Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier: eh88UX0ePBpw4IzXT8SXdFS0Yir/GqWJwad27eMvPzE=
Subject key identifier: 32:D7:97:EC:7E:44:84:7A:EB:42:F7:A5:A7:05:A0:25:FE:10:60:8A
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial: 0197C9F02D59DEDCF9E190D8C3EDD790B573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 07:00:49 +0000
Manifest this update: Wed 02 Jul 2025 07:00:49 +0000
Manifest next update: Thu 03 Jul 2025 07:00:49 +0000
Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: 47YSVZKwzfLDqirsL13AHb9uYe6WcoXyj4TqjLMM170=)
2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:2d:59:de:dc:f9:e1:90:d8:c3:ed:d7:90:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Validity
Not Before: Jul 2 07:00:49 2025 GMT
Not After : Jul 3 07:00:49 2025 GMT
Subject: CN=32d797ec7e44847aeb42f7a5a705a025fe10608a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:4d:82:a8:6e:1e:9b:08:99:99:d7:4a:d6:
7f:41:1a:c1:83:a2:96:e6:77:de:4c:2c:54:61:36:
ab:dd:ef:ce:3d:f7:42:58:b6:6a:e9:d1:dc:1d:59:
2e:f3:ad:5a:9b:a4:a0:d8:42:91:82:84:30:71:47:
38:72:e7:79:73:34:cd:e0:20:b4:57:eb:6e:4f:73:
5b:db:bd:93:54:78:b6:48:8b:a4:9c:1f:3b:a4:8a:
67:92:b3:f2:fa:5f:e9:63:c5:1a:b2:86:88:6a:3e:
79:1c:e2:84:8d:9e:60:53:5d:98:a8:c2:c6:26:83:
c7:91:e9:75:b6:5d:61:02:86:87:15:91:83:0e:35:
e6:0d:d4:d0:a4:1d:7f:a7:d8:62:e2:e7:6c:bc:da:
f1:57:d6:27:f7:59:ce:95:8c:5d:c7:2c:69:e6:01:
96:1a:1a:1e:71:c8:60:32:10:6e:6e:33:73:5e:74:
87:9f:2c:d8:4f:4e:59:13:20:52:c8:1c:bc:db:d7:
43:a3:9b:d7:19:98:fe:bf:02:b7:f1:a8:f2:ba:bf:
39:a2:17:b2:42:eb:05:0f:39:33:85:bc:1f:dd:42:
5b:83:a3:2e:5a:15:f0:0f:1a:8a:45:a2:77:db:1d:
05:fc:ba:19:99:77:34:88:8e:c2:9a:11:9f:6c:c7:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D7:97:EC:7E:44:84:7A:EB:42:F7:A5:A7:05:A0:25:FE:10:60:8A
X509v3 Authority Key Identifier:
keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d5:9f:43:73:8b:72:e6:6d:e8:23:ca:e9:fc:5e:45:42:c4:
3f:69:d4:72:6f:d5:1b:35:d9:58:8a:a6:fb:c8:ad:43:d4:75:
45:3d:b3:fc:cd:91:e1:d6:99:a2:a9:98:8b:2e:6c:3e:98:4b:
bc:2a:77:b4:0d:27:4d:14:83:6a:a9:49:b8:21:bc:de:a5:46:
22:7c:47:60:3c:b2:75:ab:de:04:9c:d1:16:6f:68:b3:c6:d4:
f7:12:6a:1a:78:2a:ae:da:5c:ef:8a:d5:21:d6:7c:cb:27:fe:
80:56:2e:c4:18:49:c0:ac:25:cd:74:57:d5:ea:92:8a:a1:91:
8d:a7:b2:a4:90:2d:d7:5d:c4:83:c6:81:15:c2:d4:67:d2:a4:
31:25:6e:a8:fc:0c:57:0a:a5:a1:5a:0a:e0:5d:da:3c:02:b5:
29:fc:70:ed:db:ef:d1:c7:00:f9:19:8f:00:cf:9c:c4:df:cb:
9e:80:5c:5a:b5:86:8f:eb:98:30:7b:a6:33:b6:a0:76:30:28:
bb:ac:e8:e3:80:5e:6e:42:ea:46:4f:2b:d2:50:c2:87:66:6a:
c8:30:f1:e2:b0:ec:55:51:fa:47:11:88:64:ba:df:ec:61:4f:
ae:e0:54:fe:6d:a0:8b:42:23:7b:20:d4:b8:87:f9:70:0c:ee:
1a:6e:e8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJ8C1Z3tz54ZDYw+3XkLVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzY2M2MzA5YWMzMGE3ZmMwMTVjMzM0NGNiYzgwODYxYjRj
NTQ3Y2YwHhcNMjUwNzAyMDcwMDQ5WhcNMjUwNzAzMDcwMDQ5WjAzMTEwLwYDVQQD
EygzMmQ3OTdlYzdlNDQ4NDdhZWI0MmY3YTVhNzA1YTAyNWZlMTA2MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzVNgqhuHpsImZnXStZ/QRrBg6KW
5nfeTCxUYTar3e/OPfdCWLZq6dHcHVku861am6Sg2EKRgoQwcUc4cud5czTN4CC0
V+tuT3Nb272TVHi2SIuknB87pIpnkrPy+l/pY8UasoaIaj55HOKEjZ5gU12YqMLG
JoPHkel1tl1hAoaHFZGDDjXmDdTQpB1/p9hi4udsvNrxV9Yn91nOlYxdxyxp5gGW
GhoecchgMhBubjNzXnSHnyzYT05ZEyBSyBy829dDo5vXGZj+vwK38ajyur85ohey
QusFDzkzhbwf3UJbg6MuWhXwDxqKRaJ32x0F/LoZmXc0iI7CmhGfbMfBzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLXl+x+RIR660L3pacFoCX+EGCKMB8GA1UdIwQY
MBaAFBPMYwmsMKf8AVwzRMvICGG0xUfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQt
ZGQzNzY1YzJlZWU0LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQtZGQzNzY1YzJlZWU0
LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtWfQ3OL
cuZt6CPK6fxeRULEP2nUcm/VGzXZWIqm+8itQ9R1RT2z/M2R4daZoqmYiy5sPphL
vCp3tA0nTRSDaqlJuCG83qVGInxHYDyydaveBJzRFm9os8bU9xJqGngqrtpc74rV
IdZ8yyf+gFYuxBhJwKwlzXRX1eqSiqGRjaeypJAt113Eg8aBFcLUZ9KkMSVuqPwM
VwqloVoK4F3aPAK1Kfxw7dvv0ccA+RmPAM+cxN/LnoBcWrWGj+uYMHumM7agdjAo
u6zo44BebkLqRk8r0lDCh2ZqyDDx4rDsVVH6RxGIZLrf7GFPruBU/m2gi0IjeyDU
uIf5cAzuGm7oOA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:07:13 2025 by rpki-client