Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: gqtsJlAPymwRodfM59VOLVVnVWZyc4cl3lYv8hBil/M=
Subject key identifier: 92:DC:8A:30:59:3E:E6:F0:E6:F4:EA:CF:B9:3B:20:B5:71:25:33:1B
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 01977AC21F2837CFD5FD4A5502BDD4E8B3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 22:00:31 +0000
Manifest this update: Mon 16 Jun 2025 22:00:31 +0000
Manifest next update: Tue 17 Jun 2025 22:00:31 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: UQeM62uabpOM/9d5k2ALZSiHjvDNMZwda9JPYQFeYo4=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:1f:28:37:cf:d5:fd:4a:55:02:bd:d4:e8:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Jun 16 22:00:31 2025 GMT
Not After : Jun 17 22:00:31 2025 GMT
Subject: CN=92dc8a30593ee6f0e6f4eacfb93b20b57125331b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:b9:79:c9:e8:46:c4:d9:c5:30:85:92:50:
7d:03:15:ee:d5:20:21:3b:8c:9f:ed:7e:90:e6:bb:
f7:e9:c5:c4:a9:8c:b7:27:36:ee:1c:58:89:5f:40:
54:b3:67:20:b1:0d:06:c4:cd:8c:60:08:0b:d2:ca:
f9:aa:9e:b4:ee:9e:11:45:ae:ce:84:4e:ef:dc:e9:
cc:1c:c2:03:76:99:03:40:16:bf:53:66:5a:1d:94:
3b:fe:6f:fb:26:4d:8b:7b:75:ac:4c:05:5a:25:11:
ff:ea:e3:99:f6:f9:12:1d:e8:53:a0:80:eb:c6:2b:
0b:c1:40:8f:c1:8b:c8:04:b8:65:1d:3a:89:f3:58:
99:72:12:99:62:80:e7:d5:4b:a5:8f:a2:35:47:06:
52:fe:a1:e5:00:be:bf:1f:e8:e3:83:26:fb:a5:99:
d5:c1:45:4d:fc:57:fd:7d:2d:8e:ea:7d:5f:81:f5:
a3:35:4b:59:fa:18:a6:d7:83:b5:c6:93:87:51:7a:
02:ad:0d:d4:a1:95:e1:cf:2d:27:30:ee:8b:ae:3c:
25:49:19:d6:48:08:85:ae:2f:ee:7d:fd:16:30:43:
a9:69:10:5a:3b:d9:06:bf:11:36:92:ce:7b:d8:23:
7e:d6:57:16:1d:bc:62:ed:6e:db:85:a4:c6:87:15:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:8A:30:59:3E:E6:F0:E6:F4:EA:CF:B9:3B:20:B5:71:25:33:1B
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e2:1a:41:da:4f:d8:bf:54:68:9b:b8:91:2c:0a:ac:7e:40:
fc:69:1e:59:14:3b:55:cb:bb:18:df:b0:74:0d:ef:e6:ad:cb:
97:c8:ce:9d:02:e8:72:53:88:5b:46:61:6a:08:57:07:68:61:
29:bc:e5:a5:67:9a:16:b4:14:fe:fd:dd:52:69:53:54:f1:27:
97:f1:fb:74:f5:61:57:72:e5:e0:ab:3d:2b:3c:c8:83:34:60:
f0:0c:9b:e3:ae:0e:bb:fc:d8:6f:94:8c:b2:2a:0c:e2:85:9f:
68:1c:2e:a5:db:26:f9:bf:42:23:51:7b:ba:08:04:c7:49:d3:
b4:d1:f3:bf:6f:af:49:6d:6f:7e:bc:0f:80:22:d6:82:8d:81:
15:01:74:69:c6:ac:a4:59:00:07:8e:e6:96:ab:bc:ef:94:05:
61:9f:60:2c:f1:4d:bc:89:00:ff:0c:9a:a5:e0:f4:1a:6d:04:
d8:87:6d:8d:57:19:a7:80:da:1d:cb:93:f8:9b:e9:d5:96:e7:
57:2c:e4:7e:08:b4:4e:2f:b4:a4:e8:ab:0d:cb:fa:8e:ac:99:
9b:6e:89:33:41:c0:e8:55:1c:0d:c5:de:f7:64:fc:77:b2:b7:
28:80:51:fb:52:bc:c6:eb:b1:97:46:47:8f:35:fc:a4:7c:10:
fd:ff:cd:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6wh8oN8/V/UpVAr3U6LP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwN2Y3ZDBiNjRjOThjOTllOGQwODY4MzUwNTI2NGQ2YjA4
YmZkODYwHhcNMjUwNjE2MjIwMDMxWhcNMjUwNjE3MjIwMDMxWjAzMTEwLwYDVQQD
Eyg5MmRjOGEzMDU5M2VlNmYwZTZmNGVhY2ZiOTNiMjBiNTcxMjUzMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTC5ecnoRsTZxTCFklB9AxXu1SAh
O4yf7X6Q5rv36cXEqYy3JzbuHFiJX0BUs2cgsQ0GxM2MYAgL0sr5qp607p4RRa7O
hE7v3OnMHMIDdpkDQBa/U2ZaHZQ7/m/7Jk2Le3WsTAVaJRH/6uOZ9vkSHehToIDr
xisLwUCPwYvIBLhlHTqJ81iZchKZYoDn1Uulj6I1RwZS/qHlAL6/H+jjgyb7pZnV
wUVN/Ff9fS2O6n1fgfWjNUtZ+him14O1xpOHUXoCrQ3UoZXhzy0nMO6LrjwlSRnW
SAiFri/uff0WMEOpaRBaO9kGvxE2ks572CN+1lcWHbxi7W7bhaTGhxU++wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLcijBZPubw5vTqz7k7ILVxJTMbMB8GA1UdIwQY
MBaAFBB/fQtkyYyZ6NCGg1BSZNawi/2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUg5OUMyVEpqSm5vMElhRFVGSmsxckNMX1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zODYxODUtNWFjYy00ZmUxLTk3ODQt
NmI0YWZhNDA2NzhkLzEvRUg5OUMyVEpqSm5vMElhRFVGSmsxckNMX1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zODYxODUtNWFjYy00ZmUxLTk3ODQtNmI0YWZhNDA2Nzhk
LzEvRUg5OUMyVEpqSm5vMElhRFVGSmsxckNMX1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseIaQdpP
2L9UaJu4kSwKrH5A/GkeWRQ7Vcu7GN+wdA3v5q3Ll8jOnQLoclOIW0ZhaghXB2hh
KbzlpWeaFrQU/v3dUmlTVPEnl/H7dPVhV3Ll4Ks9KzzIgzRg8Ayb464Ou/zYb5SM
sioM4oWfaBwupdsm+b9CI1F7uggEx0nTtNHzv2+vSW1vfrwPgCLWgo2BFQF0acas
pFkAB47mlqu875QFYZ9gLPFNvIkA/wyapeD0Gm0E2IdtjVcZp4DaHcuT+Jvp1Zbn
Vyzkfgi0Ti+0pOirDcv6jqyZm26JM0HA6FUcDcXe92T8d7K3KIBR+1K8xuuxl0ZH
jzX8pHwQ/f/NXA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:47:44 2025 by rpki-client