Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: 1lXVdPsG2WxhMQ9dkbIbvcOWmEQ4yKYhRdURUDhyJL4=
Subject key identifier: 84:C1:EC:61:A6:4C:D8:E1:28:BA:91:2C:52:4B:96:28:86:62:DD:02
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 0198744FE186C17B3EAF93F74BBAD0E2C504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 1605
Signing time: Mon 04 Aug 2025 09:00:48 +0000
Manifest this update: Mon 04 Aug 2025 09:00:48 +0000
Manifest next update: Tue 05 Aug 2025 09:00:48 +0000
Files and hashes: 1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: PaNdhB5dVdKOEYkFW7ZqOjlA0wYEKfXphvZbIN7Gg9w=)
3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e1:86:c1:7b:3e:af:93:f7:4b:ba:d0:e2:c5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Aug 4 09:00:48 2025 GMT
Not After : Aug 5 09:00:48 2025 GMT
Subject: CN=84c1ec61a64cd8e128ba912c524b96288662dd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:87:c4:f2:67:49:67:a4:90:01:f2:c1:7a:
cf:76:3c:40:8c:6b:43:04:7b:8e:8d:6e:63:ab:27:
79:69:a3:19:1a:48:5e:86:39:b9:a1:62:99:1b:0c:
89:1f:54:f6:bd:42:be:c2:76:aa:ed:ad:63:f2:e8:
a1:5d:6a:4d:f4:fa:f0:01:fc:24:e4:3f:de:db:0f:
ea:bf:ec:f2:31:04:e7:8e:e1:32:48:d7:32:0a:ed:
4d:7d:55:10:ab:c9:b5:f2:2c:24:7d:97:e9:b4:4b:
be:52:81:f8:a8:e1:3c:88:d4:f5:f9:19:55:cf:5e:
9c:19:dc:19:f3:31:a1:f3:b2:c4:80:95:1e:0d:76:
24:a8:c4:4f:e7:eb:8e:90:ef:a5:97:c0:39:a7:ec:
0b:e3:fa:f2:17:f3:c7:8c:b8:f3:4b:d8:53:eb:3c:
96:b2:2c:5a:38:c5:4e:7d:ef:5c:77:29:c6:39:30:
5a:42:a6:d2:a8:0f:ba:97:3c:c2:ca:c7:64:f3:ef:
a9:8a:a6:ee:fd:ae:46:81:29:9d:71:dc:a9:de:53:
88:17:a6:1e:e6:4f:52:10:07:52:d4:33:36:55:58:
3d:7d:eb:bf:bc:e7:42:b3:fe:a9:79:89:49:80:b2:
e3:aa:a9:df:05:7f:aa:45:28:6d:76:b1:f6:35:47:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C1:EC:61:A6:4C:D8:E1:28:BA:91:2C:52:4B:96:28:86:62:DD:02
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bb:50:40:6f:49:70:33:33:30:d2:2d:7c:11:e2:bc:04:d3:
1b:73:24:9d:fe:f7:bb:5d:5b:0f:06:c0:fc:30:bf:d6:36:c4:
f0:35:c7:46:f4:41:2c:61:1c:6d:09:7c:a9:c3:5d:c0:6f:0c:
ec:58:06:34:59:e0:98:7c:ee:90:4f:b1:1a:a2:9e:37:71:b6:
e6:66:43:1f:82:c4:eb:0c:61:2f:ca:13:11:d3:fe:c0:96:cc:
1b:76:bd:aa:d9:14:a2:3b:b7:7d:e6:c0:30:ef:a5:95:46:fd:
a3:be:bc:c8:51:82:88:e4:e8:e5:b3:9b:92:06:bb:ec:ab:ac:
12:ab:82:fd:c9:28:05:43:7c:06:28:94:a6:08:af:12:1d:49:
1e:78:07:25:06:24:a8:ce:1d:f5:c0:4e:fa:3b:56:26:bb:79:
95:a8:26:2d:56:3b:db:c2:30:9c:09:0b:e6:a8:9b:77:d1:af:
e2:1f:9c:8d:62:49:ba:89:ff:e5:71:74:36:df:06:e9:1d:78:
d5:8a:43:b7:21:ef:e6:7d:17:0c:b2:3d:64:30:87:9d:c9:c4:
96:90:b2:77:73:c4:2d:0f:e4:87:57:07:ac:92:aa:46:47:84:
2e:06:05:90:14:f6:70:04:c1:5e:6d:28:ed:d8:43:b1:00:ac:
cc:6c:b6:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T+GGwXs+r5P3S7rQ4sUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjFkYmUyZmFmMmE2ZTdkZmE1NzRjZTU1MTkwOTYzMDE1
ZjFjNTMwHhcNMjUwODA0MDkwMDQ4WhcNMjUwODA1MDkwMDQ4WjAzMTEwLwYDVQQD
Eyg4NGMxZWM2MWE2NGNkOGUxMjhiYTkxMmM1MjRiOTYyODg2NjJkZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v2HxPJnSWekkAHywXrPdjxAjGtD
BHuOjW5jqyd5aaMZGkhehjm5oWKZGwyJH1T2vUK+wnaq7a1j8uihXWpN9PrwAfwk
5D/e2w/qv+zyMQTnjuEySNcyCu1NfVUQq8m18iwkfZfptEu+UoH4qOE8iNT1+RlV
z16cGdwZ8zGh87LEgJUeDXYkqMRP5+uOkO+ll8A5p+wL4/ryF/PHjLjzS9hT6zyW
sixaOMVOfe9cdynGOTBaQqbSqA+6lzzCysdk8++piqbu/a5GgSmdcdyp3lOIF6Ye
5k9SEAdS1DM2VVg9feu/vOdCs/6peYlJgLLjqqnfBX+qRShtdrH2NUfF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITB7GGmTNjhKLqRLFJLliiGYt0CMB8GA1UdIwQY
MBaAFHix2+L68qbn36V0zlUZCWMBXxxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jNjY2YmYtYzhkNi00OGFkLTgwNzYt
YzNmZDlhZTgxMDEyLzEvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jNjY2YmYtYzhkNi00OGFkLTgwNzYtYzNmZDlhZTgxMDEy
LzEvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObtQQG9J
cDMzMNItfBHivATTG3Mknf73u11bDwbA/DC/1jbE8DXHRvRBLGEcbQl8qcNdwG8M
7FgGNFngmHzukE+xGqKeN3G25mZDH4LE6wxhL8oTEdP+wJbMG3a9qtkUoju3febA
MO+llUb9o768yFGCiOTo5bObkga77KusEquC/ckoBUN8BiiUpgivEh1JHngHJQYk
qM4d9cBO+jtWJrt5lagmLVY728IwnAkL5qibd9Gv4h+cjWJJuon/5XF0Nt8G6R14
1YpDtyHv5n0XDLI9ZDCHncnElpCyd3PELQ/kh1cHrJKqRkeELgYFkBT2cATBXm0o
7dhDsQCszGy2tg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:22 2025 by rpki-client