Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: Yp82pwJE2hq5GMeWACjoZ5w0bVRxJ/T+VgAGftkJvtI=
Subject key identifier: 6B:5C:61:2D:EC:DB:25:7D:38:0F:ED:87:88:50:FE:E1:93:25:10:56
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 01974A7ADAF002469FD90472D5F34112F7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0C5B
Signing time: Sat 07 Jun 2025 13:00:54 +0000
Manifest this update: Sat 07 Jun 2025 13:00:54 +0000
Manifest next update: Sun 08 Jun 2025 13:00:54 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: FLSmqEM2YA3W87pyOHmrbeUEiaUqlWByKJ3I8eB9Cw8=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:da:f0:02:46:9f:d9:04:72:d5:f3:41:12:f7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Jun 7 13:00:54 2025 GMT
Not After : Jun 8 13:00:54 2025 GMT
Subject: CN=6b5c612decdb257d380fed878850fee193251056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:40:37:ee:75:d3:fe:82:53:f6:3b:5c:fd:
a1:c9:74:fd:2a:ad:7c:30:74:ce:46:2f:8f:15:5f:
60:07:fb:d6:b1:a0:b8:8f:a9:cb:7e:65:80:a1:70:
85:45:63:32:6d:ab:3d:6e:cc:09:c2:d0:49:3c:b6:
a4:0c:25:c8:75:6c:06:5d:f2:55:7d:77:e3:3d:50:
f1:df:c0:b9:21:ca:5a:7a:64:1f:23:30:92:f0:40:
83:26:76:68:c9:5c:de:bc:dc:79:fb:84:d0:e3:4f:
cf:23:42:e5:f5:73:a7:bc:f4:93:5b:fe:1e:1b:8a:
c5:47:c8:1f:63:d8:e1:82:20:6e:cb:23:8f:9c:02:
68:77:b3:ad:82:4e:f8:27:fd:c4:d6:c1:e4:3f:f5:
a5:c1:20:b7:f6:04:11:58:b1:c2:ea:ce:08:de:92:
06:da:f1:bb:ce:48:9d:db:d8:99:fc:7a:02:58:9c:
80:b7:8f:d1:7e:38:97:cc:05:2b:2c:cc:81:d5:f1:
b9:82:60:e7:55:b5:50:1f:b8:11:c0:99:dc:66:53:
b8:9c:7d:4e:a6:aa:9f:43:67:e7:1b:f4:19:48:9b:
b1:50:f5:d6:8a:83:cd:15:4b:5d:8a:70:3d:98:1d:
45:8f:1f:29:23:62:8b:b7:d1:7a:eb:65:a7:89:12:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:61:2D:EC:DB:25:7D:38:0F:ED:87:88:50:FE:E1:93:25:10:56
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:57:41:40:78:ed:26:38:be:97:67:36:c0:f3:7a:f0:9c:2f:
a7:d6:26:9e:f7:3b:81:53:7f:e4:6c:b8:29:3f:33:1b:2e:4a:
38:97:60:9d:16:e9:d6:39:e3:2a:cc:f7:f5:52:d1:85:f0:e3:
d1:20:ee:79:af:df:af:dd:99:b6:55:a9:e4:85:1b:89:0e:e8:
97:48:bf:f6:32:cb:bb:12:06:a9:8e:e9:04:91:5f:54:1b:f9:
fa:29:b8:81:c4:5b:2c:f3:61:c2:cb:cd:db:2d:ef:50:90:23:
fa:5a:2a:4c:3a:1f:b6:f2:6b:1c:a2:f2:75:2a:ab:3d:e0:4e:
6e:cd:02:08:76:bb:f3:50:d6:06:ad:30:9a:49:bd:d2:d7:bb:
6e:c0:50:3a:51:0d:7c:cc:4f:d3:59:86:5e:8e:70:5b:6b:4f:
bf:ce:4b:2c:e3:b9:50:d0:d9:42:40:c6:15:35:dc:1d:6c:99:
bf:af:53:30:37:33:b0:b1:98:6e:c2:fe:bb:28:25:55:4a:60:
67:57:20:0f:72:c5:9b:bc:71:ff:2a:a0:01:40:84:d2:d8:53:
25:6d:d2:3d:2d:d5:be:b5:f0:16:df:b5:ce:ae:f8:ef:f0:9b:
89:99:d7:67:94:be:6d:26:cb:55:7c:d9:0b:23:f3:f6:e7:a1:
1e:e9:72:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKetrwAkaf2QRy1fNBEvfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMDg0YjdkMzc4Yjk5M2M1ZjVlNzQ5ZjZhMzQ0ZGUyM2U0
NWFkMDAwHhcNMjUwNjA3MTMwMDU0WhcNMjUwNjA4MTMwMDU0WjAzMTEwLwYDVQQD
Eyg2YjVjNjEyZGVjZGIyNTdkMzgwZmVkODc4ODUwZmVlMTkzMjUxMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIRAN+510/6CU/Y7XP2hyXT9Kq18
MHTORi+PFV9gB/vWsaC4j6nLfmWAoXCFRWMybas9bswJwtBJPLakDCXIdWwGXfJV
fXfjPVDx38C5IcpaemQfIzCS8ECDJnZoyVzevNx5+4TQ40/PI0Ll9XOnvPSTW/4e
G4rFR8gfY9jhgiBuyyOPnAJod7Otgk74J/3E1sHkP/WlwSC39gQRWLHC6s4I3pIG
2vG7zkid29iZ/HoCWJyAt4/RfjiXzAUrLMyB1fG5gmDnVbVQH7gRwJncZlO4nH1O
pqqfQ2fnG/QZSJuxUPXWioPNFUtdinA9mB1Fjx8pI2KLt9F662WniRLTSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtcYS3s2yV9OA/th4hQ/uGTJRBWMB8GA1UdIwQY
MBaAFBEIS303i5k8X150n2o0TeI+Ra0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMt
YTI0ZDY4ZTM2NzA1LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMtYTI0ZDY4ZTM2NzA1
LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFdBQHjt
Jji+l2c2wPN68Jwvp9Ymnvc7gVN/5Gy4KT8zGy5KOJdgnRbp1jnjKsz39VLRhfDj
0SDuea/fr92ZtlWp5IUbiQ7ol0i/9jLLuxIGqY7pBJFfVBv5+im4gcRbLPNhwsvN
2y3vUJAj+loqTDoftvJrHKLydSqrPeBObs0CCHa781DWBq0wmkm90te7bsBQOlEN
fMxP01mGXo5wW2tPv85LLOO5UNDZQkDGFTXcHWyZv69TMDczsLGYbsL+uyglVUpg
Z1cgD3LFm7xx/yqgAUCE0thTJW3SPS3VvrXwFt+1zq747/CbiZnXZ5S+bSbLVXzZ
CyPz9uehHulysA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:17 2025 by rpki-client