Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
File: Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json)
Hash identifier: bgbZ6As0qAq9yxpwk50EECW+L0wbjABSihdNm8xdtN4=
Subject key identifier: DF:8A:99:E6:DF:AB:16:8F:FA:51:37:C2:B9:BB:4E:3B:55:C1:DF:D5
Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
Certificate issuer: /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Certificate serial: 01988EEB744546E5DDEBDC909503BFAED29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
Manifest number: 0E8D
Signing time: Sat 09 Aug 2025 13:00:51 +0000
Manifest this update: Sat 09 Aug 2025 13:00:51 +0000
Manifest next update: Sun 10 Aug 2025 13:00:51 +0000
Files and hashes: 1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: LTM75bvhsnYRSmGG6SRj0Gy1RxaaZmDZuEkKS8R3NrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:74:45:46:e5:dd:eb:dc:90:95:03:bf:ae:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Validity
Not Before: Aug 9 13:00:51 2025 GMT
Not After : Aug 10 13:00:51 2025 GMT
Subject: CN=df8a99e6dfab168ffa5137c2b9bb4e3b55c1dfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:c8:79:cc:69:1d:70:ad:98:ff:32:67:8d:
11:f5:a7:21:e8:8d:75:0d:e8:4a:30:f7:ad:92:79:
7c:7b:9b:f7:a9:8e:45:fe:04:ff:eb:01:10:35:f9:
08:c6:95:dc:51:07:df:a7:fe:82:8f:6e:04:07:03:
02:5b:5d:64:df:03:e8:ea:d5:93:93:fd:6c:ee:6f:
e2:2d:ca:ec:20:ba:53:b7:1a:db:ee:69:bb:27:df:
93:72:34:10:0a:22:6c:c3:d8:8a:28:2d:e2:72:5c:
ac:cb:11:d3:59:3a:6f:16:99:a9:77:d2:f3:99:43:
d3:46:a7:49:ef:20:1b:a6:52:65:b2:cb:77:0d:c8:
74:eb:dd:0b:de:cc:99:84:b2:1c:8c:a8:02:c9:f9:
33:31:17:59:3a:d9:8a:70:de:29:58:ba:92:cf:07:
13:04:9e:80:00:26:7c:a4:c0:90:2f:df:8c:12:f2:
e4:c2:84:bc:74:0f:85:c6:be:c0:28:5a:ac:91:25:
bc:28:9a:b0:c8:41:9d:13:56:fa:e2:f7:3e:d0:70:
95:2d:e1:65:ea:ed:32:c3:32:7b:82:41:bc:f0:ca:
f1:7a:93:a1:d6:f1:d8:01:3e:5b:38:fc:cb:a0:b2:
8e:3f:53:7c:08:36:83:3e:30:c6:c8:63:89:6e:82:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:99:E6:DF:AB:16:8F:FA:51:37:C2:B9:BB:4E:3B:55:C1:DF:D5
X509v3 Authority Key Identifier:
keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:91:33:a6:a1:a0:46:03:5b:3e:8b:cc:38:cd:c5:48:a9:
a9:60:d4:3a:b3:a4:e8:9b:17:6a:2e:1c:68:cc:77:8c:49:b7:
47:24:47:c1:ca:b8:d0:e8:b8:b3:7a:c3:91:86:3b:91:e4:2a:
59:ea:ff:a3:f6:0e:32:31:43:02:19:48:3b:af:94:b1:d4:8c:
13:43:c1:02:61:07:47:b7:86:50:a7:7c:39:4f:79:12:19:16:
3f:49:17:a3:01:0d:5e:aa:e5:47:8f:5f:07:0a:4d:6b:76:59:
57:8a:11:af:7a:3b:24:07:d0:d5:f5:c9:17:78:46:db:a6:00:
db:e5:ce:51:6a:8b:88:9a:15:33:23:3f:5c:0c:4f:a6:8d:d8:
8d:2c:72:66:4e:14:9d:1a:45:8f:2b:31:50:24:e2:5e:96:e4:
81:c3:f9:b5:af:5c:bc:a9:dd:b6:8f:7f:82:54:46:c7:3c:e4:
e7:14:ce:ef:a3:72:14:4c:23:43:c8:bb:64:5b:e2:6d:ee:05:
d0:50:c0:5a:84:67:85:e2:1e:b3:95:56:47:39:74:41:b6:3a:
82:58:71:61:fe:60:d2:2f:4c:a3:1a:a7:b3:13:98:52:ef:ac:
57:84:6f:42:55:22:71:f7:4b:40:24:1e:d2:22:e4:7a:97:cf:
ed:c2:3d:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO63RFRuXd69yQlQO/rtKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjlmZTY3N2Y0N2RmMGZkN2NjMzQ5NWYxNzJkOTNiM2Ni
YTBlMDAwHhcNMjUwODA5MTMwMDUxWhcNMjUwODEwMTMwMDUxWjAzMTEwLwYDVQQD
EyhkZjhhOTllNmRmYWIxNjhmZmE1MTM3YzJiOWJiNGUzYjU1YzFkZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iXIecxpHXCtmP8yZ40R9ach6I11
DehKMPetknl8e5v3qY5F/gT/6wEQNfkIxpXcUQffp/6Cj24EBwMCW11k3wPo6tWT
k/1s7m/iLcrsILpTtxrb7mm7J9+TcjQQCiJsw9iKKC3iclysyxHTWTpvFpmpd9Lz
mUPTRqdJ7yAbplJlsst3Dch0690L3syZhLIcjKgCyfkzMRdZOtmKcN4pWLqSzwcT
BJ6AACZ8pMCQL9+MEvLkwoS8dA+Fxr7AKFqskSW8KJqwyEGdE1b64vc+0HCVLeFl
6u0ywzJ7gkG88MrxepOh1vHYAT5bOPzLoLKOP1N8CDaDPjDGyGOJboIIfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+KmebfqxaP+lE3wrm7TjtVwd/VMB8GA1UdIwQY
MBaAFBIp/md/R98P18w0lfFy2Ts8ug4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kYzhlMDctOThiNS00M2VmLWEyNDIt
M2FiNjZiZjQ3YmQzLzEvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kYzhlMDctOThiNS00M2VmLWEyNDItM2FiNjZiZjQ3YmQz
LzEvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLuRM6ah
oEYDWz6LzDjNxUipqWDUOrOk6JsXai4caMx3jEm3RyRHwcq40Oi4s3rDkYY7keQq
Wer/o/YOMjFDAhlIO6+UsdSME0PBAmEHR7eGUKd8OU95EhkWP0kXowENXqrlR49f
BwpNa3ZZV4oRr3o7JAfQ1fXJF3hG26YA2+XOUWqLiJoVMyM/XAxPpo3YjSxyZk4U
nRpFjysxUCTiXpbkgcP5ta9cvKndto9/glRGxzzk5xTO76NyFEwjQ8i7ZFvibe4F
0FDAWoRnheIes5VWRzl0QbY6glhxYf5g0i9MoxqnsxOYUu+sV4RvQlUicfdLQCQe
0iLkepfP7cI9oA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:46 2025 by rpki-client