Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: M+oSUY+ygDl9l4ISgG7N6xGkfNt10iWmainBb7M55MA=
Subject key identifier: 29:07:E3:8D:B0:28:36:49:EF:04:B3:C1:6D:53:23:71:07:5D:57:A1
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019855A0FD172C239BBD926A2F5334D35E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 0262
Signing time: Tue 29 Jul 2025 10:01:10 +0000
Manifest this update: Tue 29 Jul 2025 10:01:10 +0000
Manifest next update: Wed 30 Jul 2025 10:01:10 +0000
Files and hashes: 1: 5TJg2Iv73VFNhdExw4W7yWYaSDc.roa (hash: itYnIaMtVgddsFyZfv3i+VtQbQhHkGAFRlMGBpEoryI=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: qiTPrpqlh7t3haaqGHSVn0AVFeq4OMszjYEcaCftqjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:fd:17:2c:23:9b:bd:92:6a:2f:53:34:d3:5e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Jul 29 10:01:10 2025 GMT
Not After : Jul 30 10:01:10 2025 GMT
Subject: CN=2907e38db0283649ef04b3c16d532371075d57a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:f5:8d:70:ed:d1:36:e7:2c:c6:81:10:2e:
19:2e:3f:b3:4b:90:31:88:13:3e:cd:ea:fa:1c:bb:
f9:75:e8:29:f8:75:3a:93:6b:d5:41:9f:3b:34:8a:
fe:f1:b0:13:b6:82:0d:29:6e:f6:21:5d:2d:09:5c:
2f:bc:4b:a1:92:f6:71:a2:ea:1b:06:f2:84:3b:92:
87:8f:47:ab:1f:92:9a:65:ed:6d:e6:02:47:92:b4:
77:14:4a:94:23:04:70:7a:ad:67:ed:c7:7e:a3:83:
cf:27:08:68:4b:4c:57:3d:1f:35:9c:65:1f:67:5b:
cd:fc:b5:97:e4:8b:6c:48:62:c8:8c:ac:17:89:aa:
24:d5:f4:ba:c2:49:42:aa:35:9c:c8:c8:0e:2a:0a:
eb:79:d0:b8:c1:08:70:71:15:db:29:b7:34:7d:c7:
99:30:97:7a:b7:e7:e8:31:7a:30:77:a0:12:f0:79:
82:de:f4:dd:11:23:93:42:1b:01:d4:d0:1a:c1:2b:
78:90:a4:29:86:3b:11:03:a1:60:19:27:c9:b6:6c:
34:f2:b6:ee:08:c1:f3:53:1d:b0:6d:1e:7f:40:a2:
f9:16:43:28:8f:80:b8:16:ee:d5:85:4b:cc:4c:51:
35:a4:44:b9:bc:69:ec:51:58:10:ba:5a:2a:e6:5f:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:E3:8D:B0:28:36:49:EF:04:B3:C1:6D:53:23:71:07:5D:57:A1
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:df:da:72:8b:80:ba:95:75:0f:52:af:44:c7:73:48:e4:7a:
ea:32:2c:8c:b9:13:ee:7c:7b:20:16:7f:43:ed:a9:26:30:c6:
15:cc:34:08:cd:db:4e:6e:b5:d6:79:56:bb:eb:c2:4c:c2:2c:
d4:df:b9:73:fb:9f:d2:59:a4:97:51:66:23:79:33:07:4c:95:
c5:ae:d1:f2:ca:32:98:29:d0:8b:c1:c8:88:d2:db:ec:54:04:
3f:4d:51:66:7f:90:a7:0a:1e:a0:ae:05:02:14:bd:0d:5d:d2:
d4:bd:89:44:0c:b1:df:55:3d:71:e8:ab:ed:b3:54:97:a7:2f:
4b:63:99:b6:7a:24:1e:ba:7d:29:78:33:d6:10:03:c0:d9:81:
f8:20:e5:b1:a9:4e:96:d3:bb:c0:87:95:3e:da:1a:d8:f9:7e:
6a:19:66:ba:f8:72:a3:7f:fe:90:3a:9f:91:57:61:c2:37:da:
fe:f2:35:41:94:45:d7:2c:79:56:53:07:77:08:5f:5b:d1:ca:
b9:00:3a:3b:32:d9:ab:e5:9a:67:f2:c4:a2:6d:1d:29:35:0a:
53:ee:04:ce:88:0e:44:34:3d:87:fe:24:c9:c6:91:fb:41:6e:
c1:af:df:37:bc:7c:8e:57:36:1c:6d:2f:b4:df:63:fc:02:80:
62:97:65:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVoP0XLCObvZJqL1M0015nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiY2IxMjdjN2NkNzc4NjA3Mjk2Yjg4Mzg2ZTg5NGFlMWRl
Mzg1YmYwHhcNMjUwNzI5MTAwMTEwWhcNMjUwNzMwMTAwMTEwWjAzMTEwLwYDVQQD
EygyOTA3ZTM4ZGIwMjgzNjQ5ZWYwNGIzYzE2ZDUzMjM3MTA3NWQ1N2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4P1jXDt0TbnLMaBEC4ZLj+zS5Ax
iBM+zer6HLv5degp+HU6k2vVQZ87NIr+8bATtoINKW72IV0tCVwvvEuhkvZxouob
BvKEO5KHj0erH5KaZe1t5gJHkrR3FEqUIwRweq1n7cd+o4PPJwhoS0xXPR81nGUf
Z1vN/LWX5ItsSGLIjKwXiaok1fS6wklCqjWcyMgOKgrredC4wQhwcRXbKbc0fceZ
MJd6t+foMXowd6AS8HmC3vTdESOTQhsB1NAawSt4kKQphjsRA6FgGSfJtmw08rbu
CMHzUx2wbR5/QKL5FkMoj4C4Fu7VhUvMTFE1pES5vGnsUVgQuloq5l/6HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkH442wKDZJ7wSzwW1TI3EHXVehMB8GA1UdIwQY
MBaAFHvLEnx813hgcpa4g4bolK4d44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWIt
MmUyMGE3OWY3MTQ1LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWItMmUyMGE3OWY3MTQ1
LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAN/acouA
upV1D1KvRMdzSOR66jIsjLkT7nx7IBZ/Q+2pJjDGFcw0CM3bTm611nlWu+vCTMIs
1N+5c/uf0lmkl1FmI3kzB0yVxa7R8soymCnQi8HIiNLb7FQEP01RZn+QpwoeoK4F
AhS9DV3S1L2JRAyx31U9ceir7bNUl6cvS2OZtnokHrp9KXgz1hADwNmB+CDlsalO
ltO7wIeVPtoa2Pl+ahlmuvhyo3/+kDqfkVdhwjfa/vI1QZRF1yx5VlMHdwhfW9HK
uQA6OzLZq+WaZ/LEom0dKTUKU+4EzogORDQ9h/4kycaR+0Fuwa/fN7x8jlc2HG0v
tN9j/AKAYpdl2w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:40:48 2025 by rpki-client