Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: AAyxLkhx9fYsqqy9wyG4PK+2xcXLbOr8L/E8cX0qMpg=
Subject key identifier: 83:D1:33:27:01:F6:A7:C5:2E:8F:73:B7:43:96:5E:DF:2E:C9:30:47
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 0198936CC82F5E77FBCDB99B76F30205B257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 10:00:36 +0000
Manifest this update: Sun 10 Aug 2025 10:00:36 +0000
Manifest next update: Mon 11 Aug 2025 10:00:36 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: Rij6RUs2hqH+VhBlM51XeFA9lCbvXo6mHgwOS+vBjF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:c8:2f:5e:77:fb:cd:b9:9b:76:f3:02:05:b2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Aug 10 10:00:36 2025 GMT
Not After : Aug 11 10:00:36 2025 GMT
Subject: CN=83d1332701f6a7c52e8f73b743965edf2ec93047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:56:a7:04:44:4f:c5:99:6f:30:4b:17:65:
97:32:59:43:87:a6:e9:9c:f2:48:00:fe:36:8e:55:
f5:0d:9f:75:a6:f6:bb:43:cb:35:df:ba:72:fc:5c:
92:35:a8:0e:00:df:c2:91:af:ba:bf:51:c2:0e:ff:
6e:9d:7c:c2:88:45:2e:d2:c4:ce:64:20:75:45:d3:
ba:43:02:ab:d8:a1:55:1a:ec:d9:54:8a:7c:fe:e0:
c6:ae:64:65:33:c6:06:3b:aa:c8:23:98:3c:11:6a:
55:54:df:b7:97:42:e4:2a:4b:fb:59:f2:67:79:04:
98:72:fe:79:7e:37:f1:6c:56:c9:27:a1:01:60:43:
39:46:49:bc:d0:04:f8:94:3c:31:e9:36:6a:ad:6a:
0d:a1:ae:d0:71:31:85:4e:7d:6b:65:17:33:bb:d6:
34:6a:ec:57:e8:67:3f:8a:16:97:93:f0:c7:c7:16:
28:77:30:7f:ea:ec:ca:34:21:f1:54:40:b5:f6:90:
67:ec:cb:51:06:15:e3:af:ae:53:6f:87:69:9d:f2:
07:d4:9f:b8:13:1f:14:5f:f2:69:86:be:d7:c4:be:
55:8f:a7:13:3c:c8:6c:94:47:26:4e:e4:1a:ed:70:
a2:ff:13:8d:91:fc:df:90:0c:89:b4:6f:67:8f:d3:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D1:33:27:01:F6:A7:C5:2E:8F:73:B7:43:96:5E:DF:2E:C9:30:47
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:20:55:bc:c5:73:36:b0:06:3c:6b:eb:c7:c5:bf:f4:84:
5e:e7:67:a5:ad:1d:02:68:2b:aa:8a:a9:7b:20:38:90:84:f4:
7a:9b:d2:1c:7c:18:98:2d:be:eb:07:ca:ab:bc:df:c9:f5:af:
d6:9d:6d:ed:57:f8:b8:96:39:88:ca:f2:e1:62:8e:a6:8a:cc:
10:da:12:7a:61:53:bc:70:61:62:dc:b2:7d:c0:ba:22:35:81:
cf:2e:b7:51:d3:67:b8:ae:9a:66:2b:e7:a4:66:09:05:b4:20:
e9:a7:e8:1d:1b:11:ba:d1:b9:24:37:a0:af:34:3a:65:c7:f6:
86:d3:28:da:8e:3b:35:ba:31:cd:af:71:06:51:7e:c4:16:42:
b4:02:c9:28:b4:e2:f3:3f:b7:40:61:84:a1:0c:f9:3a:63:52:
2d:2c:c5:46:f2:9c:07:08:c0:51:53:3a:ce:0c:d9:14:c6:5e:
be:9b:52:f8:69:37:6a:58:fc:59:d8:f9:5d:53:fa:5e:09:62:
b2:2a:13:7c:c2:db:03:4f:05:30:82:4f:0d:c0:2f:05:5a:68:
65:4a:57:70:e2:ac:a3:f4:df:19:45:b5:17:a3:d0:1b:8e:3c:
4e:a3:1f:7c:61:18:3c:28:73:fd:e1:c0:ce:59:06:0c:82:e6:
f7:92:5a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbMgvXnf7zbmbdvMCBbJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTc3MzYyZTMxNDU4NmQwZDIxODg0ZDAxYTg1YWRiNzc2
NjViNzQwHhcNMjUwODEwMTAwMDM2WhcNMjUwODExMTAwMDM2WjAzMTEwLwYDVQQD
Eyg4M2QxMzMyNzAxZjZhN2M1MmU4ZjczYjc0Mzk2NWVkZjJlYzkzMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugJWpwRET8WZbzBLF2WXMllDh6bp
nPJIAP42jlX1DZ91pva7Q8s137py/FySNagOAN/Cka+6v1HCDv9unXzCiEUu0sTO
ZCB1RdO6QwKr2KFVGuzZVIp8/uDGrmRlM8YGO6rII5g8EWpVVN+3l0LkKkv7WfJn
eQSYcv55fjfxbFbJJ6EBYEM5Rkm80AT4lDwx6TZqrWoNoa7QcTGFTn1rZRczu9Y0
auxX6Gc/ihaXk/DHxxYodzB/6uzKNCHxVEC19pBn7MtRBhXjr65Tb4dpnfIH1J+4
Ex8UX/Jphr7XxL5Vj6cTPMhslEcmTuQa7XCi/xONkfzfkAyJtG9nj9PXvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPRMycB9qfFLo9zt0OWXt8uyTBHMB8GA1UdIwQY
MBaAFHunc2LjFFhtDSGITQGoWtt3Zlt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMt
OTYxZjQzNzEzNWM2LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMtOTYxZjQzNzEzNWM2
LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZogVbzF
czawBjxr68fFv/SEXudnpa0dAmgrqoqpeyA4kIT0epvSHHwYmC2+6wfKq7zfyfWv
1p1t7Vf4uJY5iMry4WKOporMENoSemFTvHBhYtyyfcC6IjWBzy63UdNnuK6aZivn
pGYJBbQg6afoHRsRutG5JDegrzQ6Zcf2htMo2o47Nboxza9xBlF+xBZCtALJKLTi
8z+3QGGEoQz5OmNSLSzFRvKcBwjAUVM6zgzZFMZevptS+Gk3alj8Wdj5XVP6Xgli
sioTfMLbA08FMIJPDcAvBVpoZUpXcOKso/TfGUW1F6PQG448TqMffGEYPChz/eHA
zlkGDILm95JaoQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:24 2025 by rpki-client