
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: fMrbRmMKSyfwMFyKQ+XLnOZv6SFNKjD51sxngfh7SSM=
Subject key identifier: C5:E7:71:A3:4A:80:AF:F7:A8:4D:52:81:A7:0D:A8:B5:FC:F6:EF:7B
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 01977075BE92B41B7DEFC4D6CEEA7B15DBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1452
Signing time: Sat 14 Jun 2025 22:00:53 +0000
Manifest this update: Sat 14 Jun 2025 22:00:53 +0000
Manifest next update: Sun 15 Jun 2025 22:00:53 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: DpPcG2GVSASPoiQRgUOAS08jYnSBRUkknD7/QNSkuEQ=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:be:92:b4:1b:7d:ef:c4:d6:ce:ea:7b:15:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Jun 14 22:00:53 2025 GMT
Not After : Jun 15 22:00:53 2025 GMT
Subject: CN=c5e771a34a80aff7a84d5281a70da8b5fcf6ef7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:44:f4:9a:0b:d4:d5:94:ee:b9:d9:91:2f:
a5:cd:28:13:98:75:be:0c:79:28:d2:aa:1b:f1:fb:
ea:68:bf:56:58:79:04:c1:78:d6:da:9b:be:e0:99:
1d:ba:b8:ef:cb:46:71:b5:f2:f1:0f:2f:cb:89:c6:
36:de:e7:07:68:71:1d:79:fc:c4:53:35:ca:b8:39:
13:5f:e9:f0:c0:27:b9:7c:2a:7c:0a:2d:79:15:a3:
f7:e7:c9:44:f8:80:58:97:22:74:a3:34:38:4e:f0:
66:df:9f:18:73:ee:25:ed:c5:8a:6b:4e:85:aa:c8:
cc:91:58:15:de:a1:30:34:13:3c:34:0f:3d:e8:9f:
10:e8:d4:81:e1:aa:6f:3c:c8:12:ca:bd:6d:62:c9:
29:b2:51:b6:95:3c:87:2f:da:48:f8:13:9e:2e:1b:
29:46:fa:0e:16:a8:42:6b:15:56:3f:b3:6a:76:da:
ab:68:dd:72:10:d1:d2:37:e2:07:79:04:47:d9:6b:
0e:e9:ed:bf:1c:0c:f6:e5:c6:c6:97:6f:41:4d:08:
35:35:fe:11:cc:01:0e:d9:4c:52:cb:2d:85:99:72:
67:66:d7:52:e7:7d:3d:9b:4f:e1:ea:9b:03:72:f1:
4e:65:42:57:de:d4:00:59:fb:1e:0d:bc:d5:06:3e:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:71:A3:4A:80:AF:F7:A8:4D:52:81:A7:0D:A8:B5:FC:F6:EF:7B
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:05:00:47:4f:ba:c1:e3:97:f3:94:2f:e2:1a:3e:83:43:ed:
32:b4:14:ea:8c:de:77:5f:20:40:60:49:d1:76:d5:fb:57:b7:
7e:dd:5f:98:dd:02:5c:6f:cc:c6:d7:e2:d6:9d:d3:9f:0d:2c:
f5:e2:97:99:37:ce:c2:2c:07:56:6f:99:38:f0:4c:44:3e:74:
e4:bf:40:26:86:c1:e5:d9:61:c5:fa:dd:3b:0e:7c:8f:76:98:
49:4d:30:3b:f9:b5:28:b1:20:81:d3:ca:73:ba:08:69:74:88:
61:f5:b5:f8:8a:16:13:5a:0e:56:c5:4e:7e:23:4b:be:fc:5f:
f1:00:6d:28:10:75:1e:c6:f4:27:bc:0c:96:e3:f5:d2:9c:4c:
0a:86:cc:96:ff:7a:de:da:e7:63:f3:bb:cc:5d:ca:52:63:08:
0f:56:5b:3d:88:8c:1c:3e:13:73:09:42:be:a1:58:60:d1:a9:
78:aa:cf:93:8a:d5:ef:15:70:0f:04:19:45:7d:de:f1:17:33:
c4:a1:00:58:09:d8:0f:32:f0:ed:2e:12:de:74:e6:3c:28:43:
cf:0b:6d:2e:23:d8:79:3b:3d:d9:61:69:54:8c:a8:7e:b0:cc:
b4:9a:1b:a5:08:53:0b:a5:cb:04:63:f1:86:88:a3:10:30:fa:
3e:fc:e6:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdb6StBt978TWzup7FdvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjUwNjE0MjIwMDUzWhcNMjUwNjE1MjIwMDUzWjAzMTEwLwYDVQQD
EyhjNWU3NzFhMzRhODBhZmY3YTg0ZDUyODFhNzBkYThiNWZjZjZlZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzARE9JoL1NWU7rnZkS+lzSgTmHW+
DHko0qob8fvqaL9WWHkEwXjW2pu+4Jkdurjvy0ZxtfLxDy/LicY23ucHaHEdefzE
UzXKuDkTX+nwwCe5fCp8Ci15FaP358lE+IBYlyJ0ozQ4TvBm358Yc+4l7cWKa06F
qsjMkVgV3qEwNBM8NA896J8Q6NSB4apvPMgSyr1tYskpslG2lTyHL9pI+BOeLhsp
RvoOFqhCaxVWP7NqdtqraN1yENHSN+IHeQRH2WsO6e2/HAz25cbGl29BTQg1Nf4R
zAEO2UxSyy2FmXJnZtdS5309m0/h6psDcvFOZUJX3tQAWfseDbzVBj6OnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXncaNKgK/3qE1SgacNqLX89u97MB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwUAR0+6
weOX85Qv4ho+g0PtMrQU6ozed18gQGBJ0XbV+1e3ft1fmN0CXG/Mxtfi1p3Tnw0s
9eKXmTfOwiwHVm+ZOPBMRD505L9AJobB5dlhxfrdOw58j3aYSU0wO/m1KLEggdPK
c7oIaXSIYfW1+IoWE1oOVsVOfiNLvvxf8QBtKBB1Hsb0J7wMluP10pxMCobMlv96
3trnY/O7zF3KUmMID1ZbPYiMHD4TcwlCvqFYYNGpeKrPk4rV7xVwDwQZRX3e8Rcz
xKEAWAnYDzLw7S4S3nTmPChDzwttLiPYeTs92WFpVIyofrDMtJobpQhTC6XLBGPx
hoijEDD6PvzmxQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:14:47 2025 by rpki-client