Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: QVzLlJp7eudEN/6qg7tXKS2e6o/4ZViyJo5EKcPJ+LE=
Subject key identifier: 2F:04:11:DB:2F:52:40:C4:7C:54:44:62:98:CC:DB:0E:45:05:13:A1
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 01977075C3045FA4FCD5F3D8E5EC55EC2B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: E7
Signing time: Sat 14 Jun 2025 22:00:55 +0000
Manifest this update: Sat 14 Jun 2025 22:00:55 +0000
Manifest next update: Sun 15 Jun 2025 22:00:55 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: 9tw6zcnRDMhyJyzqZfwPBQHWZHu0I67gfrTNy//abWU=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:c3:04:5f:a4:fc:d5:f3:d8:e5:ec:55:ec:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Jun 14 22:00:55 2025 GMT
Not After : Jun 15 22:00:55 2025 GMT
Subject: CN=2f0411db2f5240c47c54446298ccdb0e450513a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:f3:5e:27:66:be:7f:21:57:cd:e6:ef:5b:
c0:f1:f4:2e:f2:b8:b5:90:2b:5a:1a:5c:69:bc:9d:
38:26:a2:03:8e:76:05:77:d6:51:6d:22:91:6f:96:
9c:ee:9a:15:be:2b:37:bf:fb:46:b3:60:bf:c9:5d:
5b:c7:53:0d:ab:1c:46:72:7f:80:ee:65:22:12:2d:
eb:3f:19:3d:00:28:77:77:2e:98:b8:77:b4:73:2d:
9f:9f:3a:48:31:73:63:3b:51:ff:b1:36:3d:60:56:
21:74:50:e8:ab:eb:61:6d:36:c4:e5:de:73:8d:ca:
4e:6a:c0:b3:5a:32:30:e0:94:89:a1:3f:6b:ca:a5:
78:69:09:ae:18:08:da:9b:61:22:39:57:7c:43:1f:
3c:8c:62:e7:b8:90:93:59:19:db:49:3e:e5:c7:86:
30:c3:64:d7:bb:13:aa:da:aa:21:dc:9e:dd:38:c4:
48:52:6e:f8:55:a4:0f:09:fa:f2:f9:1d:f5:8c:8d:
77:bd:30:bd:09:16:35:19:81:69:db:74:c8:92:18:
96:c3:95:7d:1d:c4:12:4c:2e:7c:42:75:0b:b6:16:
7d:57:8e:e5:04:de:da:c2:c9:86:d0:67:db:04:73:
5a:a3:ed:61:78:cf:0d:8a:4a:1e:96:fd:91:dc:df:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:11:DB:2F:52:40:C4:7C:54:44:62:98:CC:DB:0E:45:05:13:A1
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:d5:4b:40:fc:c4:ae:ed:ab:fb:1c:41:4f:cc:4a:e1:d5:
13:e5:f5:b4:bc:8b:cc:23:b2:0b:25:3d:a0:c4:d5:27:82:df:
4e:7d:d8:d3:1e:ce:80:44:7f:ba:46:4f:dc:ca:55:5a:91:07:
6f:59:19:91:56:8a:8b:f0:fa:7f:a3:f7:30:68:f3:c1:04:b0:
77:c4:89:fc:53:88:42:2b:10:da:dd:b9:02:b6:4a:89:d5:0f:
df:b9:96:ac:5a:84:e2:f3:3a:8d:cf:37:0b:63:2e:78:0e:47:
a5:00:d6:61:41:8a:51:d9:d7:a0:95:ab:03:42:98:d4:68:c3:
dc:d2:43:e7:27:67:07:aa:19:24:cd:87:3d:fe:73:32:72:26:
47:ef:75:1c:d8:2b:ac:b6:43:aa:55:54:2a:53:ae:1d:68:7f:
2c:21:1d:7f:7f:44:19:e7:cd:31:39:4c:1f:6a:98:de:33:d1:
85:eb:fe:34:36:c0:44:33:c2:8b:3d:ab:0b:9d:d7:89:48:72:
97:f5:c6:88:58:10:76:9b:c4:51:cb:60:b2:33:60:2e:ae:c8:
ae:9f:e5:f1:b5:28:f4:12:19:6a:e5:2e:9a:4f:63:72:74:ab:
c8:be:80:15:2d:48:c0:59:31:95:4f:fe:ce:a9:dc:7e:e4:74:
f1:cf:7a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdcMEX6T81fPY5exV7CtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1
MjVmNGUwHhcNMjUwNjE0MjIwMDU1WhcNMjUwNjE1MjIwMDU1WjAzMTEwLwYDVQQD
EygyZjA0MTFkYjJmNTI0MGM0N2M1NDQ0NjI5OGNjZGIwZTQ1MDUxM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12bzXidmvn8hV83m71vA8fQu8ri1
kCtaGlxpvJ04JqIDjnYFd9ZRbSKRb5ac7poVvis3v/tGs2C/yV1bx1MNqxxGcn+A
7mUiEi3rPxk9ACh3dy6YuHe0cy2fnzpIMXNjO1H/sTY9YFYhdFDoq+thbTbE5d5z
jcpOasCzWjIw4JSJoT9ryqV4aQmuGAjam2EiOVd8Qx88jGLnuJCTWRnbST7lx4Yw
w2TXuxOq2qoh3J7dOMRIUm74VaQPCfry+R31jI13vTC9CRY1GYFp23TIkhiWw5V9
HcQSTC58QnULthZ9V47lBN7awsmG0GfbBHNao+1heM8Nikoelv2R3N/7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8EEdsvUkDEfFREYpjM2w5FBROhMB8GA1UdIwQY
MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt
OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl
LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9DVS0D8
xK7tq/scQU/MSuHVE+X1tLyLzCOyCyU9oMTVJ4LfTn3Y0x7OgER/ukZP3MpVWpEH
b1kZkVaKi/D6f6P3MGjzwQSwd8SJ/FOIQisQ2t25ArZKidUP37mWrFqE4vM6jc83
C2MueA5HpQDWYUGKUdnXoJWrA0KY1GjD3NJD5ydnB6oZJM2HPf5zMnImR+91HNgr
rLZDqlVUKlOuHWh/LCEdf39EGefNMTlMH2qY3jPRhev+NDbARDPCiz2rC53XiUhy
l/XGiFgQdpvEUctgsjNgLq7Irp/l8bUo9BIZauUumk9jcnSryL6AFS1IwFkxlU/+
zqncfuR08c96qQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:21 2025 by rpki-client