Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: ZsU3IS0m993TSIhGD8FAn9vQ4mll9/J7HyIFK77Di9A=
Subject key identifier: D8:D6:BE:5E:E4:EE:99:14:F6:99:49:64:EC:7E:8B:CE:B5:B3:50:58
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 019896A50E5E6C3E29F23D7950A4DC2BD8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 0E20
Signing time: Mon 11 Aug 2025 01:00:56 +0000
Manifest this update: Mon 11 Aug 2025 01:00:56 +0000
Manifest next update: Tue 12 Aug 2025 01:00:56 +0000
Files and hashes: 1: SYRnChSsh0_v6fjwXGx7ILcwh_8.roa (hash: ub+o2UwDjpsKp4KwHEYNQcFaXm52BqcyybdGRXcC+wM=)
2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: t6tlbef7h3SPyWHnYKHErY4i6IhYuHuoCL8M/5JHfoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:0e:5e:6c:3e:29:f2:3d:79:50:a4:dc:2b:d8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Aug 11 01:00:56 2025 GMT
Not After : Aug 12 01:00:56 2025 GMT
Subject: CN=d8d6be5ee4ee9914f6994964ec7e8bceb5b35058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:9d:5e:0a:fe:1d:ae:11:96:d8:c4:a3:2f:
a5:2f:64:01:73:e6:40:29:b4:56:15:2c:75:dc:dc:
b8:a8:a4:9d:88:52:4b:20:33:c3:67:de:26:11:06:
64:81:a8:60:38:16:74:7b:93:1a:d6:af:06:0b:94:
a9:72:0c:e2:35:c5:ca:5e:e9:08:5e:f4:df:a3:a5:
04:1a:99:b6:b8:a8:3b:81:87:2c:22:00:d4:ef:94:
ff:b5:26:62:3a:cf:d8:02:9b:c1:2f:00:da:dc:78:
6b:4d:86:ed:22:ec:27:7d:66:88:26:e1:4e:c6:75:
db:ad:be:eb:dc:cc:de:cd:37:5d:49:28:09:13:f3:
5f:dc:dd:d0:f5:69:9c:14:92:f2:db:dc:49:ff:35:
3b:bc:80:6d:7c:65:09:85:42:3f:89:f3:82:ee:b3:
51:dc:77:77:96:51:e6:26:34:62:1d:b2:81:08:45:
5f:bf:62:41:6a:e1:01:41:05:6e:dd:66:4f:75:83:
8a:01:50:0b:b2:15:6a:ee:a3:10:7b:0b:d7:44:ac:
fd:67:b3:66:94:19:84:ee:3a:bf:13:eb:4b:28:27:
44:33:3c:b0:11:57:90:a2:11:f0:04:4c:34:fe:84:
32:a6:09:3d:90:74:df:7e:75:5a:a7:ab:6b:8b:5b:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:BE:5E:E4:EE:99:14:F6:99:49:64:EC:7E:8B:CE:B5:B3:50:58
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:69:7c:f9:93:f8:ad:2d:28:95:9c:14:76:bb:a0:d0:36:cb:
cb:66:e1:f4:f6:2e:68:4b:c1:fc:31:a4:db:fd:54:96:a3:e4:
37:83:43:ff:21:4e:ae:77:07:58:e5:a6:df:73:a2:b0:9f:b4:
a9:1e:ae:aa:63:f9:94:b2:de:bd:c3:fc:93:22:c1:92:bd:7d:
46:7f:bb:8a:72:48:32:f4:bc:f8:35:3d:19:5c:57:74:fd:9f:
b2:0f:36:9f:9b:d4:aa:7c:18:e6:c2:07:81:ae:36:bf:a6:3f:
10:86:e8:34:5f:31:ba:0c:da:1d:42:6d:ae:f7:90:5b:de:46:
49:62:a7:a4:58:db:c4:83:bb:a3:31:eb:84:ad:8b:a0:2f:e9:
05:0d:15:f0:52:7f:a4:c8:c4:8d:66:5e:ea:b5:14:5f:8a:4e:
80:80:4a:58:9f:ca:ed:9e:55:fe:a4:e3:c1:ca:67:7b:c9:5b:
2d:58:af:b2:a9:5b:eb:ee:56:7a:bd:43:28:e5:8f:7d:56:ca:
06:6e:d8:5f:a2:62:6d:42:7a:bd:18:e5:32:15:3e:ce:d8:66:
73:2f:37:91:1b:f3:05:f2:56:2e:d5:88:19:d4:6f:03:0d:ed:
61:cb:89:8c:75:14:8e:87:f7:96:99:42:3e:c3:87:a5:56:f0:
69:aa:a1:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpQ5ebD4p8j15UKTcK9i9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYzYyM2VmYmZjMTI0NzEyMTYyMjQwY2JhMDJhNGRhMWQ0
ZGNlYTMwHhcNMjUwODExMDEwMDU2WhcNMjUwODEyMDEwMDU2WjAzMTEwLwYDVQQD
EyhkOGQ2YmU1ZWU0ZWU5OTE0ZjY5OTQ5NjRlYzdlOGJjZWI1YjM1MDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL+dXgr+Ha4RltjEoy+lL2QBc+ZA
KbRWFSx13Ny4qKSdiFJLIDPDZ94mEQZkgahgOBZ0e5Ma1q8GC5SpcgziNcXKXukI
XvTfo6UEGpm2uKg7gYcsIgDU75T/tSZiOs/YApvBLwDa3HhrTYbtIuwnfWaIJuFO
xnXbrb7r3MzezTddSSgJE/Nf3N3Q9WmcFJLy29xJ/zU7vIBtfGUJhUI/ifOC7rNR
3Hd3llHmJjRiHbKBCEVfv2JBauEBQQVu3WZPdYOKAVALshVq7qMQewvXRKz9Z7Nm
lBmE7jq/E+tLKCdEMzywEVeQohHwBEw0/oQypgk9kHTffnVap6tri1sM2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjWvl7k7pkU9plJZOx+i861s1BYMB8GA1UdIwQY
MBaAFHrGI++/wSRxIWIkDLoCpNodTc6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3Zjgt
NDNhYTRjY2UzZjQ4LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3ZjgtNDNhYTRjY2UzZjQ4
LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWl8+ZP4
rS0olZwUdrug0DbLy2bh9PYuaEvB/DGk2/1UlqPkN4ND/yFOrncHWOWm33OisJ+0
qR6uqmP5lLLevcP8kyLBkr19Rn+7inJIMvS8+DU9GVxXdP2fsg82n5vUqnwY5sIH
ga42v6Y/EIboNF8xugzaHUJtrveQW95GSWKnpFjbxIO7ozHrhK2LoC/pBQ0V8FJ/
pMjEjWZe6rUUX4pOgIBKWJ/K7Z5V/qTjwcpne8lbLVivsqlb6+5Wer1DKOWPfVbK
Bm7YX6JibUJ6vRjlMhU+zthmcy83kRvzBfJWLtWIGdRvAw3tYcuJjHUUjof3lplC
PsOHpVbwaaqh4g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:48 2025 by rpki-client