Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: j1GeOS7CusiAVnKD6+W5ioq3GtULHsz161mmPZNpJts=
Subject key identifier: EF:12:A2:3C:8F:6E:52:9E:7D:75:28:06:09:A5:4C:12:8E:77:BA:1A
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 019771F684EBA1AC61C34920D8AD7B319042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 05:01:10 +0000
Manifest this update: Sun 15 Jun 2025 05:01:10 +0000
Manifest next update: Mon 16 Jun 2025 05:01:10 +0000
Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: 7cMFjVSLMVFrlyoglibDk5H7/48SnHGYg5L8xJ++F+0=)
2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:84:eb:a1:ac:61:c3:49:20:d8:ad:7b:31:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Jun 15 05:01:10 2025 GMT
Not After : Jun 16 05:01:10 2025 GMT
Subject: CN=ef12a23c8f6e529e7d75280609a54c128e77ba1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:12:d8:2a:aa:f0:39:a7:40:da:42:9b:9a:
28:ef:85:47:0f:1c:b7:d3:ce:28:98:96:c3:f7:38:
fb:4e:70:84:38:1e:bd:f5:23:3e:ad:47:97:4f:18:
41:2e:22:be:af:56:fb:5d:01:ba:bb:2c:c0:9e:d5:
c0:59:03:e6:32:61:fc:ea:c7:4d:47:9a:ea:3e:79:
1a:ea:11:00:fe:6e:f5:50:ec:b7:f9:96:96:cd:84:
4f:95:4f:71:dd:26:26:4e:4b:fd:4c:66:ab:df:2b:
6b:d9:a4:09:7c:55:a8:30:ba:d8:1d:b6:2b:0e:01:
e4:ff:76:50:8b:0a:4b:75:cc:30:fd:1c:d6:00:55:
30:46:f2:e5:17:40:e9:d4:2c:37:a3:c7:63:6b:14:
30:0f:ba:e5:e5:dc:b4:d2:03:ca:82:ea:90:7d:52:
9d:c5:c3:ee:45:63:06:8a:32:08:af:8e:44:fd:6d:
ed:4e:ca:78:32:47:d6:68:82:7f:32:f4:1c:f2:69:
c8:be:ca:1f:7e:5a:ba:33:c4:d3:97:d0:76:ad:d8:
22:5e:e9:78:64:cc:2b:4d:af:42:8a:23:f0:c1:18:
fc:24:b7:45:e2:b6:6f:c8:ac:b6:db:35:3b:fa:af:
48:21:60:2d:8c:74:96:2e:c9:0c:48:f0:f0:a8:79:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:A2:3C:8F:6E:52:9E:7D:75:28:06:09:A5:4C:12:8E:77:BA:1A
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:38:bc:0f:af:d4:b2:6c:ae:53:c4:1a:6a:e8:ed:a0:cf:c8:
de:70:46:0f:d6:d5:53:a0:2f:9a:e5:b7:7b:32:de:65:36:fb:
46:ad:98:18:61:be:ba:11:01:9b:f3:9a:ed:52:3f:f4:ee:eb:
be:2a:94:35:8f:e1:c4:04:b8:34:61:80:d1:d2:cc:40:9c:7f:
92:00:6d:f4:9f:f3:2e:9b:e1:75:88:81:29:b2:f0:7a:77:8f:
c6:15:aa:ee:e3:b1:bb:30:7a:59:20:6b:3b:98:ac:4a:44:b1:
0c:48:65:0d:fc:5f:81:43:b6:0b:0c:0f:d9:20:44:2f:f9:36:
e8:f8:aa:96:a3:b4:df:6f:e2:e9:75:b4:0e:96:c6:be:33:91:
6c:5a:66:4d:fe:e0:c6:64:1a:b9:26:c2:fb:33:c2:0c:9e:96:
bc:2f:0f:76:ab:14:c0:58:61:6e:0d:b0:79:ee:64:47:0c:19:
53:e1:55:c7:6d:0d:29:ca:e8:95:c1:bb:3f:45:db:31:5b:97:
b4:16:3f:13:47:38:10:34:ae:84:cd:90:3e:83:89:bb:e7:50:
3d:88:c5:a8:9b:aa:b5:2f:9d:73:d9:8c:5e:3d:8e:4d:60:6c:
c9:2c:f9:88:41:82:40:5f:84:fe:25:ed:d8:6d:c5:09:09:03:
86:54:41:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9oTroaxhw0kg2K17MZBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDllZWFmMjQzNDJjM2IyYzYzMmM5ZTQ4NDYzMTM4ZGUy
ZGMwMGIwHhcNMjUwNjE1MDUwMTEwWhcNMjUwNjE2MDUwMTEwWjAzMTEwLwYDVQQD
EyhlZjEyYTIzYzhmNmU1MjllN2Q3NTI4MDYwOWE1NGMxMjhlNzdiYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQcS2Cqq8DmnQNpCm5oo74VHDxy3
084omJbD9zj7TnCEOB699SM+rUeXTxhBLiK+r1b7XQG6uyzAntXAWQPmMmH86sdN
R5rqPnka6hEA/m71UOy3+ZaWzYRPlU9x3SYmTkv9TGar3ytr2aQJfFWoMLrYHbYr
DgHk/3ZQiwpLdcww/RzWAFUwRvLlF0Dp1Cw3o8djaxQwD7rl5dy00gPKguqQfVKd
xcPuRWMGijIIr45E/W3tTsp4MkfWaIJ/MvQc8mnIvsofflq6M8TTl9B2rdgiXul4
ZMwrTa9CiiPwwRj8JLdF4rZvyKy22zU7+q9IIWAtjHSWLskMSPDwqHkNiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8SojyPblKefXUoBgmlTBKOd7oaMB8GA1UdIwQY
MBaAFHpJ7q8kNCw7LGMsnkhGMTjeLcALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTct
ZjliNjA3MTE0NTNjLzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTctZjliNjA3MTE0NTNj
LzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzi8D6/U
smyuU8QaaujtoM/I3nBGD9bVU6AvmuW3ezLeZTb7Rq2YGGG+uhEBm/Oa7VI/9O7r
viqUNY/hxAS4NGGA0dLMQJx/kgBt9J/zLpvhdYiBKbLwenePxhWq7uOxuzB6WSBr
O5isSkSxDEhlDfxfgUO2CwwP2SBEL/k26PiqlqO032/i6XW0DpbGvjORbFpmTf7g
xmQauSbC+zPCDJ6WvC8PdqsUwFhhbg2wee5kRwwZU+FVx20NKcrolcG7P0XbMVuX
tBY/E0c4EDSuhM2QPoOJu+dQPYjFqJuqtS+dc9mMXj2OTWBsySz5iEGCQF+E/iXt
2G3FCQkDhlRBtQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:56 2025 by rpki-client