Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
File: EeKnjdx_E58MIqKmNmK0gSrlEy4.mft (raw, json)
Hash identifier: YqZVdBm9lXnPF3zXBWPp95KAcQzdHnzBhDmzcp5sdSA=
Subject key identifier: 9F:13:94:E1:20:43:5B:9B:BF:97:3B:AF:31:85:A3:12:19:B0:A9:16
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 01987CE50ECEFFD6F7143E3C5F6962280E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
Manifest number: 0D05
Signing time: Wed 06 Aug 2025 01:00:42 +0000
Manifest this update: Wed 06 Aug 2025 01:00:42 +0000
Manifest next update: Thu 07 Aug 2025 01:00:42 +0000
Files and hashes: 1: EeKnjdx_E58MIqKmNmK0gSrlEy4.crl (hash: ekgTZLIa9mTss42xqzNatrgETPT8yoxN+CyZHZQ8dAI=)
2: TlnmoN3NW-y8xYiqm0HOIvqXMC0.roa (hash: fvos90x1MCHlKrWkPLr1FS+wwkNQEqqCA62xdTd9V6A=)
3: upwUY-IRDf6A9l9uowGDJXhgTCE.roa (hash: IubMyXokYf5K+jVmzZiM+AZcRQ0zYk8rqAfoAkObB6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:0e:ce:ff:d6:f7:14:3e:3c:5f:69:62:28:0e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Aug 6 01:00:42 2025 GMT
Not After : Aug 7 01:00:42 2025 GMT
Subject: CN=9f1394e120435b9bbf973baf3185a31219b0a916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:5f:fc:58:10:be:21:74:e2:90:24:c9:26:
70:5a:87:a7:86:e8:8e:75:ac:7f:d8:c3:3b:cb:60:
77:83:33:32:c1:0b:0c:e6:a4:ea:8f:41:f0:ee:ba:
a6:dd:8f:56:c3:bc:d1:73:5d:e3:ff:bb:aa:4f:14:
60:a4:b8:1b:a0:a1:7b:72:a5:b5:42:dd:1e:6b:cc:
dd:a2:5b:a2:30:18:a5:18:01:61:e8:57:68:c8:73:
b4:ec:89:35:40:4d:c8:5d:09:e9:e3:6e:2d:ee:78:
20:7c:18:df:ab:40:8f:57:01:70:61:65:f3:c0:bc:
9e:50:5b:12:de:e5:19:e9:62:0b:8d:25:b0:8b:c2:
a7:bd:ff:ee:42:61:b1:78:28:38:fe:fe:a7:57:67:
90:4f:3a:43:bd:81:4b:f4:4e:ad:d6:5a:de:08:6e:
49:08:ef:89:ff:2a:df:67:0f:0c:78:dd:6c:c9:bd:
32:66:b8:bf:6a:67:f9:4c:a3:53:54:0b:05:57:db:
38:1e:e2:9d:1b:b9:f1:ef:d8:d5:a1:8d:b0:74:27:
72:a2:d9:c4:db:12:b2:13:6d:fb:cd:bf:1e:1e:e2:
de:81:4d:b3:fd:e2:8f:d3:da:2f:3c:49:60:2e:45:
b0:04:1b:05:30:57:e9:4a:7a:6c:41:94:14:d3:28:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:13:94:E1:20:43:5B:9B:BF:97:3B:AF:31:85:A3:12:19:B0:A9:16
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:91:b0:36:e0:d1:49:e7:08:b8:db:ff:1a:76:01:8b:56:9e:
b0:9a:e6:ad:6a:f1:75:49:92:62:b7:d0:5f:ec:27:13:50:1e:
49:ef:eb:d7:86:c6:c2:88:87:03:46:34:b1:3d:16:89:ae:e9:
d5:83:dc:f8:d2:e2:f4:3c:c9:9b:dc:ad:61:9d:a5:03:83:38:
d6:fd:4f:b9:7a:72:55:48:ef:ed:f0:56:80:05:07:48:40:92:
db:7e:f2:77:88:54:f6:1f:d4:0e:14:a3:05:f5:98:0a:23:78:
44:c3:58:ab:ee:32:c8:bf:5d:33:3d:db:b8:4a:0b:2b:cb:71:
77:c4:ad:2c:12:63:8e:c5:da:c5:18:15:9a:23:a2:aa:f7:95:
18:63:b5:e2:93:46:cc:b0:a5:bc:0e:c3:6b:d6:fe:f6:b7:56:
7e:74:32:7c:85:1d:10:b7:9f:06:aa:4d:9d:ef:00:93:33:54:
2f:ca:b6:20:f9:18:c8:30:3c:e2:1c:fd:5d:13:f3:4d:e5:a5:
27:f5:91:86:3c:26:c4:aa:1d:f6:51:be:ce:1b:07:3d:e4:14:
dc:28:b5:bc:a3:90:8a:5e:9e:30:fd:92:ce:6c:07:31:20:ed:
4f:5d:cc:22:8c:b4:51:75:ec:73:27:fc:f3:3b:07:55:14:62:
6b:4e:c2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85Q7O/9b3FD48X2liKA5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTJhNzhkZGM3ZjEzOWYwYzIyYTJhNjM2NjJiNDgxMmFl
NTEzMmUwHhcNMjUwODA2MDEwMDQyWhcNMjUwODA3MDEwMDQyWjAzMTEwLwYDVQQD
Eyg5ZjEzOTRlMTIwNDM1YjliYmY5NzNiYWYzMTg1YTMxMjE5YjBhOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0hf/FgQviF04pAkySZwWoenhuiO
dax/2MM7y2B3gzMywQsM5qTqj0Hw7rqm3Y9Ww7zRc13j/7uqTxRgpLgboKF7cqW1
Qt0ea8zdoluiMBilGAFh6FdoyHO07Ik1QE3IXQnp424t7nggfBjfq0CPVwFwYWXz
wLyeUFsS3uUZ6WILjSWwi8Knvf/uQmGxeCg4/v6nV2eQTzpDvYFL9E6t1lreCG5J
CO+J/yrfZw8MeN1syb0yZri/amf5TKNTVAsFV9s4HuKdG7nx79jVoY2wdCdyotnE
2xKyE237zb8eHuLegU2z/eKP09ovPElgLkWwBBsFMFfpSnpsQZQU0yiehwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8TlOEgQ1ubv5c7rzGFoxIZsKkWMB8GA1UdIwQY
MBaAFBHip43cfxOfDCKipjZitIEq5RMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDE1YzctNDc2YS00YzU3LWJhZjQt
ZGU1ZjdiZjU5ODM5LzEvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZDE1YzctNDc2YS00YzU3LWJhZjQtZGU1ZjdiZjU5ODM5
LzEvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJGwNuDR
SecIuNv/GnYBi1aesJrmrWrxdUmSYrfQX+wnE1AeSe/r14bGwoiHA0Y0sT0Wia7p
1YPc+NLi9DzJm9ytYZ2lA4M41v1PuXpyVUjv7fBWgAUHSECS237yd4hU9h/UDhSj
BfWYCiN4RMNYq+4yyL9dMz3buEoLK8txd8StLBJjjsXaxRgVmiOiqveVGGO14pNG
zLClvA7Da9b+9rdWfnQyfIUdELefBqpNne8AkzNUL8q2IPkYyDA84hz9XRPzTeWl
J/WRhjwmxKod9lG+zhsHPeQU3Ci1vKOQil6eMP2SzmwHMSDtT13MIoy0UXXscyf8
8zsHVRRia07CpA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:26 2025 by rpki-client