Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: jj27nsi3suh50l3CL+hwKukITmLf8wr+KxW/WAtSR6E=
Subject key identifier: D8:2C:2A:79:E4:94:9C:6B:0B:B3:12:BB:0F:02:12:9A:87:89:DD:07
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 0197B7B2E282AFAB97B12B882928C42A54F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: I3KXup8Vottl0PlhIK27L4204xYqSDuDuGWojj34BbM=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e2:82:af:ab:97:b1:2b:88:29:28:c4:2a:54:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=d82c2a79e4949c6b0bb312bb0f02129a8789dd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:d4:ba:66:90:9c:a4:a7:1e:0e:cb:93:c9:
a4:f9:91:46:99:36:e5:a9:cd:81:2e:ad:5a:98:15:
e0:1e:7e:40:93:b5:c9:ee:9c:ee:34:c2:a1:87:32:
4b:a1:6e:f1:d4:d6:e6:fd:ff:da:59:d1:6b:b6:fd:
a7:03:6b:e5:50:3d:d3:ca:b4:bf:72:ed:30:e4:6a:
f0:59:cd:e2:7d:ea:e6:60:86:08:c1:e6:b9:e4:70:
86:49:84:68:53:6c:a7:2a:21:6a:57:84:7a:a3:b4:
8a:92:35:2a:b0:59:55:9d:60:f2:d6:56:2c:00:11:
1a:cc:2e:87:ef:f9:52:e4:22:81:7a:92:42:4e:b7:
2a:df:29:8e:66:5f:f1:bc:20:f2:32:c6:45:ea:32:
4d:0b:9f:a5:ed:2c:d5:5b:03:15:69:d4:5a:4f:fc:
39:32:fd:8e:27:8b:3e:2f:df:6f:99:f2:e1:4a:6b:
48:07:b5:94:5c:f8:d3:5e:0e:40:c4:c1:33:b2:4a:
52:b7:19:f4:4c:ac:6e:ac:e5:a6:9d:0c:0c:c1:d7:
93:14:5c:95:27:fc:74:14:06:39:de:0b:e8:41:79:
57:72:68:20:d2:64:7d:2d:db:8d:39:c9:c5:51:ac:
b3:f8:bf:f8:de:ea:f3:89:ff:e2:12:12:44:90:2e:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2C:2A:79:E4:94:9C:6B:0B:B3:12:BB:0F:02:12:9A:87:89:DD:07
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:17:82:3e:34:cc:7e:cf:bc:53:c2:d9:d0:94:b9:d3:8d:fb:
bc:20:86:78:65:21:4a:d0:79:ad:d7:8c:ab:1e:65:51:ee:e1:
9f:4f:3b:ab:ed:e2:60:8b:c4:25:2b:0c:cf:e4:3a:7d:74:c5:
d0:7f:c5:4a:cf:00:81:cf:c4:d4:3c:6a:e5:c7:ba:c7:97:c3:
ec:ef:e0:97:1e:be:db:10:bc:49:d7:6f:6e:96:1a:97:b6:ee:
7d:f1:db:88:34:bc:93:6f:3f:e4:87:2c:72:a2:4f:b4:6d:fb:
a7:38:42:2f:9a:74:a8:d8:e2:2a:0e:e7:64:b3:cd:a2:d1:51:
ed:3e:96:d0:5d:e5:62:3c:8f:54:50:bf:da:cd:f0:fe:0f:c1:
93:3c:30:3f:22:cf:96:17:e8:46:cf:c5:95:7d:09:61:81:b3:
b8:71:aa:5f:d2:88:68:dc:f3:b4:bd:de:7d:08:a4:ef:c7:4b:
17:8d:ae:5c:38:a0:13:ef:ec:bd:1b:2a:7c:0d:42:0f:2a:91:
4f:a6:e5:28:b9:f1:90:18:00:66:6a:29:85:35:b3:03:32:71:
97:35:02:34:87:56:3c:95:0d:6f:ca:94:87:a1:42:98:a1:57:
d6:cc:db:3d:d9:6e:25:3e:13:f2:91:52:85:71:35:1e:01:7f:
77:c7:1f:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3suKCr6uXsSuIKSjEKlT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5
MWI5ZDQwHhcNMjUwNjI4MTgwMDQzWhcNMjUwNjI5MTgwMDQzWjAzMTEwLwYDVQQD
EyhkODJjMmE3OWU0OTQ5YzZiMGJiMzEyYmIwZjAyMTI5YTg3ODlkZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TjUumaQnKSnHg7Lk8mk+ZFGmTbl
qc2BLq1amBXgHn5Ak7XJ7pzuNMKhhzJLoW7x1Nbm/f/aWdFrtv2nA2vlUD3TyrS/
cu0w5GrwWc3ifermYIYIwea55HCGSYRoU2ynKiFqV4R6o7SKkjUqsFlVnWDy1lYs
ABEazC6H7/lS5CKBepJCTrcq3ymOZl/xvCDyMsZF6jJNC5+l7SzVWwMVadRaT/w5
Mv2OJ4s+L99vmfLhSmtIB7WUXPjTXg5AxMEzskpStxn0TKxurOWmnQwMwdeTFFyV
J/x0FAY53gvoQXlXcmgg0mR9LduNOcnFUayz+L/43urzif/iEhJEkC4JQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgsKnnklJxrC7MSuw8CEpqHid0HMB8GA1UdIwQY
MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt
OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4
LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxeCPjTM
fs+8U8LZ0JS50437vCCGeGUhStB5rdeMqx5lUe7hn087q+3iYIvEJSsMz+Q6fXTF
0H/FSs8Agc/E1Dxq5ce6x5fD7O/glx6+2xC8SddvbpYal7buffHbiDS8k28/5Ics
cqJPtG37pzhCL5p0qNjiKg7nZLPNotFR7T6W0F3lYjyPVFC/2s3w/g/BkzwwPyLP
lhfoRs/FlX0JYYGzuHGqX9KIaNzztL3efQik78dLF42uXDigE+/svRsqfA1CDyqR
T6blKLnxkBgAZmophTWzAzJxlzUCNIdWPJUNb8qUh6FCmKFX1szbPdluJT4T8pFS
hXE1HgF/d8cf4g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:46 2025 by rpki-client