Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: UdHJEf0RWAxkbX8soTdp6dSzJ9L9AbH+sp91zzvFMQ8=
Subject key identifier: 4A:B8:40:D8:7E:2F:EB:51:12:5B:13:A0:9B:BC:DE:F2:16:13:5C:D6
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 01984C2F74774D65FC5A83EF25B6C0DBC77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 14:00:34 +0000
Manifest this update: Sun 27 Jul 2025 14:00:34 +0000
Manifest next update: Mon 28 Jul 2025 14:00:34 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: 6wXjW0IiiM/rXDv9S2k3bfRZ3vZfkB9gQj35APGLIPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:74:77:4d:65:fc:5a:83:ef:25:b6:c0:db:c7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Jul 27 14:00:34 2025 GMT
Not After : Jul 28 14:00:34 2025 GMT
Subject: CN=4ab840d87e2feb51125b13a09bbcdef216135cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:d5:99:a2:9a:6e:7b:27:ce:bd:56:8a:d2:
cd:a2:95:e3:fe:04:a6:4a:8e:a3:a9:8a:b2:75:07:
3d:c2:8d:5f:88:6f:2f:cc:40:15:9f:c2:b9:9b:3d:
82:85:8b:bb:f0:71:82:f1:72:34:3f:40:14:e6:ab:
41:83:ed:0e:49:aa:59:5f:de:32:d4:b9:37:23:9d:
e2:5b:4e:dd:e7:65:6a:12:d6:bb:c4:d4:b0:45:42:
82:3b:a2:73:a0:44:f6:bb:c0:86:df:d6:4c:a2:1b:
ed:b3:17:9d:75:18:ab:bd:f8:65:69:c5:4c:e8:72:
56:cf:00:41:f0:00:fc:31:3d:27:f7:9d:71:20:f5:
5d:03:9f:f6:74:ee:c7:3c:fc:9f:1b:5a:12:33:24:
44:f6:0f:a9:ea:cc:d5:ab:c4:3c:58:ca:4e:65:8b:
82:7a:8b:d0:5b:1b:7d:76:55:15:72:67:fd:f5:6a:
87:24:c1:cc:4d:62:ff:c8:00:11:af:ba:f2:db:2b:
11:09:7e:09:e1:67:b5:ea:21:b0:f3:c1:f2:23:18:
d6:dd:89:a5:20:2b:9b:f8:a3:48:9d:de:35:99:64:
91:2a:12:fe:bc:ac:bf:fa:f3:b5:6d:5c:b6:9a:01:
04:16:92:0b:1a:a9:4b:93:a5:a2:38:a0:a7:63:4d:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:40:D8:7E:2F:EB:51:12:5B:13:A0:9B:BC:DE:F2:16:13:5C:D6
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:3a:da:69:35:46:c1:1b:78:29:fe:ca:bd:4e:18:a1:49:
4f:6e:da:44:6c:3e:20:b3:f3:ba:f9:bf:10:91:54:9c:a5:76:
ca:2f:b8:0f:d2:9e:41:b5:27:f5:db:c4:f1:6e:6b:43:42:d8:
7d:fe:27:d5:c7:2f:9a:39:98:93:2e:8d:e8:0f:6f:f5:f9:7d:
2c:fe:da:53:1b:37:a4:19:ec:8f:5a:27:6f:49:06:56:ae:df:
b4:50:9f:c3:cf:6b:b7:b8:24:4f:7e:54:3f:0e:4c:4f:db:c9:
dd:fc:15:e5:4d:53:84:c2:06:42:91:4c:d7:07:c3:76:96:fa:
0e:68:e7:66:da:8e:5e:cd:f6:f8:0b:43:72:35:0f:94:bc:09:
b4:46:5b:61:ff:db:ef:9d:65:84:6e:f0:29:d3:21:1d:b6:07:
b5:96:c0:8f:71:5e:df:64:1f:11:0b:80:c3:97:78:8f:01:33:
e1:0e:3d:2f:3c:0b:49:53:46:41:0c:3c:12:72:eb:73:2d:88:
3e:c8:fd:1f:90:a9:25:d6:7a:7d:d9:a4:9d:e2:39:5d:f7:60:
58:f4:d8:80:78:a8:ca:a7:f3:ff:26:4f:0d:1f:7c:fd:14:54:
20:aa:eb:c7:da:fd:3e:62:ee:4f:f7:fa:37:b2:1a:23:d9:2f:
3f:15:d7:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhML3R3TWX8WoPvJbbA28d6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2NmMTM3MjQ1YWVjNjZiMmY2NzRhODU4MWE3NDQ5YWUy
Y2ZjZTQwHhcNMjUwNzI3MTQwMDM0WhcNMjUwNzI4MTQwMDM0WjAzMTEwLwYDVQQD
Eyg0YWI4NDBkODdlMmZlYjUxMTI1YjEzYTA5YmJjZGVmMjE2MTM1Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx/VmaKabnsnzr1WitLNopXj/gSm
So6jqYqydQc9wo1fiG8vzEAVn8K5mz2ChYu78HGC8XI0P0AU5qtBg+0OSapZX94y
1Lk3I53iW07d52VqEta7xNSwRUKCO6JzoET2u8CG39ZMohvtsxeddRirvfhlacVM
6HJWzwBB8AD8MT0n951xIPVdA5/2dO7HPPyfG1oSMyRE9g+p6szVq8Q8WMpOZYuC
eovQWxt9dlUVcmf99WqHJMHMTWL/yAARr7ry2ysRCX4J4We16iGw88HyIxjW3Yml
ICub+KNInd41mWSRKhL+vKy/+vO1bVy2mgEEFpILGqlLk6WiOKCnY02hkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq4QNh+L+tRElsToJu83vIWE1zWMB8GA1UdIwQY
MBaAFHrM8TckWuxmsvZ0qFgadEmuLPzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTIt
N2ZjM2ZlMDVmMzEwLzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTItN2ZjM2ZlMDVmMzEw
LzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPI62mk1
RsEbeCn+yr1OGKFJT27aRGw+ILPzuvm/EJFUnKV2yi+4D9KeQbUn9dvE8W5rQ0LY
ff4n1ccvmjmYky6N6A9v9fl9LP7aUxs3pBnsj1onb0kGVq7ftFCfw89rt7gkT35U
Pw5MT9vJ3fwV5U1ThMIGQpFM1wfDdpb6DmjnZtqOXs32+AtDcjUPlLwJtEZbYf/b
751lhG7wKdMhHbYHtZbAj3Fe32QfEQuAw5d4jwEz4Q49LzwLSVNGQQw8EnLrcy2I
Psj9H5CpJdZ6fdmkneI5XfdgWPTYgHioyqfz/yZPDR98/RRUIKrrx9r9PmLuT/f6
N7IaI9kvPxXX+g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 17:20:15 2025 by rpki-client