Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
File: eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft (raw, json)
Hash identifier: +ze44jyJWzVTS0/3w8z0xSeyxRW27Nj6yFROo+CWr2o=
Subject key identifier: 1A:25:BD:A4:70:8E:7B:16:89:7B:40:62:FA:AB:7B:60:DF:B4:18:B8
Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
Certificate issuer: /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Certificate serial: 0197B6A08FFC13C25A71D9984350BFB06B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
Manifest number: 14FB
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: 9I8dngV1JT7KKjRI32gIyKSSyUk.roa (hash: mTvlNqWvha6TIOSslNPhqnseo6bfcEXwllcJxrieLVA=)
2: WIbpjNFgyL8FweUsKsihkm_PI28.roa (hash: VoeMP15IKS+YATCW5k8jloGWeOvqG6TTy+tPBwoxnfM=)
3: eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl (hash: IeSSUfvwjHTIyQJtPfjIrxO1pwzA/A3hPVCtvg2UEs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8f:fc:13:c2:5a:71:d9:98:43:50:bf:b0:6b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=1a25bda4708e7b16897b4062faab7b60dfb418b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:9d:1f:fa:63:19:6d:cd:98:73:2a:6b:c7:
c3:09:a3:45:a1:1a:9b:aa:43:c3:83:a6:61:2c:ad:
2e:5c:97:1f:7c:bb:1c:4b:37:e2:63:a4:3e:6f:c0:
6b:4a:3f:4f:82:3a:25:33:4c:17:06:5d:18:fb:2c:
8e:a2:f9:cd:65:f1:8e:02:e5:1a:20:ff:c3:e5:bf:
f5:df:25:9e:45:18:f5:ab:d5:c2:95:06:56:d4:ba:
75:44:6f:0c:c6:07:59:7c:29:f6:b1:5d:e0:59:9d:
55:ad:e8:f8:f6:f9:fe:2b:14:71:e8:ab:01:87:1d:
3e:94:22:be:71:d8:5a:e2:e5:ae:80:6e:fe:0d:b7:
7a:93:69:38:99:54:96:ac:b6:82:8c:16:7a:b7:7f:
36:26:2f:f3:d5:f1:6d:ce:f0:21:dc:58:21:4e:22:
c5:7b:a6:f9:c4:53:52:9a:55:08:72:08:81:37:e3:
ec:1e:4a:90:7b:e0:7b:5c:22:24:f3:f8:35:c3:15:
f2:78:e8:35:35:1a:46:7c:28:b4:e2:3f:25:82:5c:
c0:1a:91:9f:2a:f8:a9:90:c3:87:1f:b3:ad:56:e2:
a0:d5:d4:ca:70:a4:4a:b7:73:50:b4:33:7a:a7:ae:
e6:0c:84:00:46:d6:88:1f:f5:94:1a:ff:9d:42:5e:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:25:BD:A4:70:8E:7B:16:89:7B:40:62:FA:AB:7B:60:DF:B4:18:B8
X509v3 Authority Key Identifier:
keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:89:f3:0b:18:ae:75:9d:75:3d:2d:c6:00:ce:6c:49:fe:76:
c3:57:c6:bd:3a:66:cf:c0:61:b3:55:d3:1e:30:4a:99:1a:25:
ad:2d:07:ea:cd:16:0f:a5:4b:94:55:e3:93:bf:2d:31:52:05:
44:f8:47:6d:9b:f2:2c:5f:37:46:32:db:8c:21:a1:a1:b1:cf:
9b:4d:a4:10:24:4f:d7:f4:28:30:83:d4:55:bd:e2:22:e1:12:
19:1d:d1:bc:45:2f:19:7c:78:5f:db:e0:a0:b9:36:69:e6:8d:
69:90:8a:7d:bb:4a:cc:65:a6:86:ff:f9:dd:2f:ed:a1:e6:48:
c1:7b:1d:ee:a2:93:14:e4:9e:f5:16:82:1d:d8:31:b6:b9:65:
96:eb:b5:26:1d:45:42:85:8b:36:37:0e:72:cc:b1:a9:50:7b:
5f:89:e7:18:ec:df:8e:04:c0:a2:6c:85:21:16:3b:3b:2b:55:
e3:23:26:01:29:d4:db:8b:83:e7:9d:73:02:5c:b1:35:d5:8d:
ae:9d:a6:d7:58:2c:fd:48:f7:ad:d2:66:23:23:b0:fa:fb:e8:
40:00:64:4e:13:71:1f:76:f5:9f:78:47:6b:e1:ef:33:40:cc:
f1:66:68:29:3a:bd:a1:95:2c:54:52:9d:20:25:af:36:20:8a:
c1:4f:bf:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oI/8E8JacdmYQ1C/sGueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NjQ2YjM4YzNkODdkMzMxNDViNjM0YjRlMWRjYzIxNDVm
NjQxNmMwHhcNMjUwNjI4MTMwMTA1WhcNMjUwNjI5MTMwMTA1WjAzMTEwLwYDVQQD
EygxYTI1YmRhNDcwOGU3YjE2ODk3YjQwNjJmYWFiN2I2MGRmYjQxOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLydH/pjGW3NmHMqa8fDCaNFoRqb
qkPDg6ZhLK0uXJcffLscSzfiY6Q+b8BrSj9PgjolM0wXBl0Y+yyOovnNZfGOAuUa
IP/D5b/13yWeRRj1q9XClQZW1Lp1RG8MxgdZfCn2sV3gWZ1Vrej49vn+KxRx6KsB
hx0+lCK+cdha4uWugG7+Dbd6k2k4mVSWrLaCjBZ6t382Ji/z1fFtzvAh3FghTiLF
e6b5xFNSmlUIcgiBN+PsHkqQe+B7XCIk8/g1wxXyeOg1NRpGfCi04j8lglzAGpGf
KvipkMOHH7OtVuKg1dTKcKRKt3NQtDN6p67mDIQARtaIH/WUGv+dQl4kzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBolvaRwjnsWiXtAYvqre2DftBi4MB8GA1UdIwQY
MBaAFHlkazjD2H0zFFtjS04dzCFF9kFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iMzc4ZTAtY2Y5OS00MWIxLWEzOGEt
ZTEzNmM5ODliZTMzLzEvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iMzc4ZTAtY2Y5OS00MWIxLWEzOGEtZTEzNmM5ODliZTMz
LzEvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4nzCxiu
dZ11PS3GAM5sSf52w1fGvTpmz8Bhs1XTHjBKmRolrS0H6s0WD6VLlFXjk78tMVIF
RPhHbZvyLF83RjLbjCGhobHPm02kECRP1/QoMIPUVb3iIuESGR3RvEUvGXx4X9vg
oLk2aeaNaZCKfbtKzGWmhv/53S/toeZIwXsd7qKTFOSe9RaCHdgxtrllluu1Jh1F
QoWLNjcOcsyxqVB7X4nnGOzfjgTAomyFIRY7OytV4yMmASnU24uD551zAlyxNdWN
rp2m11gs/Uj3rdJmIyOw+vvoQABkThNxH3b1n3hHa+HvM0DM8WZoKTq9oZUsVFKd
ICWvNiCKwU+/Jg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:37 2025 by rpki-client