Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: LMjZpoujUyRxzInWMpckSSZyX1lDOZCBYd9X7OCRCGE=
Subject key identifier: 5A:9D:3D:7C:5C:2E:3F:B6:54:59:B4:6C:D9:4D:D1:39:07:B3:E3:8D
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 01977452343C1DA8173CF8456CAA54A09020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 159A
Signing time: Sun 15 Jun 2025 16:00:33 +0000
Manifest this update: Sun 15 Jun 2025 16:00:33 +0000
Manifest next update: Mon 16 Jun 2025 16:00:33 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: xAebjJ6QS4TVFfkAhKz+f/Qy4f9KCh/PrHK3Xwzdo1o=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:34:3c:1d:a8:17:3c:f8:45:6c:aa:54:a0:90:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jun 15 16:00:33 2025 GMT
Not After : Jun 16 16:00:33 2025 GMT
Subject: CN=5a9d3d7c5c2e3fb65459b46cd94dd13907b3e38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:40:06:a4:fe:90:75:4b:64:b1:9d:af:d0:
04:10:72:3a:29:54:a9:20:9d:b1:d8:e6:fb:73:b9:
f5:60:f6:0c:ee:c1:5b:dd:e6:6e:48:22:27:c9:57:
85:ff:99:14:7e:81:1b:8a:d7:14:f1:30:5b:1a:49:
20:85:c5:ff:f6:0f:b5:2a:0f:d1:db:c2:68:51:14:
ed:0b:58:f6:73:de:29:fa:be:13:20:e9:22:fd:c0:
07:3e:31:1c:88:1e:ed:f5:ec:24:d6:82:bd:b3:87:
ee:db:f9:90:38:c8:b7:a0:17:21:ca:82:ed:6a:03:
b0:65:9b:cd:c9:14:95:b0:9a:70:02:4e:bc:7f:87:
45:f3:0a:c5:35:9c:06:eb:71:6b:b6:23:9a:b8:91:
89:b4:de:7a:ad:ec:36:62:e2:12:c5:8f:ca:52:78:
02:bc:ce:52:1e:16:e0:5d:9e:9e:fe:d1:35:46:05:
d4:16:bb:56:f0:cb:41:bf:a7:a9:22:4e:a6:6e:0c:
82:19:fc:cb:e8:fd:79:21:c1:50:40:f6:e9:61:10:
cd:76:be:ea:22:04:50:90:e7:04:6b:29:89:7a:39:
be:03:d3:e2:ca:a1:9c:0d:3e:46:17:64:28:bb:72:
15:62:84:d6:22:0e:43:47:3a:2e:95:65:90:bf:84:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:3D:7C:5C:2E:3F:B6:54:59:B4:6C:D9:4D:D1:39:07:B3:E3:8D
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:88:22:05:1e:46:2b:43:6b:6a:20:cb:65:56:b5:b7:ab:
e9:bc:15:9c:28:31:c8:43:ee:b3:f2:df:26:03:66:7b:22:47:
bd:b2:96:7e:bb:34:9e:e3:10:67:f4:40:bf:3d:03:c3:e8:2d:
43:50:59:7c:69:e0:b6:a9:cb:7e:78:30:6e:60:7a:fa:69:fb:
01:8d:7f:8c:75:cd:02:3f:22:d7:de:82:8c:0c:3f:16:94:ab:
fd:41:73:87:58:aa:b1:a4:54:fb:0b:1a:52:b2:8d:55:f7:7a:
b1:65:07:77:0c:30:01:97:30:d5:d1:71:b0:55:49:97:6e:a2:
15:d9:e4:57:9b:f8:a7:9d:52:ed:2d:6f:6f:70:31:a5:d3:88:
3a:90:7e:3f:ca:7f:2c:04:32:cc:d4:de:82:83:ef:8e:17:15:
83:e5:a8:10:21:50:c6:31:5d:5b:4a:f9:71:42:ea:f8:8d:ff:
ea:0f:df:f5:cc:c1:ef:f6:57:33:46:01:65:61:ce:a8:15:96:
96:66:7b:41:7b:31:1c:48:6d:ea:78:58:35:bc:1c:57:b8:76:
bd:d4:fa:e2:70:f1:fd:57:d5:ab:2b:58:e4:2c:51:ca:d4:86:
89:95:b2:5f:51:26:34:f3:c4:37:76:79:89:f5:8d:96:c7:c0:
1d:bf:f4:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0UjQ8HagXPPhFbKpUoJAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjUwNjE1MTYwMDMzWhcNMjUwNjE2MTYwMDMzWjAzMTEwLwYDVQQD
Eyg1YTlkM2Q3YzVjMmUzZmI2NTQ1OWI0NmNkOTRkZDEzOTA3YjNlMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgBABqT+kHVLZLGdr9AEEHI6KVSp
IJ2x2Ob7c7n1YPYM7sFb3eZuSCInyVeF/5kUfoEbitcU8TBbGkkghcX/9g+1Kg/R
28JoURTtC1j2c94p+r4TIOki/cAHPjEciB7t9ewk1oK9s4fu2/mQOMi3oBchyoLt
agOwZZvNyRSVsJpwAk68f4dF8wrFNZwG63FrtiOauJGJtN56rew2YuISxY/KUngC
vM5SHhbgXZ6e/tE1RgXUFrtW8MtBv6epIk6mbgyCGfzL6P15IcFQQPbpYRDNdr7q
IgRQkOcEaymJejm+A9PiyqGcDT5GF2Qou3IVYoTWIg5DRzoulWWQv4QckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqdPXxcLj+2VFm0bNlN0TkHs+ONMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAyIIgUe
RitDa2ogy2VWtber6bwVnCgxyEPus/LfJgNmeyJHvbKWfrs0nuMQZ/RAvz0Dw+gt
Q1BZfGngtqnLfngwbmB6+mn7AY1/jHXNAj8i196CjAw/FpSr/UFzh1iqsaRU+wsa
UrKNVfd6sWUHdwwwAZcw1dFxsFVJl26iFdnkV5v4p51S7S1vb3AxpdOIOpB+P8p/
LAQyzNTegoPvjhcVg+WoECFQxjFdW0r5cULq+I3/6g/f9czB7/ZXM0YBZWHOqBWW
lmZ7QXsxHEht6nhYNbwcV7h2vdT64nDx/VfVqytY5CxRytSGiZWyX1EmNPPEN3Z5
ifWNlsfAHb/0FA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:09:56 2025 by rpki-client