Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: Phyqo+R77illFEvlCyvNCcsz72sYQSw3yJywxla55GE=
Subject key identifier: 92:5E:06:D9:B5:C9:17:5D:F2:CC:9B:A7:9E:75:5D:36:13:69:BA:77
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 0197BD47B21F98491084B310F1ECB18A2ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 20:01:21 +0000
Manifest this update: Sun 29 Jun 2025 20:01:21 +0000
Manifest next update: Mon 30 Jun 2025 20:01:21 +0000
Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: NLtKZRTonakIAqItl5VF2pEvlRS+VmV/0G4Ei88EuYg=)
2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:47:b2:1f:98:49:10:84:b3:10:f1:ec:b1:8a:2e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Jun 29 20:01:21 2025 GMT
Not After : Jun 30 20:01:21 2025 GMT
Subject: CN=925e06d9b5c9175df2cc9ba79e755d361369ba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:79:7a:4b:a7:21:72:4e:32:98:e8:2b:bd:
cd:93:8c:ca:ee:fd:00:0f:09:fd:52:39:91:07:f3:
44:13:67:f2:4c:69:7d:dc:ca:04:d0:b7:6c:cd:11:
1b:19:46:ed:1c:f5:9b:99:33:25:04:5d:32:ef:77:
00:0a:8f:ff:aa:a1:a4:9a:0e:cc:d5:bc:1b:a3:64:
30:d5:f6:13:38:c9:ad:bc:48:87:3c:d9:08:9c:ca:
b1:84:e1:13:ef:a8:7a:66:ba:55:07:aa:09:6b:bd:
a3:b5:be:1e:09:9d:2d:60:50:a0:c2:56:7c:f4:26:
90:30:58:d8:1d:a1:12:ed:68:31:10:b0:4c:f8:5f:
7f:9c:f3:1a:8b:8d:70:64:04:bd:92:b5:4d:f4:18:
c1:13:0f:8e:2a:f7:87:7a:e5:43:42:12:2e:b1:3e:
74:04:40:bd:c0:a1:f5:8d:93:16:12:84:da:c2:21:
29:0c:c9:67:70:fa:b3:c1:db:e7:92:b7:ce:b7:46:
3a:7c:ca:2b:78:a1:07:81:1a:b6:a0:94:f5:7a:d5:
a2:9e:7c:48:a9:af:38:dd:98:de:66:0d:71:07:8a:
d9:35:2e:de:3e:03:f4:6c:a6:0f:76:b4:fb:87:fa:
06:d0:48:4b:c4:06:ba:94:d0:e1:5f:1f:25:49:83:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:06:D9:B5:C9:17:5D:F2:CC:9B:A7:9E:75:5D:36:13:69:BA:77
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:59:d5:46:02:3d:0a:3f:12:d6:6e:31:30:a7:2e:c1:ae:7d:
f1:7e:1a:0f:fa:94:83:7d:87:80:ad:a2:f3:91:91:64:39:ab:
26:18:c7:f7:9b:df:a1:22:c6:55:99:f7:8c:25:b4:91:ba:e5:
99:dd:16:39:8d:5f:dd:cc:ec:7c:a5:7a:91:01:54:f2:5c:0c:
2f:58:c4:d3:54:2b:39:67:42:95:bb:6a:1e:f8:d0:5c:0e:fc:
2d:35:b7:cf:ee:10:77:45:b3:4d:cb:7e:e6:8c:44:5a:57:25:
0a:04:8c:cd:68:9e:fb:c5:7d:ed:59:01:11:41:51:d4:00:64:
b6:d7:f8:4b:ea:5c:38:de:b2:68:ec:d4:14:f7:74:53:f4:85:
5c:a5:3a:36:fa:6c:e9:b9:f6:c5:55:f7:f7:94:ac:a6:b0:79:
55:16:58:9f:b7:77:b3:eb:68:5e:06:79:80:e4:fa:3c:4b:25:
9e:25:ad:e6:e1:37:8b:c2:61:80:08:c2:f4:fd:94:a2:13:d9:
0b:62:bc:40:4c:65:77:57:94:a8:79:7f:c9:1b:ff:65:8c:c8:
cb:15:c4:3a:ed:cb:f6:bd:7a:8c:f6:a2:a6:96:ea:b7:fc:3b:
ab:3c:a7:92:eb:c4:fc:1c:93:ed:95:98:6c:7e:b0:19:97:1b:
5a:aa:5f:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe9R7IfmEkQhLMQ8eyxii7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDllZWFmMjQzNDJjM2IyYzYzMmM5ZTQ4NDYzMTM4ZGUy
ZGMwMGIwHhcNMjUwNjI5MjAwMTIxWhcNMjUwNjMwMjAwMTIxWjAzMTEwLwYDVQQD
Eyg5MjVlMDZkOWI1YzkxNzVkZjJjYzliYTc5ZTc1NWQzNjEzNjliYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9p5ekunIXJOMpjoK73Nk4zK7v0A
Dwn9UjmRB/NEE2fyTGl93MoE0LdszREbGUbtHPWbmTMlBF0y73cACo//qqGkmg7M
1bwbo2Qw1fYTOMmtvEiHPNkInMqxhOET76h6ZrpVB6oJa72jtb4eCZ0tYFCgwlZ8
9CaQMFjYHaES7WgxELBM+F9/nPMai41wZAS9krVN9BjBEw+OKveHeuVDQhIusT50
BEC9wKH1jZMWEoTawiEpDMlncPqzwdvnkrfOt0Y6fMoreKEHgRq2oJT1etWinnxI
qa843ZjeZg1xB4rZNS7ePgP0bKYPdrT7h/oG0EhLxAa6lNDhXx8lSYOptwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJeBtm1yRdd8sybp551XTYTabp3MB8GA1UdIwQY
MBaAFHpJ7q8kNCw7LGMsnkhGMTjeLcALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTct
ZjliNjA3MTE0NTNjLzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTctZjliNjA3MTE0NTNj
LzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblnVRgI9
Cj8S1m4xMKcuwa598X4aD/qUg32HgK2i85GRZDmrJhjH95vfoSLGVZn3jCW0kbrl
md0WOY1f3czsfKV6kQFU8lwML1jE01QrOWdClbtqHvjQXA78LTW3z+4Qd0WzTct+
5oxEWlclCgSMzWie+8V97VkBEUFR1ABkttf4S+pcON6yaOzUFPd0U/SFXKU6Nvps
6bn2xVX395SsprB5VRZYn7d3s+toXgZ5gOT6PEslniWt5uE3i8JhgAjC9P2UohPZ
C2K8QExld1eUqHl/yRv/ZYzIyxXEOu3L9r16jPaippbqt/w7qzynkuvE/ByT7ZWY
bH6wGZcbWqpfLA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:07:35 2025 by rpki-client