Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: npM1VRU+o0DtaLLJVS5jaVmnqBzPKItwrfgFr8pNfZk=
Subject key identifier: 43:29:4B:E3:01:1D:F9:39:8F:71:52:70:3B:B3:78:03:82:1D:D6:E2
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019891477B12ACE687065622A862CAF43FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 15B9
Signing time: Sun 10 Aug 2025 00:00:37 +0000
Manifest this update: Sun 10 Aug 2025 00:00:37 +0000
Manifest next update: Mon 11 Aug 2025 00:00:37 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: tknQOjr7GlUqpT94/BibNP3Wu93kbI2cbFzyG29f+o8=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:7b:12:ac:e6:87:06:56:22:a8:62:ca:f4:3f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Aug 10 00:00:37 2025 GMT
Not After : Aug 11 00:00:37 2025 GMT
Subject: CN=43294be3011df9398f7152703bb37803821dd6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:4e:b7:90:05:21:63:d4:9f:7a:2e:28:70:
c8:d9:42:aa:f4:23:74:aa:39:e8:5f:99:d5:b5:bc:
b0:5a:94:98:d1:b6:73:38:d6:31:69:65:e2:6e:1b:
1d:6f:ed:70:74:da:b8:18:dd:5c:39:02:b1:07:f3:
d6:ac:78:ad:92:b9:5e:f5:12:1c:3f:23:60:e3:a3:
9d:5b:ca:eb:4f:eb:bf:78:80:27:60:5a:44:38:1e:
c7:fe:ba:c3:10:76:0c:32:a6:6a:ea:c7:8f:9b:f4:
3c:ff:16:07:e1:bc:e7:3d:7e:5b:9b:de:4c:39:4a:
2e:52:e8:65:83:01:a8:5d:8a:51:cb:64:ba:5f:5f:
d0:bc:bc:2b:25:4a:b1:7b:99:00:af:df:55:9d:c9:
f0:d9:4b:d5:d0:89:7a:ca:ea:a8:a2:58:9f:10:f1:
e1:62:f7:b9:29:6e:3b:ec:46:13:f9:5d:a6:02:8c:
cb:a6:bb:3d:1c:80:ae:ab:30:54:a5:eb:c8:e6:07:
0f:47:c7:1e:f9:33:e1:ef:cf:15:4b:45:66:8e:b3:
01:56:7a:8c:e0:28:ae:ec:c1:e7:06:1a:bc:2a:93:
c5:e7:ed:4e:66:ae:58:2d:ba:79:b5:1a:1d:53:e0:
4d:32:2c:c2:35:18:19:67:0b:54:4e:1a:e6:01:10:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:29:4B:E3:01:1D:F9:39:8F:71:52:70:3B:B3:78:03:82:1D:D6:E2
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4e:56:da:1a:f2:ef:c6:84:78:55:2b:5e:fa:f9:f1:4c:87:
ff:d8:bf:0c:61:f6:fa:2c:b8:c1:b5:e9:f1:50:9e:18:60:4a:
38:26:a4:2b:eb:53:4c:b8:b1:51:d1:28:54:f9:47:cc:4f:dc:
f8:50:36:4d:fe:ed:b0:2d:06:d5:c1:e4:ce:a0:3b:58:08:d7:
68:72:ab:8c:3d:72:0f:65:55:c5:a1:46:d1:fe:3e:49:99:64:
64:67:89:b1:ba:b1:a8:b9:59:0b:58:92:f1:68:22:fa:2d:72:
58:c8:dc:5c:75:1b:21:91:e6:cc:d9:95:4f:b7:93:7e:a3:f0:
c9:25:1e:78:5b:6f:56:04:50:7e:65:7d:7f:8b:88:80:58:36:
c5:0f:b3:80:91:6e:a5:45:df:1b:18:2d:3d:40:f3:44:3f:83:
02:29:6c:71:66:57:34:8b:70:d8:fc:ba:28:6e:a7:1f:74:cc:
aa:82:ec:58:ef:62:f8:2d:ef:28:2a:43:ef:8e:f7:b6:69:73:
85:46:9b:b1:35:bb:55:4d:a2:62:dc:f1:12:31:61:f9:5c:5f:
ae:7e:19:55:61:33:fd:4e:c1:ca:16:e0:b3:7c:7c:e1:70:d2:
ac:17:39:34:fa:b9:92:bf:59:5b:25:5a:6b:23:a6:2e:05:c7:
37:41:80:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRR3sSrOaHBlYiqGLK9D/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjUwODEwMDAwMDM3WhcNMjUwODExMDAwMDM3WjAzMTEwLwYDVQQD
Eyg0MzI5NGJlMzAxMWRmOTM5OGY3MTUyNzAzYmIzNzgwMzgyMWRkNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk9Ot5AFIWPUn3ouKHDI2UKq9CN0
qjnoX5nVtbywWpSY0bZzONYxaWXibhsdb+1wdNq4GN1cOQKxB/PWrHitkrle9RIc
PyNg46OdW8rrT+u/eIAnYFpEOB7H/rrDEHYMMqZq6sePm/Q8/xYH4bznPX5bm95M
OUouUuhlgwGoXYpRy2S6X1/QvLwrJUqxe5kAr99Vncnw2UvV0Il6yuqoolifEPHh
Yve5KW477EYT+V2mAozLprs9HICuqzBUpevI5gcPR8ce+TPh788VS0VmjrMBVnqM
4Ciu7MHnBhq8KpPF5+1OZq5YLbp5tRodU+BNMizCNRgZZwtUThrmARAChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMpS+MBHfk5j3FScDuzeAOCHdbiMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXU5W2hry
78aEeFUrXvr58UyH/9i/DGH2+iy4wbXp8VCeGGBKOCakK+tTTLixUdEoVPlHzE/c
+FA2Tf7tsC0G1cHkzqA7WAjXaHKrjD1yD2VVxaFG0f4+SZlkZGeJsbqxqLlZC1iS
8Wgi+i1yWMjcXHUbIZHmzNmVT7eTfqPwySUeeFtvVgRQfmV9f4uIgFg2xQ+zgJFu
pUXfGxgtPUDzRD+DAilscWZXNItw2Py6KG6nH3TMqoLsWO9i+C3vKCpD7473tmlz
hUabsTW7VU2iYtzxEjFh+Vxfrn4ZVWEz/U7Byhbgs3x84XDSrBc5NPq5kr9ZWyVa
ayOmLgXHN0GASg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:55:31 2025 by rpki-client