Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: x15oY1vI2IeMqSKGUPEtSYIo1ZknP84EiMFgjSqTmPA=
Subject key identifier: B5:9A:DF:46:02:C3:4C:E3:9E:18:2E:00:40:C4:E1:D1:77:99:9A:45
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019851FA38D4E31EF12978BABAC26FC1E52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 17:00:09 +0000
Manifest this update: Mon 28 Jul 2025 17:00:09 +0000
Manifest next update: Tue 29 Jul 2025 17:00:09 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: WBk8hplo8jXMZGa1MjykL+3ZxwRN9qk7MsiFllUqnYM=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:38:d4:e3:1e:f1:29:78:ba:ba:c2:6f:c1:e5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jul 28 17:00:09 2025 GMT
Not After : Jul 29 17:00:09 2025 GMT
Subject: CN=b59adf4602c34ce39e182e0040c4e1d177999a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:98:4e:1c:b0:2f:41:a8:c3:2c:51:66:c2:
9d:18:57:98:81:17:b1:b2:45:68:f5:f6:1c:d3:a0:
32:d8:82:29:fe:59:4b:0e:21:be:f9:27:0d:14:11:
53:7a:54:9f:9b:27:e0:1e:93:f3:17:67:89:26:0b:
26:d7:8a:85:4c:bd:1b:80:08:7b:55:c0:e7:cb:86:
40:a7:aa:fa:67:f5:21:aa:62:59:23:0f:59:56:5e:
e4:6d:3b:51:ab:f1:5a:4f:b7:c7:40:f0:03:bb:fb:
f0:d4:08:dc:21:26:4e:a2:a4:f0:4a:d7:be:ae:7b:
64:ab:b8:63:cc:42:55:80:66:d7:80:33:6f:d0:12:
3a:fa:87:65:c1:ae:09:a4:24:c6:dd:e7:37:20:0e:
c3:be:cd:64:ed:74:97:3f:ce:96:e3:4e:07:0f:15:
fe:07:be:f5:e7:83:15:ac:b2:4b:bf:36:9d:d2:6b:
b8:a5:aa:c6:e2:b2:9d:c8:f9:35:41:fb:01:4a:f0:
56:90:71:77:29:10:55:12:b8:6b:a5:83:b3:b9:24:
c8:60:7e:95:aa:a6:f2:d8:62:22:22:74:ea:43:ff:
1d:f6:06:ac:cd:38:5f:61:ff:ad:fc:af:78:cf:b9:
9d:ed:db:ad:81:9e:cf:bc:e4:cd:b3:70:ef:e6:48:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:DF:46:02:C3:4C:E3:9E:18:2E:00:40:C4:E1:D1:77:99:9A:45
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:13:f8:60:24:d6:31:f6:84:73:53:e6:8e:9f:d2:07:c6:
0f:d2:60:61:21:bf:ac:36:8f:1f:8b:76:6a:e4:c5:cf:32:a7:
9a:aa:7f:bd:a9:04:58:cb:c9:bf:a8:aa:a0:13:9c:b4:77:bd:
e7:34:09:49:3b:08:e1:dc:ef:59:3c:7b:9c:79:b0:8c:1b:48:
96:a2:72:e4:49:f7:e0:f1:75:82:d5:8b:39:a5:3f:19:14:f2:
d3:47:8d:bb:ea:74:22:45:23:6d:ea:8b:64:2f:32:50:66:19:
22:7f:fb:c6:64:0f:3c:18:51:e3:fa:bf:57:30:fc:b9:ae:02:
70:b1:72:2c:77:57:97:4b:79:ce:6b:bb:ec:d3:03:93:27:3e:
07:c7:db:39:91:bf:6e:4d:2e:0b:b5:79:53:4c:84:21:c9:c6:
3d:e3:e3:34:dc:94:a1:62:3e:8b:20:41:47:ba:3a:00:6c:06:
6f:a3:8d:c7:2d:07:5e:62:0b:d5:c8:b4:cb:01:8c:26:1d:8b:
ea:6b:55:99:b0:bc:54:25:5d:ff:07:22:39:39:23:6a:4c:80:
1c:8e:7b:09:68:57:71:9c:88:d8:40:a8:f0:f4:fc:b0:45:33:
57:dc:a4:c2:44:61:90:20:e0:d1:fb:21:5c:80:13:85:ed:74:
2a:84:a7:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhR+jjU4x7xKXi6usJvweUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMmE4YWMzMDI4YjcwOTExY2I2MTExZmZkYTNhMmVmZTU1
ODg2MmQwHhcNMjUwNzI4MTcwMDA5WhcNMjUwNzI5MTcwMDA5WjAzMTEwLwYDVQQD
EyhiNTlhZGY0NjAyYzM0Y2UzOWUxODJlMDA0MGM0ZTFkMTc3OTk5YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR2YThywL0GowyxRZsKdGFeYgRex
skVo9fYc06Ay2IIp/llLDiG++ScNFBFTelSfmyfgHpPzF2eJJgsm14qFTL0bgAh7
VcDny4ZAp6r6Z/UhqmJZIw9ZVl7kbTtRq/FaT7fHQPADu/vw1AjcISZOoqTwSte+
rntkq7hjzEJVgGbXgDNv0BI6+odlwa4JpCTG3ec3IA7Dvs1k7XSXP86W404HDxX+
B77154MVrLJLvzad0mu4parG4rKdyPk1QfsBSvBWkHF3KRBVErhrpYOzuSTIYH6V
qqby2GIiInTqQ/8d9gaszThfYf+t/K94z7md7dutgZ7PvOTNs3Dv5kh3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWa30YCw0zjnhguAEDE4dF3mZpFMB8GA1UdIwQY
MBaAFHsqisMCi3CRHLYRH/2jou/lWIYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEt
ODU4ZGQxYjE2MTdmLzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEtODU4ZGQxYjE2MTdm
LzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdoT+GAk
1jH2hHNT5o6f0gfGD9JgYSG/rDaPH4t2auTFzzKnmqp/vakEWMvJv6iqoBOctHe9
5zQJSTsI4dzvWTx7nHmwjBtIlqJy5En34PF1gtWLOaU/GRTy00eNu+p0IkUjbeqL
ZC8yUGYZIn/7xmQPPBhR4/q/VzD8ua4CcLFyLHdXl0t5zmu77NMDkyc+B8fbOZG/
bk0uC7V5U0yEIcnGPePjNNyUoWI+iyBBR7o6AGwGb6ONxy0HXmIL1ci0ywGMJh2L
6mtVmbC8VCVd/wciOTkjakyAHI57CWhXcZyI2ECo8PT8sEUzV9ykwkRhkCDg0fsh
XIAThe10KoSn5w==
-----END CERTIFICATE-----
Generated at Mon Jul 28 23:13:59 2025 by rpki-client