Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: 9UerPONlHG2pKbi6KvciRDxgldVNflSWqYCtauwCUA8=
Subject key identifier: B7:CB:E2:B4:FA:F9:64:40:DB:D2:DC:AB:E7:55:4B:E3:41:DB:A7:C5
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019769CED6ED695F52A336630EAC71BA920A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0676
Signing time: Fri 13 Jun 2025 15:00:52 +0000
Manifest this update: Fri 13 Jun 2025 15:00:52 +0000
Manifest next update: Sat 14 Jun 2025 15:00:52 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: 077N+6TwOPhsPDZUq/7b9aca0a382TQGRLLU+S73n4Q=)
2: 1-HePaXJiClEhHOw237Wa73vaFTc.roa (hash: 4PUKfjaEAzPB9R2XBWxJhNfJbqqZiV/WF7YuGVgHgMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:d6:ed:69:5f:52:a3:36:63:0e:ac:71:ba:92:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Jun 13 15:00:52 2025 GMT
Not After : Jun 14 15:00:52 2025 GMT
Subject: CN=b7cbe2b4faf96440dbd2dcabe7554be341dba7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:75:b7:76:a4:47:f5:d4:b0:41:60:b8:c3:
74:8d:97:1a:1c:af:63:87:3b:2b:de:78:66:5a:08:
2f:c8:37:0a:1b:2a:12:57:70:7f:43:3e:34:41:b0:
0a:fb:a6:6c:a3:e1:49:d4:9e:fa:0e:6d:05:75:3f:
fa:05:a1:c6:17:86:67:ec:dc:89:d5:c5:a6:90:bd:
85:1c:e8:4b:dd:df:c5:b0:6a:01:28:80:cc:f3:9e:
22:aa:b4:1e:18:e4:f3:d4:c5:aa:99:7d:1a:46:61:
48:68:2d:d2:1b:69:1d:bd:5e:4b:23:85:c1:92:28:
e0:b4:80:79:7a:a8:96:fa:53:9e:92:df:ed:2f:b2:
0b:32:d9:cf:c0:d6:d0:e5:4d:67:a1:3f:66:26:65:
86:c9:3a:89:52:14:db:a2:47:25:62:8e:b7:b0:2b:
a7:ea:ee:9c:48:e0:a4:3e:9e:35:19:d5:d2:fd:d9:
da:76:ee:59:b9:f8:e3:47:97:e0:60:8c:5a:74:19:
f0:47:bc:8b:82:30:51:96:db:c2:b3:3f:96:0e:15:
4c:a9:92:a0:88:63:c7:5a:a8:60:4a:68:2e:39:d3:
a5:72:d2:9b:22:9f:46:0c:40:45:ca:4e:d8:31:de:
69:1c:cb:7d:30:4a:25:53:e3:d2:b5:e9:64:84:7e:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:E2:B4:FA:F9:64:40:DB:D2:DC:AB:E7:55:4B:E3:41:DB:A7:C5
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d9:d7:6e:3a:63:a3:fa:75:90:ef:40:97:ac:20:ea:5b:12:
b8:42:1b:ef:e6:4f:0f:56:2a:96:6a:69:b0:21:42:19:43:20:
62:21:6a:f9:c1:70:2f:c2:23:3d:6b:87:98:9d:d2:12:bf:46:
ea:4a:b4:25:92:bf:fa:06:1b:d9:ff:55:66:50:3f:81:67:a8:
e0:9c:1a:96:6f:42:da:fb:1b:77:3d:4b:b3:25:87:67:14:69:
a5:ab:3f:4c:1a:eb:24:3d:93:bc:48:4e:9b:b3:95:33:eb:0b:
03:01:f3:20:48:c5:0a:50:4c:33:73:34:ab:fa:a3:ee:31:22:
aa:f3:ff:d2:53:3c:1b:f2:90:16:f3:03:c7:3e:0b:e6:a4:33:
db:05:9b:4d:11:fb:55:b2:3f:08:f0:e3:0b:c6:e0:57:51:05:
12:e6:24:87:e6:fe:b4:05:77:9a:20:28:6e:fa:91:d8:1c:d7:
5d:b1:71:32:f2:a9:d6:32:82:28:c5:ee:e7:be:ac:86:90:0f:
f1:d6:a8:69:1d:ec:36:b3:a5:cd:23:09:8a:4b:5f:51:f6:9b:
16:7f:b9:60:b6:79:6d:5c:59:df:39:29:1f:fc:40:b3:75:20:
d4:00:39:a7:1d:1d:ab:13:5b:43:9e:0f:92:86:78:c7:36:06:
8a:42:1c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpztbtaV9SozZjDqxxupIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTEyMzg4MGY0Mjc0NDZkNWZmMDdjZWY5NjMzZTg2ZGM0
OTE5OGQwHhcNMjUwNjEzMTUwMDUyWhcNMjUwNjE0MTUwMDUyWjAzMTEwLwYDVQQD
EyhiN2NiZTJiNGZhZjk2NDQwZGJkMmRjYWJlNzU1NGJlMzQxZGJhN2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+x1t3akR/XUsEFguMN0jZcaHK9j
hzsr3nhmWggvyDcKGyoSV3B/Qz40QbAK+6Zso+FJ1J76Dm0FdT/6BaHGF4Zn7NyJ
1cWmkL2FHOhL3d/FsGoBKIDM854iqrQeGOTz1MWqmX0aRmFIaC3SG2kdvV5LI4XB
kijgtIB5eqiW+lOekt/tL7ILMtnPwNbQ5U1noT9mJmWGyTqJUhTbokclYo63sCun
6u6cSOCkPp41GdXS/dnadu5ZufjjR5fgYIxadBnwR7yLgjBRltvCsz+WDhVMqZKg
iGPHWqhgSmguOdOlctKbIp9GDEBFyk7YMd5pHMt9MEolU+PStelkhH5o3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfL4rT6+WRA29Lcq+dVS+NB26fFMB8GA1UdIwQY
MBaAFNORI4gPQnRG1f8HzvljPobcSRmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQt
Y2NhMGFkMjY4NWNhLzEvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQtY2NhMGFkMjY4NWNh
LzEvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtnXbjpj
o/p1kO9Al6wg6lsSuEIb7+ZPD1YqlmppsCFCGUMgYiFq+cFwL8IjPWuHmJ3SEr9G
6kq0JZK/+gYb2f9VZlA/gWeo4Jwalm9C2vsbdz1LsyWHZxRppas/TBrrJD2TvEhO
m7OVM+sLAwHzIEjFClBMM3M0q/qj7jEiqvP/0lM8G/KQFvMDxz4L5qQz2wWbTRH7
VbI/CPDjC8bgV1EFEuYkh+b+tAV3miAobvqR2BzXXbFxMvKp1jKCKMXu576shpAP
8daoaR3sNrOlzSMJiktfUfabFn+5YLZ5bVxZ3zkpH/xAs3Ug1AA5px0dqxNbQ54P
koZ4xzYGikIcQg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:09 2025 by rpki-client