Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: thm3xOaNk8rQECkz6ruvso8OpdAeKzAZXHYl/hAjXss=
Subject key identifier: 82:D6:B9:43:12:9E:C8:4F:B7:6D:32:4E:CD:B8:16:32:0A:2E:E5:50
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 019774F6F11620066D0E4DA7FDC51AC2E209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 19:00:29 +0000
Manifest this update: Sun 15 Jun 2025 19:00:29 +0000
Manifest next update: Mon 16 Jun 2025 19:00:29 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: K+WrhVNzuzN2gNX1j2k2vlt1qQlLQPgFUjoxxbfri5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f6:f1:16:20:06:6d:0e:4d:a7:fd:c5:1a:c2:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Jun 15 19:00:29 2025 GMT
Not After : Jun 16 19:00:29 2025 GMT
Subject: CN=82d6b943129ec84fb76d324ecdb816320a2ee550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:c4:37:99:14:c5:77:fc:df:21:b7:c9:a2:
0a:b4:87:fa:fb:9a:bd:5b:ab:95:3c:0e:73:53:e1:
49:ce:3a:56:de:2d:c7:8c:c9:2e:76:b6:a6:73:bc:
f5:f6:4f:a4:af:bb:13:ba:22:f5:c5:60:2d:5b:8b:
09:c0:4a:d2:6d:e5:e3:5e:d6:f6:76:0f:90:4f:7a:
3e:d7:4a:0d:e2:3d:a9:4e:70:fe:b6:b7:08:ee:65:
c7:a1:fa:58:57:0b:7e:7d:69:cb:e1:cb:15:80:62:
8b:26:f1:cb:e1:4c:c8:a6:30:91:30:de:82:14:78:
3f:62:09:9c:0c:4b:79:4b:50:0f:7f:a9:a7:a1:b7:
53:15:78:9f:a5:27:45:92:4f:91:58:81:f1:c1:52:
07:a6:7a:26:9f:53:13:96:6e:20:69:e6:3e:f4:d5:
e7:78:5d:c6:76:37:77:ed:0f:53:c3:67:97:0d:e9:
1a:65:a1:6d:51:21:86:95:1b:6a:1a:a4:08:12:da:
18:7a:82:77:b3:34:b9:6b:cb:17:13:a7:a7:99:9d:
da:a9:65:75:b6:0c:c1:87:d7:1b:8f:63:da:e3:28:
11:90:70:3b:03:54:17:40:3d:6d:dd:35:8c:9e:ac:
94:d2:e7:d6:70:05:d0:f6:85:47:d1:cb:d2:05:61:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:B9:43:12:9E:C8:4F:B7:6D:32:4E:CD:B8:16:32:0A:2E:E5:50
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4b:fd:43:b3:2e:3b:b5:3c:54:54:04:a6:78:26:aa:9b:8f:
d1:ff:a8:87:2c:e0:42:d0:9b:99:31:1b:e9:2a:65:59:f6:e4:
d7:29:46:f4:73:f9:3e:1b:a5:a9:5b:87:ac:5b:34:e7:30:b8:
c5:7b:e9:82:29:8f:2b:73:07:d8:b3:6a:ef:69:30:71:f3:cc:
1b:71:26:a3:45:9a:99:ac:97:8c:1a:9c:9f:5e:be:b2:4b:be:
40:5f:66:8c:ff:1c:89:39:91:b6:16:e3:97:f4:b2:c1:d4:24:
0b:63:68:2e:63:b1:e4:e4:7b:e9:98:5f:12:38:f0:66:1e:99:
de:9e:b4:f5:86:8a:9c:bf:07:aa:08:68:74:12:c3:62:12:e6:
1c:b0:34:a4:11:a1:a6:b3:83:08:bf:b1:8e:aa:fa:37:89:cf:
61:d7:52:d2:77:f4:b2:f5:03:38:d5:77:fe:10:e8:71:76:69:
38:a4:0a:88:bf:42:41:40:72:29:06:72:be:ef:66:80:cf:33:
08:9c:70:82:43:52:30:db:a4:91:af:7d:22:2b:e8:fb:91:bd:
47:96:48:31:79:04:aa:4c:d3:e0:43:a4:5d:b6:31:6c:15:7f:
91:0e:8f:76:f9:f0:30:02:d0:ba:52:98:e8:ab:69:34:ce:6c:
00:8c:ed:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd09vEWIAZtDk2n/cUawuIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGRjODE0NTc1NTEwMWFjYzA4ODhhYTAwYmIyOGI5OTVi
OWM0ZjEwHhcNMjUwNjE1MTkwMDI5WhcNMjUwNjE2MTkwMDI5WjAzMTEwLwYDVQQD
Eyg4MmQ2Yjk0MzEyOWVjODRmYjc2ZDMyNGVjZGI4MTYzMjBhMmVlNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0nEN5kUxXf83yG3yaIKtIf6+5q9
W6uVPA5zU+FJzjpW3i3HjMkudramc7z19k+kr7sTuiL1xWAtW4sJwErSbeXjXtb2
dg+QT3o+10oN4j2pTnD+trcI7mXHofpYVwt+fWnL4csVgGKLJvHL4UzIpjCRMN6C
FHg/YgmcDEt5S1APf6mnobdTFXifpSdFkk+RWIHxwVIHpnomn1MTlm4gaeY+9NXn
eF3Gdjd37Q9Tw2eXDekaZaFtUSGGlRtqGqQIEtoYeoJ3szS5a8sXE6enmZ3aqWV1
tgzBh9cbj2Pa4ygRkHA7A1QXQD1t3TWMnqyU0ufWcAXQ9oVH0cvSBWH4FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILWuUMSnshPt20yTs24FjIKLuVQMB8GA1UdIwQY
MBaAFHkNyBRXVRAazAiIqgC7KLmVucTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUt
OTVjYWUwOWZmNTYzLzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUtOTVjYWUwOWZmNTYz
LzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEv9Q7Mu
O7U8VFQEpngmqpuP0f+ohyzgQtCbmTEb6SplWfbk1ylG9HP5PhulqVuHrFs05zC4
xXvpgimPK3MH2LNq72kwcfPMG3Emo0WamayXjBqcn16+sku+QF9mjP8ciTmRthbj
l/SywdQkC2NoLmOx5OR76ZhfEjjwZh6Z3p609YaKnL8HqghodBLDYhLmHLA0pBGh
prODCL+xjqr6N4nPYddS0nf0svUDONV3/hDocXZpOKQKiL9CQUByKQZyvu9mgM8z
CJxwgkNSMNukka99Iivo+5G9R5ZIMXkEqkzT4EOkXbYxbBV/kQ6PdvnwMALQulKY
6KtpNM5sAIztGw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:46:53 2025 by rpki-client