Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File: ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier: ix9VH8C+s+mdrJNlsfR9zanGXZAIVmbs78MXOfBzMA4=
Subject key identifier: 9C:3A:33:DE:AA:96:2A:BA:DF:0D:14:41:82:1C:7D:2D:B2:06:5D:54
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer: /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial: 01987C0A0C5824458FCB62759344412D8F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number: 05D4
Signing time: Tue 05 Aug 2025 21:01:29 +0000
Manifest this update: Tue 05 Aug 2025 21:01:29 +0000
Manifest next update: Wed 06 Aug 2025 21:01:29 +0000
Files and hashes: 1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: qJ1uoRKWDy3XQnHpcfiW41jYSC/Tr7oDfZrIPQ/qGpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:0c:58:24:45:8f:cb:62:75:93:44:41:2d:8f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
Validity
Not Before: Aug 5 21:01:29 2025 GMT
Not After : Aug 6 21:01:29 2025 GMT
Subject: CN=9c3a33deaa962abadf0d1441821c7d2db2065d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:03:f5:56:9c:ee:51:be:72:62:3b:0d:b4:
9c:81:ce:6d:c3:d0:c4:8f:99:74:05:4b:ca:8f:bd:
1b:67:d5:ea:0a:48:c6:94:25:bc:60:ac:20:de:d9:
21:c1:25:26:1d:5e:e1:09:23:29:51:70:04:a6:7f:
40:87:0d:0e:e5:c2:03:2d:3c:bb:c4:bf:1e:c6:04:
d1:68:d3:75:ec:25:fa:18:93:2c:30:96:80:01:c6:
90:b3:b2:53:34:dc:01:ed:91:1c:91:72:97:3e:71:
07:69:13:7e:9a:b9:b7:b8:a8:78:d7:18:4a:8f:71:
db:e8:77:00:63:e2:8d:03:63:5e:51:08:87:f0:c0:
f1:5e:d5:dc:f1:7b:6b:fe:aa:3e:03:69:e7:df:57:
d2:f7:d1:ba:be:ab:94:5b:12:95:35:1c:d9:47:93:
84:e6:19:f3:a9:a5:e1:22:ad:b5:bf:26:9f:72:f4:
8d:7c:5f:2b:c0:fa:3f:8a:fa:6c:8d:44:c1:9c:ee:
f7:cc:f3:2d:b9:98:60:f7:ba:59:9e:24:ed:c9:71:
b1:49:d7:56:87:d6:97:c8:8b:fb:2d:4c:90:2a:8f:
e0:7d:00:c4:9e:66:d7:f8:1f:61:2a:fb:2f:06:05:
21:1b:77:81:dc:77:31:79:8f:a9:70:2b:a2:ed:21:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:33:DE:AA:96:2A:BA:DF:0D:14:41:82:1C:7D:2D:B2:06:5D:54
X509v3 Authority Key Identifier:
keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5a:73:2c:1a:40:0e:c5:2f:ff:73:ef:02:4d:33:67:47:78:
c6:ae:84:e4:f3:8f:39:3d:50:2f:62:16:05:7b:ba:5f:c8:a1:
1c:cb:45:aa:e6:01:b3:25:c3:c9:24:a2:c6:01:f3:79:20:30:
18:a5:d1:dd:c7:5a:53:b0:85:ba:9e:af:bb:7c:1a:d0:4e:69:
11:5e:bf:26:3f:a9:e0:53:32:c9:3b:01:7e:25:11:21:3c:28:
da:8e:82:53:54:4e:48:09:94:a2:76:71:7c:5c:62:f9:f4:fc:
f0:ee:60:bb:c5:0b:cf:37:0b:5a:ab:92:b8:5e:4f:fe:77:64:
b1:d7:6e:68:13:30:b0:3a:78:25:8e:5e:02:c6:34:a3:dd:7b:
59:b8:2b:2f:3d:12:48:7f:9c:a7:36:da:14:92:d3:a8:7e:53:
ef:21:bf:fc:38:f2:9f:37:d6:0a:5c:ab:83:8b:0e:4e:b4:09:
fe:af:25:6f:73:7b:ab:77:bc:53:c1:03:d5:ed:b5:66:1a:7a:
4a:8b:a9:81:0a:92:34:af:f1:15:2f:e8:df:23:69:82:91:e5:
77:8a:87:d9:07:94:b9:f5:96:ea:98:c3:e8:da:7e:1d:1c:51:
de:d1:ef:00:c5:e4:68:66:e3:56:b3:b5:71:13:9e:5a:9b:fc:
82:0b:a2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CgxYJEWPy2J1k0RBLY8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YzIwNjQ4Nzk4YmI2NTM2YjIzYTRlYmM1ODgwNDU0MTVm
OTZlODAwHhcNMjUwODA1MjEwMTI5WhcNMjUwODA2MjEwMTI5WjAzMTEwLwYDVQQD
Eyg5YzNhMzNkZWFhOTYyYWJhZGYwZDE0NDE4MjFjN2QyZGIyMDY1ZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVcD9Vac7lG+cmI7DbScgc5tw9DE
j5l0BUvKj70bZ9XqCkjGlCW8YKwg3tkhwSUmHV7hCSMpUXAEpn9Ahw0O5cIDLTy7
xL8exgTRaNN17CX6GJMsMJaAAcaQs7JTNNwB7ZEckXKXPnEHaRN+mrm3uKh41xhK
j3Hb6HcAY+KNA2NeUQiH8MDxXtXc8Xtr/qo+A2nn31fS99G6vquUWxKVNRzZR5OE
5hnzqaXhIq21vyafcvSNfF8rwPo/ivpsjUTBnO73zPMtuZhg97pZniTtyXGxSddW
h9aXyIv7LUyQKo/gfQDEnmbX+B9hKvsvBgUhG3eB3HcxeY+pcCui7SE70wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw6M96qliq63w0UQYIcfS2yBl1UMB8GA1UdIwQY
MBaAFHnCBkh5i7ZTayOk68WIBFQV+W6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAt
MWZhMTZlZjhjMWFkLzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAtMWZhMTZlZjhjMWFk
LzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1pzLBpA
DsUv/3PvAk0zZ0d4xq6E5POPOT1QL2IWBXu6X8ihHMtFquYBsyXDySSixgHzeSAw
GKXR3cdaU7CFup6vu3wa0E5pEV6/Jj+p4FMyyTsBfiURITwo2o6CU1ROSAmUonZx
fFxi+fT88O5gu8ULzzcLWquSuF5P/ndksdduaBMwsDp4JY5eAsY0o917WbgrLz0S
SH+cpzbaFJLTqH5T7yG//DjynzfWClyrg4sOTrQJ/q8lb3N7q3e8U8ED1e21Zhp6
SoupgQqSNK/xFS/o3yNpgpHld4qH2QeUufWW6pjD6Np+HRxR3tHvAMXkaGbjVrO1
cROeWpv8gguiwQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:16 2025 by rpki-client