Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: yuxGTiDkEG/Am28uYBBIieG9HLhh3PO8U7fAnYt2koA=
Subject key identifier: 03:4F:A1:7A:D4:E1:9B:78:F7:76:27:56:F5:7B:4A:CE:D1:EB:AE:F0
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 0198D54E86E7984C1D048D15B36EF0A78D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: wai2caImPy3C0aaBhJTNPEMQAw3vveqE7yqB7EBR9+Q=)
2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:86:e7:98:4c:1d:04:8d:15:b3:6e:f0:a7:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=034fa17ad4e19b78f7762756f57b4aced1ebaef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:65:8f:98:24:66:14:67:50:a8:0a:2a:73:
10:e9:2f:a6:16:08:53:f3:d1:3a:b4:06:f1:b5:d0:
ca:7b:b1:13:69:03:21:69:ed:c6:c2:7d:15:28:0e:
80:fa:c4:d2:5b:6c:67:4b:b3:ab:97:8e:20:2e:c6:
91:b8:5d:f5:c0:ac:c5:4d:f9:ad:d8:03:cf:b2:b5:
b7:5d:1e:71:40:e8:6e:41:af:2a:46:71:12:4c:dd:
fc:57:17:8f:50:84:45:65:f3:49:c4:04:e3:e9:55:
7a:f0:9e:b6:d3:f5:88:87:e4:a0:79:10:97:0f:9f:
2a:43:d3:20:c5:34:7a:63:c5:9a:6f:9b:e8:0d:96:
57:28:dc:28:0b:19:b0:91:e7:35:c2:79:2d:b2:e4:
be:dd:39:0e:5d:ac:c2:b1:11:2c:5b:84:bc:a5:ee:
36:d4:59:9e:a2:69:0e:51:f3:12:50:83:4e:df:15:
75:8c:ea:d4:4f:8f:94:44:53:c3:3f:2b:c9:ea:b6:
62:7e:d9:75:c2:60:1c:4d:8e:a9:be:55:90:44:25:
db:1f:45:26:02:e1:1c:5b:7d:3a:d5:e5:56:d0:ef:
ab:7d:f0:6c:47:f2:6e:42:b8:01:66:3c:15:f7:fe:
62:08:fb:c1:cf:ce:34:9c:3a:a8:b2:e7:21:f9:bd:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:A1:7A:D4:E1:9B:78:F7:76:27:56:F5:7B:4A:CE:D1:EB:AE:F0
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8a:7d:bb:4c:13:62:6b:0f:88:92:cd:fc:15:57:5d:5e:70:
d1:9a:9b:d2:63:aa:0f:1d:4c:11:e0:48:2a:66:da:d7:d6:ba:
02:2f:b0:45:af:d9:da:29:5c:f9:15:71:36:26:b2:39:f2:bc:
6e:15:14:2c:f9:e0:eb:ce:0b:9c:19:27:54:f0:0d:fe:29:b9:
0c:79:18:9b:4b:7b:f8:86:e8:3e:6c:ea:fb:ed:5c:70:43:58:
82:09:fa:51:7c:d7:2e:fe:8a:f3:7f:04:c6:7f:51:e3:ef:28:
29:37:25:15:98:72:30:4e:da:e8:ef:cf:93:87:28:c3:92:31:
45:fd:99:65:79:b4:eb:e3:9c:be:7d:e3:ce:c1:a5:4f:d3:0d:
f5:40:9b:51:58:4c:8d:fc:4e:eb:37:87:91:25:76:76:24:c5:
eb:69:ba:a8:ad:31:00:3b:74:fa:74:04:c3:27:f9:3c:f8:fa:
a7:e6:40:84:61:15:9e:40:13:c3:2f:51:c9:ae:2e:5c:95:3f:
f0:e3:b5:35:2c:a8:bd:28:77:df:93:93:c1:10:4f:1e:f1:47:
db:41:a6:f5:f6:f1:91:95:40:de:a5:4e:5f:5b:cc:a0:f5:03:
4e:57:a8:90:2c:36:91:4d:ef:5c:6b:82:41:75:10:56:69:86:
e2:eb:d0:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTobnmEwdBI0Vs27wp40IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDllZWFmMjQzNDJjM2IyYzYzMmM5ZTQ4NDYzMTM4ZGUy
ZGMwMGIwHhcNMjUwODIzMDUwMjI5WhcNMjUwODI0MDUwMjI5WjAzMTEwLwYDVQQD
EygwMzRmYTE3YWQ0ZTE5Yjc4Zjc3NjI3NTZmNTdiNGFjZWQxZWJhZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rxlj5gkZhRnUKgKKnMQ6S+mFghT
89E6tAbxtdDKe7ETaQMhae3Gwn0VKA6A+sTSW2xnS7Orl44gLsaRuF31wKzFTfmt
2APPsrW3XR5xQOhuQa8qRnESTN38VxePUIRFZfNJxATj6VV68J620/WIh+SgeRCX
D58qQ9MgxTR6Y8Wab5voDZZXKNwoCxmwkec1wnktsuS+3TkOXazCsREsW4S8pe42
1FmeomkOUfMSUINO3xV1jOrUT4+URFPDPyvJ6rZiftl1wmAcTY6pvlWQRCXbH0Um
AuEcW3061eVW0O+rffBsR/JuQrgBZjwV9/5iCPvBz840nDqosuch+b0JPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANPoXrU4Zt493YnVvV7Ss7R667wMB8GA1UdIwQY
MBaAFHpJ7q8kNCw7LGMsnkhGMTjeLcALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTct
ZjliNjA3MTE0NTNjLzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTctZjliNjA3MTE0NTNj
LzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYp9u0wT
YmsPiJLN/BVXXV5w0Zqb0mOqDx1MEeBIKmba19a6Ai+wRa/Z2ilc+RVxNiayOfK8
bhUULPng684LnBknVPAN/im5DHkYm0t7+IboPmzq++1ccENYggn6UXzXLv6K838E
xn9R4+8oKTclFZhyME7a6O/Pk4cow5IxRf2ZZXm06+Ocvn3jzsGlT9MN9UCbUVhM
jfxO6zeHkSV2diTF62m6qK0xADt0+nQEwyf5PPj6p+ZAhGEVnkATwy9Rya4uXJU/
8OO1NSyovSh335OTwRBPHvFH20Gm9fbxkZVA3qVOX1vMoPUDTleokCw2kU3vXGuC
QXUQVmmG4uvQuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:42 2025 by rpki-client