:ae:e7:09:65:6e:d5:96:84:84:74:f8:3c:b9:3a:3b:8b:0e:
9e:eb:d9:9e:03:cb:87:5a:37:19:7e:c6:40:e9:3c:0c:df:4c:
5b:73:7e:44:e5:6c:ee:45:f5:50:b0:0b:70:82:62:dc:6b:d4:
6e:8e:50:49:ca:80:7d:cf:54:5a:22:0b:75:14:f3:70:4d:91:
8e:48:a3:ae:c4:58:39:e3:77:21:f5:a0:40:9b:6d:8d:2d:b6:
9e:3c:ef:f4:e2:1f:6a:e9:8a:02:bc:9a:0b:b8:81:6a:23:ce:
f6:a9:8b:df:06:d3:30:bb:09:52:e1:6c:59:a9:58:ed:1f:c4:
16:57:bc:40:01:57:b4:c0:96:78:ec:e4:43:d1:bc:c1:20:27:
84:c6:fa:eb:8a:1c:a2:ca:11:ae:af:59:a6:ad:3b:da:35:aa:
1c:a3:63:68:4b:a4:4b:e0:ec:b5:bd:da:5a:bc:ca:81:37:59:
c5:15:96:52:0a:c6:68:51:fd:f7:27:2c:66:ab:15:44:e0:55:
10:91:20:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBytcQKuC9VasFEW2cVk7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDgwNDJhMjgwMTVkMjdmMzViMWYxYWI3MzYxMWU4NTEx
YjY5MjMwHhcNMjUwNTEyMDAwMDE4WhcNMjUwNTEzMDAwMDE4WjAzMTEwLwYDVQQD
EyhkMTJlMmJhNzFjZjBlODkwZGZkNmQ0Njc1NzRiMWVmYTJhYTUwZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxktsWF/usEBQ/R5Y3Y2Xeq7OrRtl
leatyMhQwKOl4b29hgePv5WPzgCU5ZIiNUvKw8T/cawenCCw7zUsMDiRhinHJ83Y
dFHBcjnsRkyXEMaEr7igDmlCAox8sh9MyNzmRyGNETe+1KslcOV2sbGoHIi1NxW/
4lJYsmtQzIla4t7HAedkTZk/FRUbzRnu3nef4Gjoe/Cb2yWSgvAq7YAXyhLyEELD
41t3JijViR0RPQhsmejm805LJE9XXnE07RUeZ0LmIGqfSaevUp2df7JcCbffcuS+
VS+oDsTAwF5n1Im8k4TMf+CelruVmgirsoPYjK1erVcBMFlYMCmJ3bSzvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEuK6cc8OiQ39bUZ1dLHvoqpQ+rMB8GA1UdIwQY
MBaAFBPYBCooAV0n81sfGrc2EehRG2kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt
YTQyOTZhZDk4NjM1LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1
LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoB4VhLFB
uDnPYvZ8VT7PHcoKEURIaKoZ2GhKkNf2HYBcQEtzCXaJ0KUdXGc4wKQl83nrad6R
Gq7nCWVu1ZaEhHT4PLk6O4sOnuvZngPLh1o3GX7GQOk8DN9MW3N+ROVs7kX1ULAL
cIJi3GvUbo5QScqAfc9UWiILdRTzcE2RjkijrsRYOeN3IfWgQJttjS22njzv9OIf
aumKAryaC7iBaiPO9qmL3wbTMLsJUuFsWalY7R/EFle8QAFXtMCWeOzkQ9G8wSAn
hMb664ocosoRrq9Zpq072jWqHKNjaEukS+Dstb3aWrzKgTdZxRWWUgrGaFH99ycs
ZqsVROBVEJEg1g==
-----END CERTIFICATE-----
Generated at Mon May 12 05:27:26 2025 by rpki-client