Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier: tCmyqAEYv8AYZ7j2nmxGCuBVsKWQWgW3/dVED8xNxKM=
Subject key identifier: 29:DF:AD:AD:E7:C3:5E:CC:F4:22:8F:E2:DF:B3:65:4A:90:38:2E:F4
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial: 01988DA2173C249F5C5BFA53D457EEF33F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number: 024D
Signing time: Sat 09 Aug 2025 07:01:06 +0000
Manifest this update: Sat 09 Aug 2025 07:01:06 +0000
Manifest next update: Sun 10 Aug 2025 07:01:06 +0000
Files and hashes: 1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=)
2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: JrWggh3biPr5NpUoIGl64tsciUWjgDFLlckWhw0+Tg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:17:3c:24:9f:5c:5b:fa:53:d4:57:ee:f3:3f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
Validity
Not Before: Aug 9 07:01:06 2025 GMT
Not After : Aug 10 07:01:06 2025 GMT
Subject: CN=29dfadade7c35eccf4228fe2dfb3654a90382ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:6e:ee:0e:12:f9:d2:2e:a4:60:f9:fd:fc:
13:75:5a:29:4a:1b:9c:a5:96:b5:7f:ad:64:78:6c:
36:f7:7f:16:46:b0:a5:3b:a3:e2:f8:62:2c:8d:87:
20:af:83:92:f3:2b:ef:2a:2a:a4:28:9e:ec:b3:e4:
42:76:d1:85:1f:9c:f2:15:f9:8f:79:98:42:a3:98:
cf:df:0e:97:9d:7f:29:12:7c:99:26:c5:11:a1:53:
0c:73:a6:b2:ce:0d:4c:4b:24:f2:d3:28:91:6e:69:
0b:12:98:a6:5f:59:ee:3e:e5:6f:6d:90:b8:81:1a:
01:9b:8d:ba:b3:c7:60:52:8b:82:0e:83:a6:28:93:
6d:90:e6:f8:2c:51:93:96:4b:43:65:f1:b2:5a:3e:
34:17:15:c6:39:50:82:24:00:6e:d4:f1:33:06:15:
67:d4:77:aa:5c:c4:37:96:ce:ff:e2:ec:fd:42:36:
bf:2a:d5:7d:66:32:28:b6:d8:c1:26:db:95:fe:d9:
28:60:54:30:16:2f:40:d8:ad:49:83:09:00:06:64:
74:e4:23:6a:a7:3b:a5:c5:90:2b:fa:44:19:67:f1:
23:29:55:db:a2:fd:e5:72:61:57:93:9d:95:a2:5d:
3d:30:d4:3c:1d:b9:01:1c:c3:73:a0:41:7f:64:03:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:AD:AD:E7:C3:5E:CC:F4:22:8F:E2:DF:B3:65:4A:90:38:2E:F4
X509v3 Authority Key Identifier:
keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:94:da:ce:30:43:cf:a3:5a:83:ba:44:f9:e9:de:fc:71:6f:
be:d7:4f:95:eb:75:88:df:1e:9b:6b:76:60:fb:9c:dc:0d:08:
34:dd:bd:ec:ed:d4:bf:c2:14:14:ac:f7:dc:17:61:c6:29:0a:
64:9f:88:fd:77:2f:12:bc:7d:04:39:16:82:9a:f0:2e:1a:66:
6e:c1:7e:9e:8e:92:3a:74:cc:c6:74:fd:32:da:90:13:b3:88:
c9:fa:1b:9e:e8:da:ec:a9:16:a4:7f:f7:95:a4:a9:b8:8a:e9:
fa:2f:69:af:c1:25:41:96:d7:28:0b:10:ec:89:82:c0:27:ef:
db:e7:d3:26:ff:dc:be:73:fc:70:91:30:40:7f:46:a9:aa:d4:
bb:f5:d7:26:96:ac:11:0e:1d:3b:eb:a6:fc:b1:f1:13:c2:9d:
ad:88:2d:9f:81:6b:22:05:86:de:3d:53:e7:a5:59:53:08:32:
70:1c:b8:47:75:9f:43:c6:b0:31:2b:27:51:0d:19:66:94:6e:
ae:b3:87:f7:8e:a0:b3:18:fe:34:53:88:fa:e7:c8:1e:26:44:
25:a9:3e:d8:9f:dd:a6:28:08:01:95:4e:ba:79:19:c1:98:ff:
e4:f6:f1:a8:ce:a9:49:b4:9a:ee:7e:62:23:e5:8c:a8:99:fe:
a2:12:6a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNohc8JJ9cW/pT1Ffu8z8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzAxZWJlMDY3OTlkZTA5Njk4OTkyMDUxNTBlNTMyZGVm
ZmU3YjUwHhcNMjUwODA5MDcwMTA2WhcNMjUwODEwMDcwMTA2WjAzMTEwLwYDVQQD
EygyOWRmYWRhZGU3YzM1ZWNjZjQyMjhmZTJkZmIzNjU0YTkwMzgyZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q1u7g4S+dIupGD5/fwTdVopShuc
pZa1f61keGw2938WRrClO6Pi+GIsjYcgr4OS8yvvKiqkKJ7ss+RCdtGFH5zyFfmP
eZhCo5jP3w6XnX8pEnyZJsURoVMMc6ayzg1MSyTy0yiRbmkLEpimX1nuPuVvbZC4
gRoBm426s8dgUouCDoOmKJNtkOb4LFGTlktDZfGyWj40FxXGOVCCJABu1PEzBhVn
1HeqXMQ3ls7/4uz9Qja/KtV9ZjIottjBJtuV/tkoYFQwFi9A2K1JgwkABmR05CNq
pzulxZAr+kQZZ/EjKVXbov3lcmFXk52Vol09MNQ8HbkBHMNzoEF/ZAPxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnfra3nw17M9CKP4t+zZUqQOC70MB8GA1UdIwQY
MBaAFBNwHr4GeZ3glpiZIFFQ5TLe/+e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUt
MWVmNzY0NDJmNDlhLzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUtMWVmNzY0NDJmNDlh
LzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5TazjBD
z6Nag7pE+ene/HFvvtdPlet1iN8em2t2YPuc3A0INN297O3Uv8IUFKz33BdhxikK
ZJ+I/XcvErx9BDkWgprwLhpmbsF+no6SOnTMxnT9MtqQE7OIyfobnuja7KkWpH/3
laSpuIrp+i9pr8ElQZbXKAsQ7ImCwCfv2+fTJv/cvnP8cJEwQH9GqarUu/XXJpas
EQ4dO+um/LHxE8KdrYgtn4FrIgWG3j1T56VZUwgycBy4R3WfQ8awMSsnUQ0ZZpRu
rrOH946gsxj+NFOI+ufIHiZEJak+2J/dpigIAZVOunkZwZj/5PbxqM6pSbSa7n5i
I+WMqJn+ohJqsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:37 2025 by rpki-client