Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: xDmmccJPcdyaguCE43F+38xHFn+j1qjU9/NOkXkJwVE=
Subject key identifier: 03:0B:E9:84:A8:7C:47:F9:E4:66:3C:7D:32:58:CF:3D:E7:E6:39:48
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 0198451A74785971D72A5744234F2B61D9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 0545
Signing time: Sat 26 Jul 2025 05:00:18 +0000
Manifest this update: Sat 26 Jul 2025 05:00:18 +0000
Manifest next update: Sun 27 Jul 2025 05:00:18 +0000
Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: pWJMfAG+PZxQaUPgoydQlIuagTS+aPFWdA+5gcgoIjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:74:78:59:71:d7:2a:57:44:23:4f:2b:61:d9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Jul 26 05:00:18 2025 GMT
Not After : Jul 27 05:00:18 2025 GMT
Subject: CN=030be984a87c47f9e4663c7d3258cf3de7e63948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:e2:d8:4d:f3:96:02:b7:5f:7a:2e:2a:0e:
b3:18:26:3e:45:70:5d:9a:2a:ca:b0:28:5d:19:4f:
51:63:3f:4d:80:1b:84:1c:5f:21:79:cf:3f:64:e7:
3e:c5:87:61:98:1b:d7:6a:b1:a0:35:df:00:f1:b4:
cf:bf:ac:b2:aa:42:9f:20:3e:dc:44:c7:58:09:cc:
da:49:df:8a:35:34:dd:bd:57:75:65:cc:2f:8f:e2:
4e:1d:2b:15:93:ff:ce:25:9c:5e:5d:e7:56:b2:e9:
6f:26:66:df:76:a9:cf:90:7b:50:32:58:96:4d:cb:
f8:b0:21:92:e2:28:e5:a5:39:2a:98:96:79:01:0c:
07:62:f2:62:5c:f5:a8:06:7d:ea:fc:98:55:2d:23:
8c:c7:0a:68:d2:15:d2:22:d3:ea:18:fe:7b:5f:28:
46:a0:51:db:54:fb:1a:18:69:31:28:68:f9:aa:bd:
c1:76:85:18:9a:94:c2:52:05:07:b5:57:a6:a7:cd:
bb:08:74:b6:33:6c:0c:f8:47:67:5c:77:15:95:1f:
4f:25:54:77:cd:65:3c:69:0e:0f:db:1b:d7:c4:db:
fd:94:a3:06:a4:de:fd:83:79:93:69:3d:71:c1:16:
5e:51:71:29:43:8b:2f:9b:6e:c3:b1:4c:34:5b:73:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0B:E9:84:A8:7C:47:F9:E4:66:3C:7D:32:58:CF:3D:E7:E6:39:48
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b9:d1:bf:16:ec:b6:ed:cd:3c:10:6a:67:16:33:2c:f3:95:
17:c2:8c:30:62:aa:c5:2b:8d:74:08:8a:bf:8a:cb:59:0e:a8:
1a:fb:39:e9:ab:dc:02:2f:e0:13:46:c5:34:a3:0f:dc:8c:ba:
82:db:0a:f3:e5:80:a2:81:b8:43:71:2a:8f:67:df:92:51:b5:
64:63:da:4e:9b:12:e8:aa:37:2d:b0:89:ee:33:1c:78:05:92:
19:2b:1f:89:f6:d7:65:4f:e4:4e:f6:c4:ec:fa:cb:fc:d0:14:
fd:d2:b2:2a:e9:76:71:3d:e1:d4:66:46:3a:73:85:b9:c5:98:
59:12:0c:bb:31:ea:0c:5e:5c:ca:6b:52:74:97:0b:94:56:62:
36:4d:d3:42:24:32:b4:3a:87:d8:68:4d:2f:03:8a:4e:fe:f8:
81:c7:5f:56:09:d4:51:70:08:82:98:e5:41:0c:a2:11:ca:d7:
90:9a:35:d6:ec:9e:64:d0:0b:af:5e:28:64:9b:4d:53:8b:d6:
b9:a0:23:16:fa:90:aa:fc:d1:4c:60:f1:fa:ae:aa:e1:84:22:
26:4f:11:92:94:03:b0:68:e7:54:0d:28:15:97:48:c5:52:7a:
82:81:c4:01:e9:93:ff:1b:67:34:65:a0:77:48:dd:ef:ee:cf:
03:8e:5c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGnR4WXHXKldEI08rYdn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYWIxNzdlNGE0ZmZlZWI5ZWExZmQzNTc2NmMzYjhhODcz
MTFkZTgwHhcNMjUwNzI2MDUwMDE4WhcNMjUwNzI3MDUwMDE4WjAzMTEwLwYDVQQD
EygwMzBiZTk4NGE4N2M0N2Y5ZTQ2NjNjN2QzMjU4Y2YzZGU3ZTYzOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBzi2E3zlgK3X3ouKg6zGCY+RXBd
mirKsChdGU9RYz9NgBuEHF8hec8/ZOc+xYdhmBvXarGgNd8A8bTPv6yyqkKfID7c
RMdYCczaSd+KNTTdvVd1Zcwvj+JOHSsVk//OJZxeXedWsulvJmbfdqnPkHtQMliW
Tcv4sCGS4ijlpTkqmJZ5AQwHYvJiXPWoBn3q/JhVLSOMxwpo0hXSItPqGP57XyhG
oFHbVPsaGGkxKGj5qr3BdoUYmpTCUgUHtVemp827CHS2M2wM+EdnXHcVlR9PJVR3
zWU8aQ4P2xvXxNv9lKMGpN79g3mTaT1xwRZeUXEpQ4svm27DsUw0W3OT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAML6YSofEf55GY8fTJYzz3n5jlIMB8GA1UdIwQY
MBaAFBGrF35KT/7rnqH9NXZsO4qHMR3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFzWGZrcFBfdXVlb2YwMWRtdzdpb2N4SGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yMjlkM2QtYzBlYS00ZTExLTk1MDkt
NWViNGE1NWYwMTE5LzEvRWFzWGZrcFBfdXVlb2YwMWRtdzdpb2N4SGVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yMjlkM2QtYzBlYS00ZTExLTk1MDktNWViNGE1NWYwMTE5
LzEvRWFzWGZrcFBfdXVlb2YwMWRtdzdpb2N4SGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebnRvxbs
tu3NPBBqZxYzLPOVF8KMMGKqxSuNdAiKv4rLWQ6oGvs56avcAi/gE0bFNKMP3Iy6
gtsK8+WAooG4Q3Eqj2ffklG1ZGPaTpsS6Ko3LbCJ7jMceAWSGSsfifbXZU/kTvbE
7PrL/NAU/dKyKul2cT3h1GZGOnOFucWYWRIMuzHqDF5cymtSdJcLlFZiNk3TQiQy
tDqH2GhNLwOKTv74gcdfVgnUUXAIgpjlQQyiEcrXkJo11uyeZNALr14oZJtNU4vW
uaAjFvqQqvzRTGDx+q6q4YQiJk8RkpQDsGjnVA0oFZdIxVJ6goHEAemT/xtnNGWg
d0jd7+7PA45c/w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:01 2025 by rpki-client