Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: k4YzQHSEImvWyOIo91SZcagDBXw/ItqqxWa+KieA0A4=
Subject key identifier: A7:48:E7:E2:61:D2:2D:69:72:FF:BD:7E:53:4A:47:22:58:5B:D5:9D
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01983E06023367FFFF2562E16A825820AC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1221
Signing time: Thu 24 Jul 2025 20:00:37 +0000
Manifest this update: Thu 24 Jul 2025 20:00:37 +0000
Manifest next update: Fri 25 Jul 2025 20:00:37 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: bt+tSKsSTatTa7soKFwI7YoCy3mOjijJn/1Ohq7xrl0=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:06:02:33:67:ff:ff:25:62:e1:6a:82:58:20:ac:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jul 24 20:00:37 2025 GMT
Not After : Jul 25 20:00:37 2025 GMT
Subject: CN=a748e7e261d22d6972ffbd7e534a4722585bd59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:a8:cc:3d:74:b8:8d:16:fa:f8:16:da:e9:
69:74:c3:0d:02:25:43:cf:cd:e5:2a:a6:1a:52:08:
37:7b:4d:0b:85:b1:98:bf:a2:b7:e0:98:3a:99:3e:
14:f0:f0:0c:ab:e4:69:6e:5b:6c:a4:57:6e:b6:f0:
a6:d7:55:e3:ee:62:19:e7:06:60:f1:c2:45:46:58:
70:79:9f:20:71:48:10:3c:ec:14:e2:bc:57:de:bc:
4e:2d:56:50:18:89:a6:0e:3c:ba:66:dd:b1:d8:c1:
35:03:8e:ac:69:b4:b4:9f:b1:7a:d6:05:cb:c3:75:
7d:4f:d5:37:6d:fa:81:5c:01:f9:4e:3c:dc:1e:d3:
36:77:05:51:d5:72:97:54:ee:8c:c3:77:6d:d2:73:
e9:3f:bf:c8:bb:9a:b9:55:5f:00:22:29:e9:b5:a4:
13:d8:d0:c2:02:bf:c1:59:6e:ac:41:08:f4:62:77:
a5:25:0c:ef:f2:0b:0d:8c:29:c9:a6:e0:2c:13:4e:
13:0d:06:42:5a:33:af:dc:e7:96:f0:c7:ba:d7:f7:
60:e3:b8:92:5d:0a:cf:b3:a6:38:49:85:6f:c9:7b:
49:5b:cc:1d:8d:a2:32:47:4c:de:3b:ae:58:59:99:
c9:84:55:fc:9d:a9:3e:85:37:d4:e5:1c:85:5b:22:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:48:E7:E2:61:D2:2D:69:72:FF:BD:7E:53:4A:47:22:58:5B:D5:9D
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:86:59:6d:d8:9d:46:71:85:1b:c6:20:c0:5a:62:be:3e:85:
a7:09:ca:81:db:f5:43:c9:01:c4:91:ee:1d:e4:1c:53:49:22:
c5:e4:aa:b6:ad:ac:0a:3c:1c:63:54:22:97:8e:53:a8:0e:b6:
92:09:aa:62:c6:65:40:ea:2c:6b:e0:88:ae:e2:ed:12:32:2b:
31:f3:f6:74:62:db:9a:1a:fe:b0:bd:31:f2:7e:65:6b:0d:f7:
50:7d:48:04:57:17:1c:56:52:f8:cf:d0:0e:b6:3a:15:0b:39:
9b:5c:18:db:78:b0:95:62:99:ed:5f:dc:bb:30:96:11:fc:c4:
c8:02:47:33:56:78:61:fa:f2:63:99:c9:54:e2:85:79:64:db:
2b:5a:c3:9e:6b:1c:96:2e:6d:0e:ad:b7:74:33:25:3d:98:d6:
16:4d:44:8d:92:23:08:47:48:ee:1a:71:be:b8:d5:c8:35:0f:
90:69:ee:28:3b:28:6b:04:49:ab:5f:bc:f0:9f:20:3f:8e:30:
09:39:eb:11:46:1f:ea:9b:b6:22:5d:5c:a7:01:dc:0a:39:be:
61:6a:36:bc:51:cd:57:7c:94:32:cb:2a:89:1d:07:e6:d2:20:
55:68:03:4a:12:8d:48:a0:3d:08:d6:6c:62:db:ae:7b:fe:fb:
6d:0c:2b:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+BgIzZ///JWLhaoJYIKxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz
YjRjYzMwHhcNMjUwNzI0MjAwMDM3WhcNMjUwNzI1MjAwMDM3WjAzMTEwLwYDVQQD
EyhhNzQ4ZTdlMjYxZDIyZDY5NzJmZmJkN2U1MzRhNDcyMjU4NWJkNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse6ozD10uI0W+vgW2ulpdMMNAiVD
z83lKqYaUgg3e00LhbGYv6K34Jg6mT4U8PAMq+RpbltspFdutvCm11Xj7mIZ5wZg
8cJFRlhweZ8gcUgQPOwU4rxX3rxOLVZQGImmDjy6Zt2x2ME1A46sabS0n7F61gXL
w3V9T9U3bfqBXAH5TjzcHtM2dwVR1XKXVO6Mw3dt0nPpP7/Iu5q5VV8AIinptaQT
2NDCAr/BWW6sQQj0YnelJQzv8gsNjCnJpuAsE04TDQZCWjOv3OeW8Me61/dg47iS
XQrPs6Y4SYVvyXtJW8wdjaIyR0zeO65YWZnJhFX8nak+hTfU5RyFWyLPvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdI5+Jh0i1pcv+9flNKRyJYW9WdMB8GA1UdIwQY
MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt
M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx
LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYZZbdid
RnGFG8YgwFpivj6FpwnKgdv1Q8kBxJHuHeQcU0kixeSqtq2sCjwcY1Qil45TqA62
kgmqYsZlQOosa+CIruLtEjIrMfP2dGLbmhr+sL0x8n5law33UH1IBFcXHFZS+M/Q
DrY6FQs5m1wY23iwlWKZ7V/cuzCWEfzEyAJHM1Z4YfryY5nJVOKFeWTbK1rDnmsc
li5tDq23dDMlPZjWFk1EjZIjCEdI7hpxvrjVyDUPkGnuKDsoawRJq1+88J8gP44w
CTnrEUYf6pu2Il1cpwHcCjm+YWo2vFHNV3yUMssqiR0H5tIgVWgDShKNSKA9CNZs
Ytuue/77bQwrWA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:20 2025 by rpki-client