Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: obMeC+Meq5OT3OW47UZfg7AZHx2oX5nLHqEsFZp7Gyg=
Subject key identifier: BB:E7:62:51:B0:B8:7F:B7:9A:7C:E6:D6:D7:01:D8:7E:F8:BF:C0:18
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 019771F6723EB0A75A70A0019EC50679E35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 12D2
Signing time: Sun 15 Jun 2025 05:01:05 +0000
Manifest this update: Sun 15 Jun 2025 05:01:05 +0000
Manifest next update: Mon 16 Jun 2025 05:01:05 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: NLUr8FnpkZBT96A4iHIxkMnwinVK8Zb16n80ZgbUIuE=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:72:3e:b0:a7:5a:70:a0:01:9e:c5:06:79:e3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Jun 15 05:01:05 2025 GMT
Not After : Jun 16 05:01:05 2025 GMT
Subject: CN=bbe76251b0b87fb79a7ce6d6d701d87ef8bfc018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:57:a7:e6:3b:eb:77:a8:d0:be:12:c2:1f:
bc:f2:47:e0:e5:a5:c6:ee:d2:ba:20:56:37:5f:d0:
94:b7:89:07:a2:ea:70:91:77:cb:d1:8a:1c:0f:a3:
5a:f3:7e:0c:97:85:75:c5:5f:8f:c5:06:d1:07:5f:
8d:03:6b:95:cf:3b:a2:2f:1a:ed:75:4f:c1:17:9c:
60:be:61:da:1c:b8:8b:9e:20:42:2e:5f:4f:8d:6a:
cc:39:31:11:ab:f1:2a:a3:cd:a5:1b:98:bb:ad:28:
32:85:c9:c6:1b:4e:26:54:d8:94:2c:fe:32:d4:85:
52:73:83:57:54:58:8d:8b:18:c6:be:a3:37:e6:e0:
c3:f5:f8:35:6a:c4:42:8c:51:f9:de:02:e8:a9:87:
e2:08:61:e2:f8:12:38:38:47:6c:20:fd:14:43:fc:
bf:15:d9:57:27:03:45:8f:15:fe:41:f8:08:50:21:
73:d0:17:98:b6:e2:99:71:80:81:1c:fb:9d:92:4f:
00:fe:46:27:37:9e:77:19:3f:1a:d4:97:37:cc:83:
bb:79:7d:45:ae:30:be:77:91:48:a0:96:b6:a1:af:
86:ac:66:fa:c2:e0:4b:8e:87:61:1d:dc:e0:dc:7b:
26:f3:c1:58:0d:b3:0b:81:ff:1b:61:06:02:9d:2f:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:62:51:B0:B8:7F:B7:9A:7C:E6:D6:D7:01:D8:7E:F8:BF:C0:18
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f6:8c:d3:4f:80:6a:61:0e:b8:3a:f5:f7:a4:1d:60:93:94:
16:40:23:a5:b0:0a:30:98:10:c4:f2:09:b4:65:71:b0:7c:7b:
b7:9c:e7:db:0d:1e:9f:b4:5c:28:c3:ab:3c:eb:3d:05:09:b6:
c2:bd:5a:4c:c2:53:0c:5a:b4:00:d7:75:c2:5f:ef:84:48:df:
fe:64:56:c3:d8:1c:97:01:15:06:66:39:c1:28:5a:41:1e:82:
5b:a0:2c:10:15:ea:e3:e8:e2:d3:94:95:63:26:b0:38:9f:bf:
d3:d0:7b:18:e0:6d:f1:16:a0:bf:7b:d0:27:4e:87:20:e0:08:
88:e3:5f:c2:cb:9e:83:09:be:10:c4:8b:2a:e3:5a:61:cd:e5:
54:02:99:e7:4d:34:7c:f5:c5:f9:3d:0e:0f:e5:36:cd:05:5e:
4d:c3:99:ac:2c:4d:25:99:08:d8:f2:70:64:1c:06:5b:38:3f:
17:6b:e0:ed:ce:ce:6d:86:30:0d:ec:67:a9:a5:58:64:f7:dd:
4e:f9:8f:a2:c7:31:14:68:12:2d:79:4d:01:2c:bf:ca:11:17:
b3:c0:56:e8:fb:04:51:76:6f:b8:3d:18:36:c7:77:90:d8:ec:
4c:60:c6:48:ca:0c:4b:55:b2:11:52:5e:bd:1a:f3:fc:1c:d2:
ca:c8:ee:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9nI+sKdacKABnsUGeeNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2FhYzcxZjE3ZWYwMzNjYjY1MzY3OTUzMzhmZGM3YmMw
ZjIyNjMwHhcNMjUwNjE1MDUwMTA1WhcNMjUwNjE2MDUwMTA1WjAzMTEwLwYDVQQD
EyhiYmU3NjI1MWIwYjg3ZmI3OWE3Y2U2ZDZkNzAxZDg3ZWY4YmZjMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTFXp+Y763eo0L4Swh+88kfg5aXG
7tK6IFY3X9CUt4kHoupwkXfL0YocD6Na834Ml4V1xV+PxQbRB1+NA2uVzzuiLxrt
dU/BF5xgvmHaHLiLniBCLl9PjWrMOTERq/Eqo82lG5i7rSgyhcnGG04mVNiULP4y
1IVSc4NXVFiNixjGvqM35uDD9fg1asRCjFH53gLoqYfiCGHi+BI4OEdsIP0UQ/y/
FdlXJwNFjxX+QfgIUCFz0BeYtuKZcYCBHPudkk8A/kYnN553GT8a1Jc3zIO7eX1F
rjC+d5FIoJa2oa+GrGb6wuBLjodhHdzg3Hsm88FYDbMLgf8bYQYCnS+plwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvnYlGwuH+3mnzm1tcB2H74v8AYMB8GA1UdIwQY
MBaAFHh6rHHxfvAzy2U2eVM4/ce8DyJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEt
ZDEyODY3YjQ2NzMzLzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEtZDEyODY3YjQ2NzMz
LzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvaM00+A
amEOuDr196QdYJOUFkAjpbAKMJgQxPIJtGVxsHx7t5zn2w0en7RcKMOrPOs9BQm2
wr1aTMJTDFq0ANd1wl/vhEjf/mRWw9gclwEVBmY5wShaQR6CW6AsEBXq4+ji05SV
YyawOJ+/09B7GOBt8Ragv3vQJ06HIOAIiONfwsuegwm+EMSLKuNaYc3lVAKZ5000
fPXF+T0OD+U2zQVeTcOZrCxNJZkI2PJwZBwGWzg/F2vg7c7ObYYwDexnqaVYZPfd
TvmPoscxFGgSLXlNASy/yhEXs8BW6PsEUXZvuD0YNsd3kNjsTGDGSMoMS1WyEVJe
vRrz/BzSysjufA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:42 2025 by rpki-client