Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: Gvy++CZXb5VT1fZnJQUHUR5nvfnz1VY3jVAXViIgpLo=
Subject key identifier: B3:FE:FB:C5:60:C7:43:5A:E3:89:78:5A:21:28:30:98:28:9E:34:02
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019849D2C1F91BD5239E7A1F4A30F2C3F97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0C96
Signing time: Sun 27 Jul 2025 03:00:05 +0000
Manifest this update: Sun 27 Jul 2025 03:00:05 +0000
Manifest next update: Mon 28 Jul 2025 03:00:05 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: M0ELGw7BlHlTA/OQbDfIFAssB1BDIHhY+Aa/5vAYOSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c1:f9:1b:d5:23:9e:7a:1f:4a:30:f2:c3:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jul 27 03:00:05 2025 GMT
Not After : Jul 28 03:00:05 2025 GMT
Subject: CN=b3fefbc560c7435ae389785a21283098289e3402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:90:19:64:4b:5e:40:8f:6b:12:94:f7:0b:
40:7e:f3:df:bb:de:4f:23:5f:b9:3c:e0:ef:30:4e:
1a:f5:0b:24:37:12:8d:b5:68:2d:fe:44:36:f9:ec:
f7:45:21:40:93:2b:f6:74:70:57:d3:0b:8c:61:5b:
48:0b:d6:79:0d:ed:8a:8b:4b:87:0d:87:41:84:3a:
d8:14:7b:da:90:e5:d8:2c:a0:cd:76:6b:ab:2b:16:
05:70:ec:46:27:1d:96:82:02:70:21:10:ea:25:ce:
bd:73:6d:4d:dd:20:e3:3b:ab:e5:f5:27:0c:65:3c:
32:6a:4e:09:59:99:9e:ab:1d:d7:a8:0c:84:ab:9a:
f9:86:ef:90:75:e7:f1:28:0a:9e:b4:d2:b9:66:13:
01:5b:57:c9:b2:f1:46:eb:a1:33:57:a9:5f:dd:92:
e1:61:0e:38:93:9c:03:93:d9:9d:14:4c:c0:71:e1:
9e:83:5f:db:22:e5:b8:72:8f:a7:7f:0c:a4:e9:11:
f6:42:bb:44:53:8b:18:06:91:69:8d:f7:5e:3e:6f:
7d:67:92:9e:d5:1a:2e:13:3d:2f:75:a9:5a:b3:21:
2e:46:db:90:22:9c:64:13:93:2e:5d:88:f2:d3:6d:
df:22:7c:b3:67:9a:38:ad:8d:fa:32:9f:50:72:61:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FE:FB:C5:60:C7:43:5A:E3:89:78:5A:21:28:30:98:28:9E:34:02
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a2:c6:40:74:c4:74:f3:ab:bc:d7:ff:ad:48:8d:ce:4c:ef:
f7:19:b3:2e:c0:d8:72:12:b6:8c:37:29:d5:a8:3a:b2:70:9c:
f0:1e:e2:64:b7:3c:b7:7a:c5:5e:94:9e:44:8a:16:2c:61:09:
1f:19:0b:dd:dd:db:49:42:9c:20:e2:ac:0c:fa:b0:4d:fc:80:
0c:69:8c:ec:1e:8c:a4:29:80:21:63:bf:33:3f:13:d5:d7:9f:
b3:75:b2:ef:b3:62:6a:14:27:14:15:98:fa:56:b1:96:1c:80:
eb:c9:22:8c:a3:fb:30:91:54:43:6d:a1:f6:a2:13:a6:54:46:
0f:5d:ed:e6:55:02:3d:d4:18:17:2e:03:1c:cf:49:89:fb:4d:
60:be:ef:4a:7c:3d:9a:16:80:2b:6d:64:a8:8c:71:12:76:a9:
58:91:15:4c:6b:a7:93:f6:d5:68:68:d1:6e:43:98:1b:00:dd:
b3:0e:8b:d4:53:5c:90:fe:b9:02:40:a2:8e:0e:f3:32:86:88:
90:af:7e:b3:61:a7:8f:06:51:46:8b:59:97:62:26:03:cb:4e:
0e:ec:33:08:69:c5:97:72:9c:77:41:5f:c1:a0:dc:2e:e9:e9:
8f:9d:c6:c2:fe:ac:95:65:ef:a1:69:84:e2:82:02:ee:64:ce:
c2:cf:0a:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0sH5G9UjnnofSjDyw/l+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZGIzYzVkOTUxZWJlYmI4NmE5OWE4NGQyMzhlN2ZjYTc1
OGUyOTYwHhcNMjUwNzI3MDMwMDA1WhcNMjUwNzI4MDMwMDA1WjAzMTEwLwYDVQQD
EyhiM2ZlZmJjNTYwYzc0MzVhZTM4OTc4NWEyMTI4MzA5ODI4OWUzNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQiQGWRLXkCPaxKU9wtAfvPfu95P
I1+5PODvME4a9QskNxKNtWgt/kQ2+ez3RSFAkyv2dHBX0wuMYVtIC9Z5De2Ki0uH
DYdBhDrYFHvakOXYLKDNdmurKxYFcOxGJx2WggJwIRDqJc69c21N3SDjO6vl9ScM
ZTwyak4JWZmeqx3XqAyEq5r5hu+QdefxKAqetNK5ZhMBW1fJsvFG66EzV6lf3ZLh
YQ44k5wDk9mdFEzAceGeg1/bIuW4co+nfwyk6RH2QrtEU4sYBpFpjfdePm99Z5Ke
1RouEz0vdalasyEuRtuQIpxkE5MuXYjy023fInyzZ5o4rY36Mp9QcmFxhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP++8Vgx0Na44l4WiEoMJgonjQCMB8GA1UdIwQY
MBaAFHvbPF2VHr67hqmahNI45/ynWOKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2It
NzdmNjc2M2Y0ZDJiLzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJi
LzEvZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqLGQHTE
dPOrvNf/rUiNzkzv9xmzLsDYchK2jDcp1ag6snCc8B7iZLc8t3rFXpSeRIoWLGEJ
HxkL3d3bSUKcIOKsDPqwTfyADGmM7B6MpCmAIWO/Mz8T1defs3Wy77NiahQnFBWY
+laxlhyA68kijKP7MJFUQ22h9qITplRGD13t5lUCPdQYFy4DHM9JiftNYL7vSnw9
mhaAK21kqIxxEnapWJEVTGunk/bVaGjRbkOYGwDdsw6L1FNckP65AkCijg7zMoaI
kK9+s2GnjwZRRotZl2ImA8tODuwzCGnFl3Kcd0FfwaDcLunpj53Gwv6slWXvoWmE
4oIC7mTOws8KzA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:11 2025 by rpki-client