Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier: xT6f5IOGWiiw/AWfZw0UBDCdST7qzTw9u0lK7rwognM=
Subject key identifier: DF:70:94:8E:E8:12:15:A9:2F:D0:B0:C3:00:52:F5:E3:39:56:4A:2F
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer: /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial: 019872CF3846E32C5F18780C34D60243DC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number: 0CFE
Signing time: Mon 04 Aug 2025 02:00:39 +0000
Manifest this update: Mon 04 Aug 2025 02:00:39 +0000
Manifest next update: Tue 05 Aug 2025 02:00:39 +0000
Files and hashes: 1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: g2T/JinM0VWL7KTnqcT2PrFG4COhx9gQX/wFggeKUyg=)
2: FNssP3Vnl359dcbgHZkufRV_lXA.roa (hash: JifcLzI/Tl7E2mLCjrs1dQqQn1Db6poPn/8XtbADxCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:38:46:e3:2c:5f:18:78:0c:34:d6:02:43:dc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Validity
Not Before: Aug 4 02:00:39 2025 GMT
Not After : Aug 5 02:00:39 2025 GMT
Subject: CN=df70948ee81215a92fd0b0c30052f5e339564a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:63:e5:44:ef:89:ac:44:50:08:51:6b:1d:
13:81:a4:0f:28:11:c9:82:f6:77:54:72:f5:c5:1f:
6a:7b:ad:b1:3a:8d:95:bd:84:5c:52:a6:fe:97:37:
b8:fe:7e:07:d9:12:06:b7:7b:ba:b1:ac:c3:0c:46:
a6:d1:08:7c:17:70:92:23:4d:43:66:e1:d1:53:2f:
6f:a8:d0:d5:fd:61:78:fe:5d:57:2e:94:b0:4a:ec:
c2:16:d5:44:e6:6a:85:0f:86:cf:10:9c:ad:ef:55:
be:98:df:ed:c1:ca:bf:98:c1:36:5e:d9:9b:7d:7e:
dc:88:c4:3c:5b:e3:0b:28:36:c5:00:01:e7:d9:ab:
3e:78:6b:69:e7:42:2a:72:d2:34:c7:f0:2b:43:91:
0a:9f:de:23:04:e5:a3:bc:07:4b:c3:ec:7f:52:35:
71:b1:22:8e:f9:d8:cb:74:60:57:db:47:d5:3d:c1:
21:92:ef:66:32:a5:49:01:88:b2:a6:93:26:aa:14:
88:3a:ca:60:e9:3f:72:00:26:a4:22:c8:97:6d:d9:
ce:e2:d9:09:0c:74:39:84:63:ef:3f:e0:97:df:c9:
ba:b5:11:68:ca:7b:6f:2f:c8:e6:9f:05:79:15:a3:
a9:76:50:c5:26:a7:38:87:df:d1:46:30:9d:b3:7b:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:70:94:8E:E8:12:15:A9:2F:D0:B0:C3:00:52:F5:E3:39:56:4A:2F
X509v3 Authority Key Identifier:
keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c7:81:4f:64:a5:7c:96:4e:4c:26:a1:71:cd:da:6a:4c:2e:
a0:5f:a0:18:7d:d8:18:58:95:1d:96:26:3a:6f:1b:bd:50:f4:
78:f4:16:64:d7:de:90:ca:3e:6f:5f:aa:ea:cf:91:cf:b1:15:
5a:0f:81:36:c6:a3:f8:b4:36:20:5d:2a:c6:c2:62:0b:ed:69:
5c:cd:21:a3:2b:1d:39:78:f5:2f:07:26:35:09:d4:a6:b1:5a:
28:60:93:69:b3:0d:85:51:d2:5d:46:1a:d3:8b:d2:65:9b:3a:
fd:14:ca:2d:5e:b2:37:b8:88:84:74:39:ce:ad:04:a0:80:3a:
1c:8d:9f:9e:d0:d6:61:4d:59:d9:9a:ad:c1:68:c7:c1:5b:89:
7f:30:f8:27:95:48:f1:c1:19:5f:64:00:44:dc:00:80:e8:bc:
d7:da:8e:e7:be:da:88:e9:97:56:57:0f:d6:83:99:00:0e:38:
93:2e:0f:f2:66:ed:e1:ed:86:8c:7a:c7:48:b1:90:aa:54:dd:
31:72:9a:b4:a5:64:3c:b8:43:da:e0:16:fd:55:d4:e2:e5:d6:
40:5a:f8:ba:cc:08:a8:e5:13:df:56:37:c4:7d:87:ae:2f:ca:
dc:26:37:58:96:38:f6:d6:ec:be:a2:4a:17:aa:63:3f:49:aa:
cf:71:c0:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyzzhG4yxfGHgMNNYCQ9wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx
NWUyNTYwHhcNMjUwODA0MDIwMDM5WhcNMjUwODA1MDIwMDM5WjAzMTEwLwYDVQQD
EyhkZjcwOTQ4ZWU4MTIxNWE5MmZkMGIwYzMwMDUyZjVlMzM5NTY0YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZpj5UTviaxEUAhRax0TgaQPKBHJ
gvZ3VHL1xR9qe62xOo2VvYRcUqb+lze4/n4H2RIGt3u6sazDDEam0Qh8F3CSI01D
ZuHRUy9vqNDV/WF4/l1XLpSwSuzCFtVE5mqFD4bPEJyt71W+mN/twcq/mME2Xtmb
fX7ciMQ8W+MLKDbFAAHn2as+eGtp50IqctI0x/ArQ5EKn94jBOWjvAdLw+x/UjVx
sSKO+djLdGBX20fVPcEhku9mMqVJAYiyppMmqhSIOspg6T9yACakIsiXbdnO4tkJ
DHQ5hGPvP+CX38m6tRFoyntvL8jmnwV5FaOpdlDFJqc4h9/RRjCds3v7XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9wlI7oEhWpL9CwwwBS9eM5VkovMB8GA1UdIwQY
MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt
YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm
LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMeBT2Sl
fJZOTCahcc3aakwuoF+gGH3YGFiVHZYmOm8bvVD0ePQWZNfekMo+b1+q6s+Rz7EV
Wg+BNsaj+LQ2IF0qxsJiC+1pXM0hoysdOXj1LwcmNQnUprFaKGCTabMNhVHSXUYa
04vSZZs6/RTKLV6yN7iIhHQ5zq0EoIA6HI2fntDWYU1Z2ZqtwWjHwVuJfzD4J5VI
8cEZX2QARNwAgOi819qO577aiOmXVlcP1oOZAA44ky4P8mbt4e2GjHrHSLGQqlTd
MXKatKVkPLhD2uAW/VXU4uXWQFr4uswIqOUT31Y3xH2Hri/K3CY3WJY49tbsvqJK
F6pjP0mqz3HAhg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:04 2025 by rpki-client