Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File: ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier: /62Oc2FXHj1oOokvtB+aBKwSqzXYSCrK4kRcoauMR/I=
Subject key identifier: 12:68:B0:1D:84:73:26:30:FE:AA:74:0D:1E:EF:DB:0B:81:FB:F6:12
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer: /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial: 019872987F233B7C021C0ADD0C707C88DA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number: 0CB9
Signing time: Mon 04 Aug 2025 01:00:53 +0000
Manifest this update: Mon 04 Aug 2025 01:00:53 +0000
Manifest next update: Tue 05 Aug 2025 01:00:53 +0000
Files and hashes: 1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: FLCVLU7FTTtWJkjWoKyAlBxNaFSRJsbRwo6uB9pYdgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:7f:23:3b:7c:02:1c:0a:dd:0c:70:7c:88:da:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
Validity
Not Before: Aug 4 01:00:53 2025 GMT
Not After : Aug 5 01:00:53 2025 GMT
Subject: CN=1268b01d84732630feaa740d1eefdb0b81fbf612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:25:20:9f:39:d5:a1:e5:71:d5:93:89:8b:
a5:6a:ae:62:08:7c:53:e3:2e:95:32:7c:39:a7:37:
d5:c6:31:9d:82:5d:bd:18:2f:b8:3f:bd:38:4f:3b:
36:2a:0f:23:8a:13:fb:87:89:a4:20:5e:d0:0e:38:
0c:3f:52:c7:d7:21:80:f1:8f:81:0c:8a:f1:b8:60:
7a:ec:78:cb:15:bd:6d:77:6c:a1:9f:6c:4a:61:86:
54:cd:58:0b:b4:05:82:2f:89:aa:7b:1e:66:85:c5:
f2:be:25:69:67:18:3f:0c:c9:04:5d:00:a0:8f:9c:
77:0f:e8:7d:7d:a3:d4:99:a7:35:3f:f8:c7:36:ac:
da:fb:e8:4e:ba:5a:df:04:07:f7:09:a9:b3:6f:c2:
73:2b:19:c1:65:2b:74:35:c2:dc:6a:04:c2:d1:2a:
75:1b:85:8c:34:62:f4:cf:07:39:59:bc:d3:d3:95:
c1:ad:ca:b2:5f:3f:48:80:2d:2b:98:30:db:b2:43:
ee:86:37:00:4a:1b:99:dc:a5:2a:d6:64:14:c9:a6:
7e:12:71:39:da:0d:6b:c5:9f:03:f8:ad:59:e3:f4:
be:f5:c2:22:e5:62:2e:a9:2d:d3:54:ac:ed:f2:10:
23:81:e6:1a:a7:8b:cc:6b:72:38:dc:64:1d:94:bd:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:B0:1D:84:73:26:30:FE:AA:74:0D:1E:EF:DB:0B:81:FB:F6:12
X509v3 Authority Key Identifier:
keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b5:c8:4a:5f:c9:ce:d4:8b:94:e0:a1:9b:63:ce:8f:c7:bd:
d2:c8:6b:4b:e8:37:fc:96:95:db:4d:4c:01:c0:e6:e2:7f:3e:
a6:76:1f:c0:e4:f2:d3:88:ad:3a:66:d3:ca:8e:6b:d5:0d:48:
f9:25:ec:48:42:22:9e:4b:ab:ce:f2:d5:2f:5e:68:c5:ad:0a:
46:ba:2d:29:3c:32:4b:a6:e4:e1:5e:91:d7:4d:54:df:b3:7f:
df:19:d7:ec:3d:f0:38:64:60:44:e0:82:89:0f:39:5e:7b:b5:
25:76:07:95:0f:9e:6d:71:37:d4:49:41:f0:c0:5b:1a:61:3b:
c6:8f:b5:fd:26:fe:39:ad:c8:dc:e3:35:99:b0:cd:e0:d2:0b:
51:13:1e:cb:fd:14:67:93:9f:dc:fd:a1:25:30:eb:22:dc:88:
12:8d:ad:4a:d9:e2:bf:90:24:61:47:b7:9e:02:ea:60:b8:a7:
5c:91:29:c4:ac:62:bf:50:a2:c1:ad:dd:af:f9:0e:2c:48:fb:
cc:98:fe:fd:69:52:d1:7c:cc:82:fd:93:b4:07:d9:28:b4:af:
5e:c1:5d:73:34:2b:b5:23:0c:af:81:36:ca:25:3c:7d:cd:57:
53:a0:14:87:2d:ec:0a:eb:f7:c7:78:57:db:3d:b2:36:f8:61:
fb:09:d6:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymH8jO3wCHArdDHB8iNomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzg5ZmI0OGZiMDVkNDgxZjFmMjM5MTk0YzUzN2QxNWIz
NTcwMDkwHhcNMjUwODA0MDEwMDUzWhcNMjUwODA1MDEwMDUzWjAzMTEwLwYDVQQD
EygxMjY4YjAxZDg0NzMyNjMwZmVhYTc0MGQxZWVmZGIwYjgxZmJmNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnklIJ851aHlcdWTiYulaq5iCHxT
4y6VMnw5pzfVxjGdgl29GC+4P704Tzs2Kg8jihP7h4mkIF7QDjgMP1LH1yGA8Y+B
DIrxuGB67HjLFb1td2yhn2xKYYZUzVgLtAWCL4mqex5mhcXyviVpZxg/DMkEXQCg
j5x3D+h9faPUmac1P/jHNqza++hOulrfBAf3Camzb8JzKxnBZSt0NcLcagTC0Sp1
G4WMNGL0zwc5WbzT05XBrcqyXz9IgC0rmDDbskPuhjcAShuZ3KUq1mQUyaZ+EnE5
2g1rxZ8D+K1Z4/S+9cIi5WIuqS3TVKzt8hAjgeYap4vMa3I43GQdlL3+iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJosB2EcyYw/qp0DR7v2wuB+/YSMB8GA1UdIwQY
MBaAFHo4n7SPsF1IHx8jkZTFN9FbNXAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYjEwNjQtNmQyNi00NTU1LTlmYTUt
YTFhMDhlYmY0ZWVhLzEvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lYjEwNjQtNmQyNi00NTU1LTlmYTUtYTFhMDhlYmY0ZWVh
LzEvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7XISl/J
ztSLlOChm2POj8e90shrS+g3/JaV201MAcDm4n8+pnYfwOTy04itOmbTyo5r1Q1I
+SXsSEIinkurzvLVL15oxa0KRrotKTwyS6bk4V6R101U37N/3xnX7D3wOGRgROCC
iQ85Xnu1JXYHlQ+ebXE31ElB8MBbGmE7xo+1/Sb+Oa3I3OM1mbDN4NILURMey/0U
Z5Of3P2hJTDrItyIEo2tStniv5AkYUe3ngLqYLinXJEpxKxiv1Ciwa3dr/kOLEj7
zJj+/WlS0XzMgv2TtAfZKLSvXsFdczQrtSMMr4E2yiU8fc1XU6AUhy3sCuv3x3hX
2z2yNvhh+wnWnQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:21 2025 by rpki-client