Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: mfVikAvnEj5WwPpY9CO6yUJWZ/yy8eystJFuBhOKOP8=
Subject key identifier: F3:07:93:F1:92:FD:53:8A:1C:B2:CD:A9:F1:F5:06:C5:24:13:F1:8F
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 01984AAECBB4CDED12CD64ED1089ED779598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 14C3
Signing time: Sun 27 Jul 2025 07:00:26 +0000
Manifest this update: Sun 27 Jul 2025 07:00:26 +0000
Manifest next update: Mon 28 Jul 2025 07:00:26 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: h6uWXV4diARjHMIOoAAHzowLMCFK/Fm3kBSWAjF1DsA=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:cb:b4:cd:ed:12:cd:64:ed:10:89:ed:77:95:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Jul 27 07:00:26 2025 GMT
Not After : Jul 28 07:00:26 2025 GMT
Subject: CN=f30793f192fd538a1cb2cda9f1f506c52413f18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:0e:81:65:43:c1:7b:5a:61:50:59:b5:ba:
c1:b9:df:6c:0c:ce:df:5d:dc:cb:00:c2:6b:0e:ec:
42:3d:2c:e6:b9:15:ca:dc:d8:ae:7e:d8:6d:58:88:
60:7d:af:fc:78:b2:58:ef:f8:ca:f4:b4:90:5f:48:
69:93:a7:f0:53:45:c6:fe:cc:a8:be:4d:44:7f:06:
b7:e2:e2:2e:8c:57:ef:b4:f0:d7:1b:60:53:09:08:
50:c3:96:91:ac:52:1e:dd:73:b7:98:c2:c6:d2:37:
e0:55:43:52:52:8e:f1:10:63:46:54:af:ee:80:b0:
59:73:b9:e0:ab:5d:69:2a:31:c0:ea:bf:e2:2a:7a:
eb:52:1d:17:8d:92:81:e0:5a:28:9f:0f:b7:90:44:
37:3f:93:8d:2d:fd:a7:cf:0e:ad:4e:a2:d4:24:cc:
41:0c:5a:ce:35:11:ec:9c:94:e9:be:f9:2a:de:ad:
e8:7c:48:f4:f4:9d:02:24:2c:ca:fd:21:8d:3f:a0:
9c:53:2c:4d:65:f6:3b:57:de:7b:0c:01:70:1c:ff:
ff:6f:3d:33:0b:93:a8:33:41:ca:8c:0c:ae:4a:ff:
a8:05:fb:fa:c4:21:eb:fe:e4:5f:78:c6:42:7a:09:
5e:a3:81:c5:da:09:7b:ad:dd:8d:ae:a9:64:30:f7:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:07:93:F1:92:FD:53:8A:1C:B2:CD:A9:F1:F5:06:C5:24:13:F1:8F
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c9:60:54:bd:70:9d:49:1d:09:96:05:3a:db:06:92:68:76:
b3:92:34:08:9f:19:75:3b:e2:32:b2:1f:3b:85:f1:ef:aa:fa:
61:4c:a8:0e:e6:a3:c9:05:0f:ee:05:bf:6b:35:34:b3:dc:6d:
22:9f:e7:50:29:66:19:4b:c9:53:d0:17:37:c5:a2:87:8f:1d:
b1:64:82:60:69:7d:3b:3f:96:b8:8d:8c:1b:28:b5:57:18:82:
0d:58:74:82:af:da:10:70:eb:f7:71:19:42:fa:72:e4:1c:86:
58:41:e4:20:9c:00:03:39:a3:f4:89:90:7c:e5:76:81:49:c5:
4f:e6:19:b0:c0:8f:f8:ad:7a:75:fc:04:69:ae:c3:26:b7:c7:
4b:40:56:3a:d8:74:a3:9b:c1:f0:4f:ac:af:a7:d7:a2:cb:62:
1e:b8:23:af:5f:4c:32:32:01:1c:d2:d1:5b:f8:35:a3:42:7f:
ac:10:85:44:eb:44:4e:17:9b:99:24:bf:8b:5b:48:ff:e0:ec:
92:ff:36:10:d3:71:d4:b4:2f:f2:bb:d8:be:06:3c:64:f1:9e:
02:b2:d2:61:ad:6e:1a:fa:88:72:8b:6c:b5:9d:a3:a0:b7:45:
7b:41:1f:0d:27:cd:07:77:e0:bc:a8:b0:08:9b:66:78:b9:8d:
9b:8c:8c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrsu0ze0SzWTtEIntd5WYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjUwNzI3MDcwMDI2WhcNMjUwNzI4MDcwMDI2WjAzMTEwLwYDVQQD
EyhmMzA3OTNmMTkyZmQ1MzhhMWNiMmNkYTlmMWY1MDZjNTI0MTNmMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5wOgWVDwXtaYVBZtbrBud9sDM7f
XdzLAMJrDuxCPSzmuRXK3NiufthtWIhgfa/8eLJY7/jK9LSQX0hpk6fwU0XG/syo
vk1Efwa34uIujFfvtPDXG2BTCQhQw5aRrFIe3XO3mMLG0jfgVUNSUo7xEGNGVK/u
gLBZc7ngq11pKjHA6r/iKnrrUh0XjZKB4Foonw+3kEQ3P5ONLf2nzw6tTqLUJMxB
DFrONRHsnJTpvvkq3q3ofEj09J0CJCzK/SGNP6CcUyxNZfY7V957DAFwHP//bz0z
C5OoM0HKjAyuSv+oBfv6xCHr/uRfeMZCegleo4HF2gl7rd2NrqlkMPfZlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMHk/GS/VOKHLLNqfH1BsUkE/GPMB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaclgVL1w
nUkdCZYFOtsGkmh2s5I0CJ8ZdTviMrIfO4Xx76r6YUyoDuajyQUP7gW/azU0s9xt
Ip/nUClmGUvJU9AXN8Wih48dsWSCYGl9Oz+WuI2MGyi1VxiCDVh0gq/aEHDr93EZ
Qvpy5ByGWEHkIJwAAzmj9ImQfOV2gUnFT+YZsMCP+K16dfwEaa7DJrfHS0BWOth0
o5vB8E+sr6fXostiHrgjr19MMjIBHNLRW/g1o0J/rBCFROtEThebmSS/i1tI/+Ds
kv82ENNx1LQv8rvYvgY8ZPGeArLSYa1uGvqIcotstZ2joLdFe0EfDSfNB3fgvKiw
CJtmeLmNm4yM0A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:58 2025 by rpki-client