Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
File: eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft (raw, json)
Hash identifier: UWJsL3YqawtRokVpKnYWYReeuDt3wNauTF0oTVLcokQ=
Subject key identifier: 04:CD:B7:B3:22:55:92:89:3F:57:18:01:2B:9E:C6:47:9F:8E:D7:F1
Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85
Certificate serial: 0197820DF037C7F36941ABF3FA2782550837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
Manifest number: 2A
Signing time: Wed 18 Jun 2025 08:00:40 +0000
Manifest this update: Wed 18 Jun 2025 08:00:40 +0000
Manifest next update: Thu 19 Jun 2025 08:00:40 +0000
Files and hashes: 1: ClkZ4Qkjsm6jhcM9mc5q3RhM28g.roa (hash: nT6gO3pCu1NkBlvtxFQSUnCbFnHbtIhkaEeCEOJ+PkU=)
2: SHNEUOB-tmCuler25OnE-7d4RKI.roa (hash: XKq8o0m566WX2AVhb80rl5yUodqaYeMM1rdYd3E/iD0=)
3: eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl (hash: 6qepShYZdRYgSjqiK7Zji8dtcjbwlEWSDxu4+YT2RiQ=)
4: z3ZLPttN_dLEWt9RRuV7F-68KD8.roa (hash: C7j0Qnqfcw9VtnlF4ckZWrE6xR0zYsksmWqIp1TS2Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:0d:f0:37:c7:f3:69:41:ab:f3:fa:27:82:55:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78decead419807747c92ace69448113ff0928b85
Validity
Not Before: Jun 18 08:00:40 2025 GMT
Not After : Jun 19 08:00:40 2025 GMT
Subject: CN=04cdb7b3225592893f5718012b9ec6479f8ed7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:64:56:94:df:e8:91:c6:ae:84:94:78:83:
e8:dc:71:6f:45:9a:d2:32:92:fa:3d:82:f4:e1:dc:
92:11:03:90:d8:c7:c9:3e:9b:f3:cf:70:35:ce:df:
02:de:4f:df:3f:92:54:69:b0:29:24:4e:ca:d1:07:
33:73:c8:34:ce:1f:58:25:6e:58:7a:ea:e1:a0:cf:
1c:75:18:ff:40:4b:a0:00:2b:3e:cd:a6:b5:c4:1f:
03:87:33:ee:99:a7:1f:52:ec:5f:07:65:8d:0f:79:
1c:63:3a:5b:db:7a:28:ed:49:b6:24:40:d5:d5:26:
e1:78:c1:ae:2c:f9:ab:04:56:3b:80:87:24:e3:8d:
76:db:18:95:6b:79:2f:f0:ea:65:e1:2e:d1:db:68:
d2:ba:57:5a:09:ae:ba:42:03:34:9a:f9:49:fb:9e:
d8:94:83:08:9e:27:2f:a0:a3:22:04:dd:36:7b:92:
7d:3c:41:be:ab:60:c2:ae:d0:33:8c:ef:f1:38:d1:
b2:ab:98:c3:9f:34:c7:fe:8f:7d:7d:ac:fe:62:d5:
a1:5e:1f:d3:ce:c4:24:5f:9f:6b:84:77:21:e1:cd:
3c:fd:2b:9a:95:13:bb:df:38:2c:ee:88:c1:2f:d6:
06:58:74:a2:b0:a4:d7:5c:1c:61:f7:3b:ae:1e:ba:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:B7:B3:22:55:92:89:3F:57:18:01:2B:9E:C6:47:9F:8E:D7:F1
X509v3 Authority Key Identifier:
keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:37:27:47:8f:ec:76:c7:b6:e0:60:f8:ac:1b:91:1b:e7:53:
5c:78:1a:27:05:0f:3d:66:ef:97:20:07:67:87:ee:c6:de:8c:
57:89:42:4b:a6:23:ff:94:fa:2e:21:21:16:22:9a:e1:e7:84:
1a:0d:f9:52:f2:0c:88:aa:54:b7:5e:84:31:17:2b:91:bc:a7:
3c:53:52:80:b1:18:87:04:73:85:68:02:e8:e8:03:1f:3a:e5:
cf:9d:57:f6:ae:28:18:c0:0e:b6:7a:bf:c5:26:8e:4e:80:6d:
5d:ff:c3:a8:e9:96:37:b1:50:aa:76:b3:42:6e:70:be:5c:1d:
5b:bb:bc:17:75:fe:48:91:23:d2:33:81:30:76:e2:95:62:dd:
f7:e8:b5:a6:22:52:88:d0:0f:42:33:09:99:25:61:d5:62:29:
e0:cf:07:1a:42:dd:64:89:9a:31:fb:fd:34:97:75:27:3b:66:
e8:b8:34:3a:b3:04:a2:5c:61:26:fa:6b:13:48:ea:5c:b6:a6:
45:72:2f:b3:20:7f:cf:9b:df:51:a8:8f:a9:6f:07:b7:29:fd:
50:65:fd:88:91:5e:1d:e5:72:e0:0e:9c:28:66:5a:99:fd:37:
3f:8a:a6:05:57:cc:bc:be:ae:f9:cf:5d:5c:e0:1c:f6:af:32:
bf:ac:cd:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeCDfA3x/NpQavz+ieCVQg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZGVjZWFkNDE5ODA3NzQ3YzkyYWNlNjk0NDgxMTNmZjA5
MjhiODUwHhcNMjUwNjE4MDgwMDQwWhcNMjUwNjE5MDgwMDQwWjAzMTEwLwYDVQQD
EygwNGNkYjdiMzIyNTU5Mjg5M2Y1NzE4MDEyYjllYzY0NzlmOGVkN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLdkVpTf6JHGroSUeIPo3HFvRZrS
MpL6PYL04dySEQOQ2MfJPpvzz3A1zt8C3k/fP5JUabApJE7K0Qczc8g0zh9YJW5Y
eurhoM8cdRj/QEugACs+zaa1xB8DhzPumacfUuxfB2WND3kcYzpb23oo7Um2JEDV
1SbheMGuLPmrBFY7gIck44122xiVa3kv8Opl4S7R22jSuldaCa66QgM0mvlJ+57Y
lIMInicvoKMiBN02e5J9PEG+q2DCrtAzjO/xONGyq5jDnzTH/o99faz+YtWhXh/T
zsQkX59rhHch4c08/SualRO73zgs7ojBL9YGWHSisKTXXBxh9zuuHrqPIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATNt7MiVZKJP1cYASuexkefjtfxMB8GA1UdIwQY
MBaAFHjezq1BmAd0fJKs5pRIET/wkouFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYt
NzUzNjFhYzIwZDVlLzEvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYtNzUzNjFhYzIwZDVl
LzEvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezcnR4/s
dse24GD4rBuRG+dTXHgaJwUPPWbvlyAHZ4fuxt6MV4lCS6Yj/5T6LiEhFiKa4eeE
Gg35UvIMiKpUt16EMRcrkbynPFNSgLEYhwRzhWgC6OgDHzrlz51X9q4oGMAOtnq/
xSaOToBtXf/DqOmWN7FQqnazQm5wvlwdW7u8F3X+SJEj0jOBMHbilWLd9+i1piJS
iNAPQjMJmSVh1WIp4M8HGkLdZImaMfv9NJd1Jztm6Lg0OrMEolxhJvprE0jqXLam
RXIvsyB/z5vfUaiPqW8Htyn9UGX9iJFeHeVy4A6cKGZamf03P4qmBVfMvL6u+c9d
XOAc9q8yv6zNxQ==
-----END CERTIFICATE-----
Generated at Wed Jun 18 13:20:23 2025 by rpki-client