Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: U0kMQcuN3eC9AexFZ2VUXY/g70ImXDVxRU9HE/FIk+I=
Subject key identifier: 53:5A:31:EC:7C:AD:E5:CE:8E:77:0B:87:5B:7A:70:2D:F2:F1:28:C9
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019777C14D4A674D0215BB6C34F5C7FE778E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 01EE
Signing time: Mon 16 Jun 2025 08:00:46 +0000
Manifest this update: Mon 16 Jun 2025 08:00:46 +0000
Manifest next update: Tue 17 Jun 2025 08:00:46 +0000
Files and hashes: 1: 4TNcEamcxMBJdxuRNcPnkIPobhU.roa (hash: m5tTan6cU+uoGi79hby9WpCdyKNlJQA9BZkDNvmdK4g=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: 3nEXvJ/HkL2D/A212jwbP/s7WM+iRLg+/D9rsG5/JwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:4d:4a:67:4d:02:15:bb:6c:34:f5:c7:fe:77:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Jun 16 08:00:46 2025 GMT
Not After : Jun 17 08:00:46 2025 GMT
Subject: CN=535a31ec7cade5ce8e770b875b7a702df2f128c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:6c:32:fe:5a:92:be:62:08:26:e8:9c:2c:
5e:3e:c8:ed:32:26:1a:73:91:84:e5:7d:d4:0f:50:
2d:9e:7b:e2:2a:04:ad:00:8c:c9:e1:99:6e:41:bf:
20:66:ec:9e:2a:e7:59:be:57:48:d1:79:cc:a9:36:
0c:61:e9:60:3e:d5:f8:b3:a3:09:5a:18:19:f4:98:
bf:e4:9c:3c:0c:9b:75:30:10:f1:ae:ae:ad:b6:04:
cb:0a:28:ba:94:a5:62:1c:10:58:2d:05:8a:b7:86:
22:78:57:90:2f:59:a7:52:6d:ce:b0:5c:c9:49:0a:
19:b8:93:89:00:d9:c6:b5:24:14:20:5b:ef:45:2b:
ae:ce:bc:96:ca:f6:73:7b:47:c1:28:25:f0:a6:06:
68:27:a6:71:23:7d:1a:b6:83:72:0f:6b:56:20:9b:
ab:5d:73:eb:0c:44:c2:00:a2:ea:1f:6b:28:15:22:
9d:71:1e:f8:a0:29:1b:db:24:76:4a:67:f6:b9:78:
2c:c7:39:9e:81:6c:43:a9:b2:32:7b:3c:4a:c7:30:
00:10:f4:92:a8:fe:fa:1f:97:33:18:36:02:3f:df:
61:ee:66:b0:a4:42:71:5f:d9:d4:c0:34:a0:1c:63:
da:1a:c7:1e:82:5c:58:84:ea:77:53:a9:82:69:a3:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5A:31:EC:7C:AD:E5:CE:8E:77:0B:87:5B:7A:70:2D:F2:F1:28:C9
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:24:5c:91:10:48:25:64:ea:ed:e6:41:20:d3:7e:46:1f:8c:
18:85:1b:0b:50:cd:c6:48:9e:32:f5:0d:ee:d3:8b:f2:dd:3f:
fb:8c:e1:4e:ba:96:ff:24:1a:61:e3:75:32:05:0d:ec:4a:a5:
6f:20:95:cf:d2:67:7a:c1:cd:cc:fe:90:4c:8c:64:9a:da:be:
4e:2a:83:13:a4:ae:a3:c5:8c:d9:7c:86:c2:7b:c1:45:71:ba:
30:d6:7e:6b:b6:a0:f9:d8:fa:61:5b:50:9e:95:31:27:09:6b:
4f:99:ea:be:58:f6:3b:5e:8d:2b:ce:af:16:30:6b:ac:c7:2a:
56:98:3e:81:c6:51:11:e1:90:ed:79:68:26:52:83:bd:a2:8b:
d7:73:2b:8d:30:9c:8e:81:af:76:85:97:aa:f7:eb:00:59:07:
1a:f2:16:6a:e0:97:24:66:23:36:f7:d5:16:8e:ca:35:37:9e:
5c:4a:ba:78:e4:0e:72:d3:eb:cd:a1:e9:11:af:4c:aa:a1:42:
d5:b4:c6:e6:d3:ad:c2:38:d2:92:51:a4:dc:a2:eb:f0:fa:e5:
f2:0b:e5:7c:20:b3:3f:65:26:99:7f:45:d9:03:e0:b2:8f:32:
b2:ef:79:2c:f2:2e:11:b5:ec:8f:99:b8:18:9c:3d:3b:d6:b6:
75:86:df:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3wU1KZ00CFbtsNPXH/neOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiY2IxMjdjN2NkNzc4NjA3Mjk2Yjg4Mzg2ZTg5NGFlMWRl
Mzg1YmYwHhcNMjUwNjE2MDgwMDQ2WhcNMjUwNjE3MDgwMDQ2WjAzMTEwLwYDVQQD
Eyg1MzVhMzFlYzdjYWRlNWNlOGU3NzBiODc1YjdhNzAyZGYyZjEyOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMVsMv5akr5iCCbonCxePsjtMiYa
c5GE5X3UD1AtnnviKgStAIzJ4ZluQb8gZuyeKudZvldI0XnMqTYMYelgPtX4s6MJ
WhgZ9Ji/5Jw8DJt1MBDxrq6ttgTLCii6lKViHBBYLQWKt4YieFeQL1mnUm3OsFzJ
SQoZuJOJANnGtSQUIFvvRSuuzryWyvZze0fBKCXwpgZoJ6ZxI30atoNyD2tWIJur
XXPrDETCAKLqH2soFSKdcR74oCkb2yR2Smf2uXgsxzmegWxDqbIyezxKxzAAEPSS
qP76H5czGDYCP99h7mawpEJxX9nUwDSgHGPaGsceglxYhOp3U6mCaaNMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNaMex8reXOjncLh1t6cC3y8SjJMB8GA1UdIwQY
MBaAFHvLEnx813hgcpa4g4bolK4d44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWIt
MmUyMGE3OWY3MTQ1LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWItMmUyMGE3OWY3MTQ1
LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCRckRBI
JWTq7eZBINN+Rh+MGIUbC1DNxkieMvUN7tOL8t0/+4zhTrqW/yQaYeN1MgUN7Eql
byCVz9JnesHNzP6QTIxkmtq+TiqDE6Suo8WM2XyGwnvBRXG6MNZ+a7ag+dj6YVtQ
npUxJwlrT5nqvlj2O16NK86vFjBrrMcqVpg+gcZREeGQ7XloJlKDvaKL13MrjTCc
joGvdoWXqvfrAFkHGvIWauCXJGYjNvfVFo7KNTeeXEq6eOQOctPrzaHpEa9MqqFC
1bTG5tOtwjjSklGk3KLr8Prl8gvlfCCzP2UmmX9F2QPgso8ysu95LPIuEbXsj5m4
GJw9O9a2dYbfgg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:12:07 2025 by rpki-client