Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier: LYzve2fWQTcYfJUMhcBIZcDddBMtR2CtnroL8ELPnwE=
Subject key identifier: 35:D9:85:43:D9:BC:4F:3B:EE:0E:53:C5:24:D4:47:EA:F3:53:2B:47
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 0197703F059223F731DC1875F3777B3209B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number: 11A0
Signing time: Sat 14 Jun 2025 21:01:07 +0000
Manifest this update: Sat 14 Jun 2025 21:01:07 +0000
Manifest next update: Sun 15 Jun 2025 21:01:07 +0000
Files and hashes: 1: SFEu-x9BStWef7xbgnMJ14kfmtE.roa (hash: PqneIDEjiYPrh2i2T52RFsPVM7i/nozgeeqppA7gRYk=)
2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: 1NnKB7QOiUxzArF/YibELkw/V+BkBlK+/dla76xa5Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3f:05:92:23:f7:31:dc:18:75:f3:77:7b:32:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jun 14 21:01:07 2025 GMT
Not After : Jun 15 21:01:07 2025 GMT
Subject: CN=35d98543d9bc4f3bee0e53c524d447eaf3532b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:31:a3:fc:5f:18:1a:f5:3b:c3:b5:e4:43:
aa:df:53:49:33:a5:05:c2:1c:64:b7:46:4b:15:6e:
22:68:59:7c:bf:03:35:4d:73:d2:fb:28:5a:4d:8d:
1d:59:f9:e8:a5:f6:86:9e:3f:0f:e1:ad:37:71:78:
dd:ed:23:ab:bf:9f:f4:52:a4:2c:f2:17:81:32:5f:
0c:35:84:25:85:06:40:16:9b:27:4a:1a:b9:c9:72:
15:b2:bf:50:af:ae:23:67:72:99:6a:a6:e4:7f:d0:
a7:3a:2e:24:f6:b1:28:d0:88:cd:a9:df:dc:f0:d9:
cd:f3:fc:49:e1:66:f4:09:a3:59:3c:08:d4:cf:83:
87:7b:82:dc:34:ca:46:62:e9:8f:34:36:d2:d1:66:
a2:35:14:bd:f6:ce:d9:3a:b0:38:8f:47:60:13:57:
24:32:6a:73:e6:66:28:60:a9:6a:8d:76:67:d0:fd:
1c:4a:38:db:a7:85:e9:9b:49:38:a8:0a:66:d9:d2:
e1:5a:8f:76:9f:0c:cc:0a:cd:61:b3:70:6f:52:a4:
f6:82:17:4a:c5:05:72:f1:a7:86:b4:b3:b4:a0:38:
67:58:16:04:94:66:c1:52:6a:1e:1e:93:09:a6:95:
ec:60:1f:4f:3d:2c:aa:7d:fe:0b:06:eb:e8:53:bb:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D9:85:43:D9:BC:4F:3B:EE:0E:53:C5:24:D4:47:EA:F3:53:2B:47
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:17:19:c1:6b:ab:b7:ca:f2:d3:0b:27:78:57:fd:31:eb:23:
48:aa:5d:4a:5a:57:64:0c:46:51:9e:4c:5e:51:15:26:e0:97:
ee:2b:a6:66:d2:05:6f:d2:ee:a7:53:18:7b:e1:3d:4b:ba:da:
d3:36:a0:ad:a5:32:cc:9d:c5:2e:ad:59:35:28:10:68:fe:f3:
7c:56:c6:e9:b0:f4:c7:d2:98:94:ce:0c:07:97:14:39:fd:95:
6f:45:2a:1c:be:1f:5c:bc:a5:a9:f5:93:69:c2:18:13:61:ce:
e8:a3:94:6b:4d:87:8e:41:fa:81:47:89:f5:0e:60:10:7b:5d:
41:d6:3b:7a:96:6c:59:8d:8d:56:a3:c6:ff:ca:9e:d7:e0:e0:
14:78:ac:b2:e2:dd:84:ef:b8:9c:26:91:bf:06:0a:58:70:9e:
a5:32:a3:b9:b1:68:b3:4b:5a:23:68:d2:cb:a8:c4:89:81:c3:
3e:d2:e7:50:83:41:07:1f:13:14:99:da:39:be:99:8e:c1:be:
5f:72:26:3e:c9:61:24:c7:5e:86:e2:df:bf:56:e8:10:93:64:
a2:85:ee:af:4c:84:b1:13:23:53:ea:62:4f:27:ef:0c:8e:ba:
61:e5:64:a2:57:42:86:4b:44:ba:87:96:cc:2d:38:f1:54:c2:
47:00:19:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPwWSI/cx3Bh183d7MgmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk
ODdlOGUwHhcNMjUwNjE0MjEwMTA3WhcNMjUwNjE1MjEwMTA3WjAzMTEwLwYDVQQD
EygzNWQ5ODU0M2Q5YmM0ZjNiZWUwZTUzYzUyNGQ0NDdlYWYzNTMyYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtYxo/xfGBr1O8O15EOq31NJM6UF
whxkt0ZLFW4iaFl8vwM1TXPS+yhaTY0dWfnopfaGnj8P4a03cXjd7SOrv5/0UqQs
8heBMl8MNYQlhQZAFpsnShq5yXIVsr9Qr64jZ3KZaqbkf9CnOi4k9rEo0IjNqd/c
8NnN8/xJ4Wb0CaNZPAjUz4OHe4LcNMpGYumPNDbS0WaiNRS99s7ZOrA4j0dgE1ck
Mmpz5mYoYKlqjXZn0P0cSjjbp4Xpm0k4qApm2dLhWo92nwzMCs1hs3BvUqT2ghdK
xQVy8aeGtLO0oDhnWBYElGbBUmoeHpMJppXsYB9PPSyqff4LBuvoU7uRFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXZhUPZvE877g5TxSTUR+rzUytHMB8GA1UdIwQY
MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt
ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4
LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwhcZwWur
t8ry0wsneFf9MesjSKpdSlpXZAxGUZ5MXlEVJuCX7iumZtIFb9Lup1MYe+E9S7ra
0zagraUyzJ3FLq1ZNSgQaP7zfFbG6bD0x9KYlM4MB5cUOf2Vb0UqHL4fXLylqfWT
acIYE2HO6KOUa02HjkH6gUeJ9Q5gEHtdQdY7epZsWY2NVqPG/8qe1+DgFHissuLd
hO+4nCaRvwYKWHCepTKjubFos0taI2jSy6jEiYHDPtLnUINBBx8TFJnaOb6ZjsG+
X3ImPslhJMdehuLfv1boEJNkooXur0yEsRMjU+piTyfvDI66YeVkoldChktEuoeW
zC048VTCRwAZ5A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:44:37 2025 by rpki-client