Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: SWK7xHFqpfqgJ+5ke6SnZsJxirH7lB76viVutNrSHuc=
Subject key identifier: 10:C4:DD:64:ED:96:74:9C:77:59:C9:D7:10:96:B6:5D:43:51:39:1E
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 01977D8CD5213A7E7C6F6644B0598F692C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 0F59
Signing time: Tue 17 Jun 2025 11:01:10 +0000
Manifest this update: Tue 17 Jun 2025 11:01:10 +0000
Manifest next update: Wed 18 Jun 2025 11:01:10 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: 3hE+taLPPO23Ss5jUS0GHdZVOzA8DmHg1xfVKJKE5qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:d5:21:3a:7e:7c:6f:66:44:b0:59:8f:69:2c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Jun 17 11:01:10 2025 GMT
Not After : Jun 18 11:01:10 2025 GMT
Subject: CN=10c4dd64ed96749c7759c9d71096b65d4351391e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:56:3d:69:5b:98:79:c9:c4:db:5e:3f:f8:
2f:42:74:06:72:c2:b1:96:27:03:8c:5d:37:93:0c:
52:e4:f0:33:8a:4e:c2:43:a4:41:c9:26:f3:03:52:
85:f6:2f:c5:84:7e:18:e4:bb:b0:4b:a4:04:7f:c8:
22:7f:dc:67:7e:c6:c7:d5:6d:7e:4a:16:f1:71:22:
dd:74:47:4d:13:f5:8b:45:9d:14:bf:26:95:a5:45:
08:f2:63:17:bb:11:e2:48:aa:95:ea:f5:d7:7b:8c:
69:11:6f:26:39:92:c4:0d:4b:9f:1c:d6:76:7d:8d:
b6:a2:67:b9:47:0d:4c:0e:29:13:76:85:83:19:c3:
e4:dd:8f:af:7d:4d:bd:77:f0:df:36:72:75:9f:f8:
70:f2:c4:80:db:20:21:d9:80:1a:d1:8a:89:d4:de:
c8:59:78:0c:8d:45:e9:ae:83:ec:94:fa:9d:79:8f:
05:e3:3e:36:a9:04:1b:ed:35:2b:2b:31:f1:88:b2:
32:4b:13:a6:e6:af:b2:f0:22:c8:a4:78:5b:69:01:
9b:75:72:bc:96:35:0c:b5:0c:24:d6:90:b9:15:fd:
1b:6d:b3:06:8d:08:30:b6:7f:3a:c9:f9:e3:d1:94:
a2:aa:2f:4e:91:e1:47:ec:3a:d0:c9:48:df:02:9f:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C4:DD:64:ED:96:74:9C:77:59:C9:D7:10:96:B6:5D:43:51:39:1E
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c9:fd:9e:18:ac:cd:c8:e8:83:49:26:83:8c:0b:e6:c2:df:
db:e8:74:06:d0:eb:e5:ad:e6:f3:87:f4:a7:60:38:0e:85:f5:
7f:c3:50:38:c7:bc:28:10:a9:b1:00:1a:ea:5b:58:24:be:d1:
eb:8d:6d:23:2b:da:59:58:b5:79:71:88:c8:d3:c0:d9:8b:07:
40:1d:e1:d3:d8:64:4c:c0:9b:a8:04:ba:a5:95:df:c3:30:7b:
69:25:88:70:0a:5c:6a:d4:a7:4e:22:b7:ac:9a:2c:41:74:19:
ec:89:50:e7:41:89:64:d8:36:46:88:15:51:71:ac:af:4c:28:
7a:d8:75:6e:a4:63:02:e6:a3:46:e0:7e:62:e0:4f:77:c2:bb:
4d:d6:2c:3e:ca:64:cd:1a:f5:8c:68:ff:3e:32:9a:ed:07:34:
bc:f9:1b:70:1d:d4:4b:2d:a2:86:c1:18:37:0e:c3:d2:b2:8d:
a0:12:72:18:43:87:2c:50:84:b3:e8:bb:26:18:e0:40:f8:45:
cc:d8:fe:7f:87:ec:a9:49:9c:b7:88:b3:10:2f:e3:e1:a8:78:
21:d4:6d:d6:fc:cf:47:5b:6f:8a:5b:8c:50:8d:98:ab:b2:05:
19:a6:f8:c6:d6:16:95:d6:14:14:6a:77:7b:84:4b:81:24:d2:
3f:dc:d9:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9jNUhOn58b2ZEsFmPaSx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTg0MGUzYTBmMDQ3NGE0YWNjZTQ1ZWQ1ZmM5Y2ZmNzc4
NThkOTMwHhcNMjUwNjE3MTEwMTEwWhcNMjUwNjE4MTEwMTEwWjAzMTEwLwYDVQQD
EygxMGM0ZGQ2NGVkOTY3NDljNzc1OWM5ZDcxMDk2YjY1ZDQzNTEzOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr19WPWlbmHnJxNteP/gvQnQGcsKx
licDjF03kwxS5PAzik7CQ6RBySbzA1KF9i/FhH4Y5LuwS6QEf8gif9xnfsbH1W1+
ShbxcSLddEdNE/WLRZ0UvyaVpUUI8mMXuxHiSKqV6vXXe4xpEW8mOZLEDUufHNZ2
fY22ome5Rw1MDikTdoWDGcPk3Y+vfU29d/DfNnJ1n/hw8sSA2yAh2YAa0YqJ1N7I
WXgMjUXproPslPqdeY8F4z42qQQb7TUrKzHxiLIySxOm5q+y8CLIpHhbaQGbdXK8
ljUMtQwk1pC5Ff0bbbMGjQgwtn86yfnj0ZSiqi9OkeFH7DrQyUjfAp+8EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDE3WTtlnScd1nJ1xCWtl1DUTkeMB8GA1UdIwQY
MBaAFHhYQOOg8EdKSszkXtX8nP93hY2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzIt
ZmFmYjEyYTE2YzMxLzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzItZmFmYjEyYTE2YzMx
LzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsn9nhis
zcjog0kmg4wL5sLf2+h0BtDr5a3m84f0p2A4DoX1f8NQOMe8KBCpsQAa6ltYJL7R
641tIyvaWVi1eXGIyNPA2YsHQB3h09hkTMCbqAS6pZXfwzB7aSWIcApcatSnTiK3
rJosQXQZ7IlQ50GJZNg2RogVUXGsr0woeth1bqRjAuajRuB+YuBPd8K7TdYsPspk
zRr1jGj/PjKa7Qc0vPkbcB3USy2ihsEYNw7D0rKNoBJyGEOHLFCEs+i7JhjgQPhF
zNj+f4fsqUmct4izEC/j4ah4IdRt1vzPR1tviluMUI2Yq7IFGab4xtYWldYUFGp3
e4RLgSTSP9zZlA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 14:30:38 2025 by rpki-client