Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: S4Gb6gjiIATk8dE4lRw4KjN6wajvPjriL6er+ZAtDpQ=
Subject key identifier: 8D:D5:00:AB:10:50:62:C7:29:30:F9:FF:53:AF:64:A5:31:AF:70:C2
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019769299102A31CEFCACD026D413C73E0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 123D
Signing time: Fri 13 Jun 2025 12:00:21 +0000
Manifest this update: Fri 13 Jun 2025 12:00:21 +0000
Manifest next update: Sat 14 Jun 2025 12:00:21 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: v7tlu5GMXkygOzNOTmzfuX6q70kQubLnq86K5Gk+6Sg=)
2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:91:02:a3:1c:ef:ca:cd:02:6d:41:3c:73:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Jun 13 12:00:21 2025 GMT
Not After : Jun 14 12:00:21 2025 GMT
Subject: CN=8dd500ab105062c72930f9ff53af64a531af70c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:3b:de:d1:d5:5a:7c:77:e7:6c:2c:59:91:
4a:db:44:5a:e2:42:a7:69:c1:8d:03:43:84:73:65:
12:40:6c:4a:c1:91:f4:a8:5e:dc:ff:7c:71:0b:de:
cc:ed:c1:61:47:05:d9:4d:ec:61:8c:cc:59:57:24:
a3:3a:f7:26:97:f1:dc:69:00:be:e9:fc:30:63:bb:
e5:c9:ce:9d:d7:6c:40:7a:21:70:00:1e:6e:cf:09:
f0:eb:b3:5e:79:db:13:5b:34:a3:67:97:da:e5:00:
b7:8b:b0:d9:fe:73:d3:47:c3:dc:e2:6b:6b:c8:22:
28:d8:cd:6c:f8:a4:26:4c:a1:86:a4:61:d0:e3:10:
5d:bd:8b:65:2f:59:7e:2c:9c:b0:e3:fa:8e:3e:79:
bd:59:f1:72:f0:81:d6:14:07:70:2a:27:40:0a:66:
6f:75:0d:85:43:a2:a8:5e:ae:5c:39:ae:b1:e0:0b:
37:cd:bf:72:4e:91:aa:cf:ec:ce:a2:c1:47:d9:c4:
3a:74:96:ad:f0:27:19:70:90:e6:d5:f4:45:84:43:
90:ac:49:58:6d:88:8f:33:d3:cd:e5:7e:ba:89:d5:
94:ff:79:6f:69:e3:cd:b5:e9:1e:a8:2c:05:97:57:
ca:ee:79:1e:47:5e:ab:15:1c:7f:8d:c8:1e:f6:f0:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:00:AB:10:50:62:C7:29:30:F9:FF:53:AF:64:A5:31:AF:70:C2
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:96:a3:6c:cc:e6:27:9c:b0:be:10:98:da:49:77:b1:a6:9f:
9c:2d:a0:3c:6d:b4:94:8b:7b:12:c9:2d:fa:80:90:39:ad:06:
e3:f2:ae:3d:41:52:6e:e5:5d:3d:ae:2c:f5:59:d3:53:de:69:
2f:31:d4:9d:ce:93:14:78:5e:37:41:07:10:fe:4c:e0:40:3e:
94:40:12:ee:d4:bd:8e:47:6f:3a:1f:04:82:fe:b5:c6:6b:da:
99:d1:28:7b:75:1e:ec:fa:1c:06:d1:dd:a9:95:e6:5e:b0:e5:
6c:41:f5:af:f7:17:54:a5:f2:69:58:21:dc:b3:9d:5a:e8:08:
4c:2b:69:f1:77:2b:06:42:18:13:4f:41:01:55:70:d8:f4:15:
0b:15:6f:dc:7e:b3:65:7b:d2:51:50:6a:e2:13:4d:dd:1d:91:
86:78:f4:1b:1b:67:6b:19:20:a1:3b:13:f7:29:76:66:ef:df:
0a:14:b7:2d:23:cf:b8:4e:ab:8d:bc:73:0d:8e:0e:7e:88:1b:
47:01:3a:19:3f:80:e8:cd:d5:f2:fb:41:2d:af:b9:ff:f8:b4:
9b:17:01:af:5b:cc:e8:75:46:b8:05:ee:ec:a1:0a:2f:96:88:
f3:1d:92:6a:09:61:15:5c:83:ae:fa:b9:96:21:f1:49:64:f4:
8a:53:21:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKZECoxzvys0CbUE8c+CvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5
MmZjZTkwHhcNMjUwNjEzMTIwMDIxWhcNMjUwNjE0MTIwMDIxWjAzMTEwLwYDVQQD
Eyg4ZGQ1MDBhYjEwNTA2MmM3MjkzMGY5ZmY1M2FmNjRhNTMxYWY3MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL473tHVWnx352wsWZFK20Ra4kKn
acGNA0OEc2USQGxKwZH0qF7c/3xxC97M7cFhRwXZTexhjMxZVySjOvcml/HcaQC+
6fwwY7vlyc6d12xAeiFwAB5uzwnw67NeedsTWzSjZ5fa5QC3i7DZ/nPTR8Pc4mtr
yCIo2M1s+KQmTKGGpGHQ4xBdvYtlL1l+LJyw4/qOPnm9WfFy8IHWFAdwKidACmZv
dQ2FQ6KoXq5cOa6x4As3zb9yTpGqz+zOosFH2cQ6dJat8CcZcJDm1fRFhEOQrElY
bYiPM9PN5X66idWU/3lvaePNtekeqCwFl1fK7nkeR16rFRx/jcge9vDtCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3VAKsQUGLHKTD5/1OvZKUxr3DCMB8GA1UdIwQY
MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt
ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3
LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5ajbMzm
J5ywvhCY2kl3saafnC2gPG20lIt7Eskt+oCQOa0G4/KuPUFSbuVdPa4s9VnTU95p
LzHUnc6TFHheN0EHEP5M4EA+lEAS7tS9jkdvOh8Egv61xmvamdEoe3Ue7PocBtHd
qZXmXrDlbEH1r/cXVKXyaVgh3LOdWugITCtp8XcrBkIYE09BAVVw2PQVCxVv3H6z
ZXvSUVBq4hNN3R2Rhnj0GxtnaxkgoTsT9yl2Zu/fChS3LSPPuE6rjbxzDY4Ofogb
RwE6GT+A6M3V8vtBLa+5//i0mxcBr1vM6HVGuAXu7KEKL5aI8x2SaglhFVyDrvq5
liHxSWT0ilMhdg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:37:27 2025 by rpki-client