Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: Ufdcu2g52wRyTrsYjkq7NK+hTaaMnBZJss1SrAJjeK4=
Subject key identifier: 9C:8E:53:65:80:ED:AD:C1:54:82:E7:5A:C7:AD:7E:25:DD:AB:0B:D5
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019769616C041F124B1E7AE76B0EC3CF6404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0CA6
Signing time: Fri 13 Jun 2025 13:01:21 +0000
Manifest this update: Fri 13 Jun 2025 13:01:21 +0000
Manifest next update: Sat 14 Jun 2025 13:01:21 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: LKMtrs68U9E51feteGzbjCOdSneMtyG/bkKFVERjKhs=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:6c:04:1f:12:4b:1e:7a:e7:6b:0e:c3:cf:64:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jun 13 13:01:21 2025 GMT
Not After : Jun 14 13:01:21 2025 GMT
Subject: CN=9c8e536580edadc15482e75ac7ad7e25ddab0bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:82:2a:fa:e0:54:33:de:ca:8d:ad:94:e4:
bb:57:ea:96:58:39:a7:d3:d4:ca:c9:e8:a9:cf:f7:
75:6d:d2:cb:b2:dc:fa:df:5f:7a:83:a9:54:8c:6e:
69:09:8e:88:f8:c7:33:f7:f9:ba:bc:35:ea:05:79:
ed:a9:d8:c7:d6:b7:f5:1d:1a:55:15:62:64:69:f8:
44:61:3c:df:f0:56:8e:c3:47:f2:bc:59:8d:11:5a:
6e:5a:93:d7:58:7a:b2:1b:f9:93:cd:da:8f:12:48:
05:26:3e:e1:f6:eb:b6:62:b1:cf:2e:bb:db:ae:55:
45:c6:c3:d9:5d:a8:a3:c2:08:f7:2b:8c:af:f5:fa:
0e:e5:38:cd:e0:ec:59:25:5c:96:45:df:63:2d:a5:
f9:16:b9:71:0b:68:4e:1c:8b:d7:32:68:08:b9:08:
4d:94:36:aa:35:16:be:ba:57:a5:cf:0a:e5:53:a5:
51:de:98:3e:99:f8:c8:22:85:f7:c4:7a:36:b0:dd:
f6:5d:30:37:0f:c0:ff:c2:27:03:78:96:96:36:54:
99:8e:7b:45:2b:5e:f5:4d:4f:f4:29:4c:6b:d4:98:
99:46:89:17:64:48:40:01:89:48:7a:84:a1:90:16:
12:1d:43:8c:e8:33:09:97:06:dc:a1:11:36:48:b3:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8E:53:65:80:ED:AD:C1:54:82:E7:5A:C7:AD:7E:25:DD:AB:0B:D5
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fa:73:76:34:75:0d:de:9c:59:50:ac:ec:78:63:d7:1e:53:
94:24:27:d4:eb:fc:02:59:46:53:30:55:e3:d6:0c:0b:ca:82:
6d:ea:67:70:21:9f:b0:d0:81:8d:31:8a:d7:0a:27:da:fb:7e:
78:ca:7d:81:2c:9a:4f:87:72:2c:e5:21:bf:bb:12:f6:9a:e3:
b6:c2:49:21:7f:03:87:25:e9:a4:4e:b3:32:68:ba:c0:9a:fb:
0a:09:12:13:e5:c9:1f:73:d0:ff:12:c6:82:4a:45:60:77:03:
76:7b:cd:20:13:3d:37:54:74:ff:05:5f:26:16:73:2e:82:12:
19:e0:f2:e6:8e:cc:69:e6:a9:ff:25:28:34:7e:af:75:01:15:
72:c8:b8:84:21:ab:d2:97:dc:a4:67:5a:7e:83:56:3a:80:3d:
36:7e:82:b8:ac:72:c3:85:b6:5d:27:9e:fa:16:51:5b:7b:ef:
82:f3:98:2b:32:2d:e6:d3:31:e0:08:82:d7:6a:cb:f4:c7:28:
7d:81:a5:6d:a1:91:23:04:d0:3e:61:24:c0:1e:b0:a7:13:ec:
81:85:68:7e:28:2a:23:72:8b:f5:8a:23:13:5f:80:80:94:65:
e0:dc:ca:67:43:11:e1:dc:ea:33:73:08:f2:ac:df:10:a8:5e:
88:13:7e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYWwEHxJLHnrnaw7Dz2QEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDI0NjZmOGY4NjQ1YzlmMzlmMDQ4NzRkZGFkZjBkNzEz
NmY2N2YwHhcNMjUwNjEzMTMwMTIxWhcNMjUwNjE0MTMwMTIxWjAzMTEwLwYDVQQD
Eyg5YzhlNTM2NTgwZWRhZGMxNTQ4MmU3NWFjN2FkN2UyNWRkYWIwYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ECCKvrgVDPeyo2tlOS7V+qWWDmn
09TKyeipz/d1bdLLstz63196g6lUjG5pCY6I+Mcz9/m6vDXqBXntqdjH1rf1HRpV
FWJkafhEYTzf8FaOw0fyvFmNEVpuWpPXWHqyG/mTzdqPEkgFJj7h9uu2YrHPLrvb
rlVFxsPZXaijwgj3K4yv9foO5TjN4OxZJVyWRd9jLaX5FrlxC2hOHIvXMmgIuQhN
lDaqNRa+ulelzwrlU6VR3pg+mfjIIoX3xHo2sN32XTA3D8D/wicDeJaWNlSZjntF
K171TU/0KUxr1JiZRokXZEhAAYlIeoShkBYSHUOM6DMJlwbcoRE2SLNpewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyOU2WA7a3BVILnWsetfiXdqwvVMB8GA1UdIwQY
MBaAFBJCRm+PhkXJ858Eh03a3w1xNvZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUt
MGY1NWVhMzNhZmUzLzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUtMGY1NWVhMzNhZmUz
LzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvpzdjR1
Dd6cWVCs7Hhj1x5TlCQn1Ov8AllGUzBV49YMC8qCbepncCGfsNCBjTGK1won2vt+
eMp9gSyaT4dyLOUhv7sS9prjtsJJIX8DhyXppE6zMmi6wJr7CgkSE+XJH3PQ/xLG
gkpFYHcDdnvNIBM9N1R0/wVfJhZzLoISGeDy5o7Maeap/yUoNH6vdQEVcsi4hCGr
0pfcpGdafoNWOoA9Nn6CuKxyw4W2XSee+hZRW3vvgvOYKzIt5tMx4AiC12rL9Mco
fYGlbaGRIwTQPmEkwB6wpxPsgYVofigqI3KL9YojE1+AgJRl4NzKZ0MR4dzqM3MI
8qzfEKheiBN+3A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:47 2025 by rpki-client