Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: Gr4KOdU0w+wnZsLHxbhOp43J1H4WUJ1l6BYEwa5fY3k=
Subject key identifier: A8:B2:A8:79:21:99:54:2A:C7:E4:A6:DD:85:82:1C:70:96:E7:36:74
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01976D74897A0194646CEFBDA4FC29E9258C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 11B5
Signing time: Sat 14 Jun 2025 08:00:43 +0000
Manifest this update: Sat 14 Jun 2025 08:00:43 +0000
Manifest next update: Sun 15 Jun 2025 08:00:43 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: 2n9dAXMMMcZKixe8nDoL78tIHcAJQfDcf3D/0LR9kD0=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:89:7a:01:94:64:6c:ef:bd:a4:fc:29:e9:25:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jun 14 08:00:43 2025 GMT
Not After : Jun 15 08:00:43 2025 GMT
Subject: CN=a8b2a8792199542ac7e4a6dd85821c7096e73674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:53:71:d4:26:81:7c:53:df:8c:c8:aa:0b:
28:76:4f:e1:7f:37:56:e3:1f:6d:51:37:39:50:8a:
8a:29:69:8c:4a:38:59:7d:0b:3e:d5:8f:04:fb:d5:
d6:44:bc:2f:41:aa:24:fb:0a:d5:96:0a:e0:cc:21:
81:f4:30:2f:67:06:e0:70:71:a3:6a:4c:ee:6c:35:
ee:73:54:ff:0c:52:14:6a:86:95:79:e1:eb:43:91:
6d:cd:2d:88:41:d0:e1:0d:1a:61:3a:ec:25:9f:fc:
5b:7b:4c:6c:01:36:cc:30:29:77:a3:ae:2d:36:5b:
32:34:a4:94:cf:69:f8:3e:fd:1b:86:c6:1b:35:c0:
50:fb:d0:ac:94:d4:84:93:a8:ff:51:dd:0b:8b:78:
13:af:4f:68:df:cc:00:65:dc:41:24:e9:70:fd:2d:
94:00:ac:87:ef:88:a0:f5:d5:2e:43:af:4c:d4:a2:
57:1e:b0:40:66:ae:9a:c4:99:31:0d:ef:9c:83:a1:
e3:c2:b3:30:26:11:4e:1a:a2:69:00:3f:01:d7:d4:
5f:7f:7e:61:53:63:95:43:2a:c0:3c:17:02:df:65:
00:c5:a7:71:06:38:32:e6:7b:b6:83:93:ba:0a:b1:
1d:b2:4e:6b:a1:86:c5:b9:31:dd:e9:df:63:06:2e:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:A8:79:21:99:54:2A:C7:E4:A6:DD:85:82:1C:70:96:E7:36:74
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:07:76:80:3c:19:f2:8c:dd:fe:05:a5:b7:8d:54:29:e9:d7:
e6:f0:31:b4:a8:43:f8:d1:60:89:c1:ef:b5:61:48:0d:80:84:
bd:6b:b4:4d:ac:24:48:4f:b6:09:75:9d:c8:ec:43:74:90:bc:
bd:4a:a2:26:40:c2:af:97:b4:20:e7:6c:92:70:ba:6a:50:5e:
05:61:ec:f7:df:62:55:5c:c2:28:72:06:31:4a:85:39:d8:08:
ed:41:fd:b8:92:c5:74:82:3f:d6:6d:b1:16:1d:9b:d1:e2:8f:
7d:28:15:5a:91:0a:26:f1:e1:1b:2f:d3:cd:f2:09:1b:96:e2:
26:a5:d9:b0:5b:7d:cc:ec:81:08:25:32:e7:c1:f4:b2:15:8a:
ae:65:21:c6:03:e6:70:23:d0:10:2a:20:d8:1d:5d:34:9e:81:
49:fb:c0:6e:a1:17:5d:7e:48:3c:d0:5b:88:dd:11:8c:7d:9e:
31:40:73:f6:26:1a:0a:47:53:66:ef:d7:26:51:0a:7c:eb:ef:
75:0d:38:a3:1b:d8:5f:cc:1b:16:b6:08:54:6b:17:fb:63:fa:
80:63:05:16:6b:05:eb:19:a1:d0:4e:31:0f:e1:ed:3b:2d:34:
ce:ba:a8:af:04:fa:85:83:d8:ba:c3:c4:a3:af:1d:d6:47:ac:
64:7c:45:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdIl6AZRkbO+9pPwp6SWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz
YjRjYzMwHhcNMjUwNjE0MDgwMDQzWhcNMjUwNjE1MDgwMDQzWjAzMTEwLwYDVQQD
EyhhOGIyYTg3OTIxOTk1NDJhYzdlNGE2ZGQ4NTgyMWM3MDk2ZTczNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq55TcdQmgXxT34zIqgsodk/hfzdW
4x9tUTc5UIqKKWmMSjhZfQs+1Y8E+9XWRLwvQaok+wrVlgrgzCGB9DAvZwbgcHGj
akzubDXuc1T/DFIUaoaVeeHrQ5FtzS2IQdDhDRphOuwln/xbe0xsATbMMCl3o64t
NlsyNKSUz2n4Pv0bhsYbNcBQ+9CslNSEk6j/Ud0Li3gTr09o38wAZdxBJOlw/S2U
AKyH74ig9dUuQ69M1KJXHrBAZq6axJkxDe+cg6HjwrMwJhFOGqJpAD8B19Rff35h
U2OVQyrAPBcC32UAxadxBjgy5nu2g5O6CrEdsk5roYbFuTHd6d9jBi6QXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiyqHkhmVQqx+Sm3YWCHHCW5zZ0MB8GA1UdIwQY
MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt
M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx
LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgd2gDwZ
8ozd/gWlt41UKenX5vAxtKhD+NFgicHvtWFIDYCEvWu0TawkSE+2CXWdyOxDdJC8
vUqiJkDCr5e0IOdsknC6alBeBWHs999iVVzCKHIGMUqFOdgI7UH9uJLFdII/1m2x
Fh2b0eKPfSgVWpEKJvHhGy/TzfIJG5biJqXZsFt9zOyBCCUy58H0shWKrmUhxgPm
cCPQECog2B1dNJ6BSfvAbqEXXX5IPNBbiN0RjH2eMUBz9iYaCkdTZu/XJlEKfOvv
dQ04oxvYX8wbFrYIVGsX+2P6gGMFFmsF6xmh0E4xD+HtOy00zrqorwT6hYPYusPE
o68d1kesZHxFag==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:58 2025 by rpki-client