Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File: Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier: hhdCWYS/dV1rY1jnowe8IjSpsEZjs8h9MGIN4T8IlEw=
Subject key identifier: E9:7C:6C:6E:D9:08:C1:59:07:E7:D5:C9:27:C1:3D:1B:5C:5C:1B:17
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 019853E8C04CBBA1824E7081EF9F9A4ABA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number: 161C
Signing time: Tue 29 Jul 2025 02:00:19 +0000
Manifest this update: Tue 29 Jul 2025 02:00:19 +0000
Manifest next update: Wed 30 Jul 2025 02:00:19 +0000
Files and hashes: 1: 1-F_rMoDUma_dGOHiDlIC303wzZM.roa (hash: tZlwSl0wJhxzJHG6ytyE3Qp+PsLiMjHX0zpV56LqD4U=)
2: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: puFaHsvS85Na9qb1zATpahF0bh9HQcReFmP6S6+8SZo=)
3: HwX-edPrb5YTj1nsywewpB-a_TU.roa (hash: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=)
4: LTNH687avS-GxvMdJ-HPx6cwop4.roa (hash: zxKrezY3Lljpe1LKksT2FsAbzIoVghn3cyjHiR1yO9U=)
5: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
6: lMvd5SqBL_Or0jhVPY7oWSF4yuw.roa (hash: Z0xuaYoH87JP2hkLQ1lEz86Qpg9FfEJCXmemb0LqJF8=)
7: mWwZIZi_bVc1h908CjAKkL5Od18.roa (hash: 61r7bPQMg9kj6M2m+bl2SoqT9NucemfdfUzk79Tyxy0=)
8: pbctY64a9gnXSvxUzSA-3U1AkIs.roa (hash: WGFe5sR9orerXEZx51HMbLLWYLrkuEnn5GlCxO/9rWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:c0:4c:bb:a1:82:4e:70:81:ef:9f:9a:4a:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jul 29 02:00:19 2025 GMT
Not After : Jul 30 02:00:19 2025 GMT
Subject: CN=e97c6c6ed908c15907e7d5c927c13d1b5c5c1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:fc:e5:e4:03:64:5c:34:61:56:64:bd:d9:
39:22:ea:1c:72:93:57:e1:71:0f:fc:fe:11:02:b6:
71:05:51:88:6d:07:16:2c:ac:ac:78:4f:46:7d:cf:
4a:0f:b9:b5:cb:c5:70:5a:5a:e5:12:bd:32:64:32:
90:94:c5:20:18:d5:91:d2:d1:6d:ca:ca:fc:fd:69:
9d:0a:f8:18:3f:33:33:0f:cc:a9:a7:aa:c8:a8:28:
e0:d2:9c:d5:53:54:c4:5e:8e:31:38:e9:f7:cd:66:
04:f6:1b:07:00:15:4a:bf:6a:ca:03:8b:d0:ab:5c:
8a:f9:d8:e3:a4:84:8f:3e:50:99:7a:61:bc:de:3f:
5e:62:af:cb:56:d6:9c:96:17:dd:3e:70:a7:ba:3d:
3c:ac:cf:5f:de:da:41:cb:32:bd:2b:ce:55:d4:fc:
52:e7:88:ca:d4:8d:cf:8d:7c:68:b1:2c:7d:cc:45:
d5:04:81:c9:4f:69:cc:ec:ae:e5:28:5d:d4:81:4d:
de:81:e1:60:27:d1:b6:81:1a:f6:4a:14:6b:96:f2:
6a:5b:35:f8:da:0e:52:15:17:3e:37:b7:6a:b3:52:
35:11:94:5a:e6:35:28:77:e5:6d:e2:dc:9a:dd:26:
bf:31:70:fc:bd:67:61:46:00:08:c3:00:45:4e:05:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7C:6C:6E:D9:08:C1:59:07:E7:D5:C9:27:C1:3D:1B:5C:5C:1B:17
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:02:e2:f2:aa:f2:2b:da:e1:e2:d7:44:e7:c4:e7:f6:6e:65:
56:6d:d1:1c:6b:3e:20:be:8f:43:0d:21:31:24:07:00:72:a1:
b7:79:9b:29:4e:bc:c9:af:2a:7b:69:70:7d:ed:c7:67:0b:17:
d2:2c:68:b2:0f:d3:78:4b:50:6f:dc:da:f2:71:53:c3:a0:ee:
9f:1c:a3:ad:f9:ce:be:f9:28:c9:88:1f:a7:da:04:20:6e:0f:
47:8d:52:fc:e1:11:07:b2:c9:48:15:21:23:15:ab:05:fa:60:
a5:4a:bf:85:a0:c6:a9:9a:e1:55:2f:9a:1f:4c:f5:29:38:d5:
85:c8:37:2c:0c:52:72:ce:64:6a:89:d0:18:53:08:c1:ef:53:
9a:f4:91:e1:7c:54:4f:27:a3:4f:1a:92:00:8f:cf:cb:c0:4c:
6c:93:da:84:83:5f:d7:6b:3c:3d:30:e3:e7:36:f8:dd:38:d9:
4a:d6:5b:8d:8c:6a:c0:b5:aa:fd:46:aa:9d:a6:a0:ee:be:00:
84:2e:6c:52:d9:e8:de:69:a2:20:4c:87:b9:57:69:34:90:4f:
3f:6a:c5:87:5b:d0:91:6c:a8:ed:02:02:14:a5:60:e4:09:b5:
17:81:b4:00:38:9f:71:94:a8:e2:6b:25:72:09:b0:cf:c7:bd:
19:5b:8f:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6MBMu6GCTnCB75+aSroHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjUwNzI5MDIwMDE5WhcNMjUwNzMwMDIwMDE5WjAzMTEwLwYDVQQD
EyhlOTdjNmM2ZWQ5MDhjMTU5MDdlN2Q1YzkyN2MxM2QxYjVjNWMxYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZv85eQDZFw0YVZkvdk5IuoccpNX
4XEP/P4RArZxBVGIbQcWLKyseE9Gfc9KD7m1y8VwWlrlEr0yZDKQlMUgGNWR0tFt
ysr8/WmdCvgYPzMzD8ypp6rIqCjg0pzVU1TEXo4xOOn3zWYE9hsHABVKv2rKA4vQ
q1yK+djjpISPPlCZemG83j9eYq/LVtaclhfdPnCnuj08rM9f3tpByzK9K85V1PxS
54jK1I3PjXxosSx9zEXVBIHJT2nM7K7lKF3UgU3egeFgJ9G2gRr2ShRrlvJqWzX4
2g5SFRc+N7dqs1I1EZRa5jUod+Vt4tya3Sa/MXD8vWdhRgAIwwBFTgX99QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOl8bG7ZCMFZB+fVySfBPRtcXBsXMB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6QLi8qry
K9rh4tdE58Tn9m5lVm3RHGs+IL6PQw0hMSQHAHKht3mbKU68ya8qe2lwfe3HZwsX
0ixosg/TeEtQb9za8nFTw6DunxyjrfnOvvkoyYgfp9oEIG4PR41S/OERB7LJSBUh
IxWrBfpgpUq/haDGqZrhVS+aH0z1KTjVhcg3LAxScs5kaonQGFMIwe9TmvSR4XxU
TyejTxqSAI/Py8BMbJPahINf12s8PTDj5zb43TjZStZbjYxqwLWq/Uaqnaag7r4A
hC5sUtno3mmiIEyHuVdpNJBPP2rFh1vQkWyo7QICFKVg5Am1F4G0ADifcZSo4msl
cgmwz8e9GVuP4w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:27:45 2025 by rpki-client