Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier: 8PX5W4ZkWLjmljA+ddXJL7J9erB+3RwBVuISPFDhre0=
Subject key identifier: B1:44:5A:E2:60:05:AE:4E:C0:D6:62:79:A6:00:93:26:62:B7:8C:29
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 01992B8F676900AA96C7D18B0A44EB0B1202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number: 0D37
Signing time: Mon 08 Sep 2025 23:00:42 +0000
Manifest this update: Mon 08 Sep 2025 23:00:42 +0000
Manifest next update: Tue 09 Sep 2025 23:00:42 +0000
Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: 1otxhk6xkvT2m6PXd3TGrWzyuu88lDWsPelGKhXSDXg=)
2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:8f:67:69:00:aa:96:c7:d1:8b:0a:44:eb:0b:12:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Sep 8 23:00:42 2025 GMT
Not After : Sep 9 23:00:42 2025 GMT
Subject: CN=b1445ae26005ae4ec0d66279a600932662b78c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:30:9d:da:83:bd:b1:e1:f0:44:3f:43:31:
50:7c:c2:53:2e:22:17:b0:7e:29:83:2a:4a:0a:39:
be:89:10:4f:ce:79:e2:2b:1f:cb:a4:e8:30:fa:21:
7d:2f:64:4c:48:c3:1f:c0:0c:08:1b:0d:2b:6a:f7:
9c:8e:01:b4:77:ff:a4:8b:ad:03:96:5d:ae:57:6b:
ed:0c:05:76:0a:31:49:cc:e4:34:25:f4:cc:d9:f0:
57:dc:ac:34:1a:a5:f6:01:e4:58:73:a8:54:0b:fa:
4f:3a:51:01:16:a6:85:54:76:73:ea:c1:5d:c1:e0:
f9:4b:3b:a4:20:12:fe:fe:23:e8:79:fc:4a:32:c7:
84:00:22:55:25:00:99:70:ae:70:56:91:98:6c:33:
69:e8:6d:1a:83:f2:06:3e:20:6b:5e:f5:78:44:ae:
4f:88:17:a5:19:60:35:7d:80:43:7a:44:e0:18:95:
11:df:6d:bd:23:6c:2a:6b:8e:96:4d:fe:af:4d:fd:
c3:a5:87:3b:3b:da:a9:be:3e:02:a7:b5:64:8b:41:
bc:87:19:50:d2:52:1d:8d:55:fa:7b:78:26:e3:79:
b0:e0:23:b6:eb:b4:d3:22:43:32:5f:a5:18:cc:6d:
a0:22:a8:f8:9b:c9:b8:cb:97:39:81:fd:ee:76:a7:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:5A:E2:60:05:AE:4E:C0:D6:62:79:A6:00:93:26:62:B7:8C:29
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:75:d4:4e:d8:71:97:8a:20:73:9b:da:0e:bc:f4:85:ac:77:
93:47:c6:da:35:1b:d8:b8:0a:95:d0:1b:a3:53:91:e1:2a:89:
84:fe:60:f5:1b:2b:cf:e0:07:80:87:ab:38:19:d0:5e:ba:e9:
9c:47:71:f0:d6:99:ea:70:bc:ae:d9:11:b7:f3:4e:89:61:ef:
15:7f:dc:92:70:6c:20:6b:c8:47:69:5d:5e:92:77:65:2d:54:
b4:51:36:3f:06:65:7b:25:ab:f6:03:1a:cb:72:65:a3:fb:95:
c2:40:53:17:c4:69:e8:32:23:24:ef:ea:db:59:57:db:fd:e9:
d4:1f:9f:0a:ca:9c:68:58:f3:8e:3a:f7:6e:62:2c:7e:87:39:
09:9d:d0:a8:9f:30:39:97:5f:60:7e:64:38:59:82:50:70:9d:
fb:35:87:00:a2:e1:0d:5e:9e:19:99:de:a6:2d:a6:83:b0:1b:
c5:cc:8b:be:2b:65:19:77:d1:71:b6:7a:3c:06:38:31:9c:2f:
72:de:92:e4:87:2d:26:75:ed:d0:96:1f:d5:e9:48:fc:91:e0:
cd:f7:9f:16:1c:45:c6:c2:64:09:4e:a6:3f:92:db:4c:bf:d4:
ab:01:f8:91:d5:18:7b:d1:5a:f7:c3:18:9f:ae:ff:4b:88:e6:
a7:3f:3f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrj2dpAKqWx9GLCkTrCxICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDhhZmI3MmZjOTgzMjY3NzNjNWVlMWZiNDA1MmZlN2Q5
ZjBjNjgwHhcNMjUwOTA4MjMwMDQyWhcNMjUwOTA5MjMwMDQyWjAzMTEwLwYDVQQD
EyhiMTQ0NWFlMjYwMDVhZTRlYzBkNjYyNzlhNjAwOTMyNjYyYjc4YzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZAwndqDvbHh8EQ/QzFQfMJTLiIX
sH4pgypKCjm+iRBPznniKx/LpOgw+iF9L2RMSMMfwAwIGw0ravecjgG0d/+ki60D
ll2uV2vtDAV2CjFJzOQ0JfTM2fBX3Kw0GqX2AeRYc6hUC/pPOlEBFqaFVHZz6sFd
weD5SzukIBL+/iPoefxKMseEACJVJQCZcK5wVpGYbDNp6G0ag/IGPiBrXvV4RK5P
iBelGWA1fYBDekTgGJUR3229I2wqa46WTf6vTf3DpYc7O9qpvj4Cp7Vki0G8hxlQ
0lIdjVX6e3gm43mw4CO267TTIkMyX6UYzG2gIqj4m8m4y5c5gf3udqc31QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFEWuJgBa5OwNZieaYAkyZit4wpMB8GA1UdIwQY
MBaAFNBIr7cvyYMmdzxe4ftAUv59nwxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDct
Nzc5MjJiNzg1ZmQyLzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDctNzc5MjJiNzg1ZmQy
LzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3XUTthx
l4ogc5vaDrz0hax3k0fG2jUb2LgKldAbo1OR4SqJhP5g9Rsrz+AHgIerOBnQXrrp
nEdx8NaZ6nC8rtkRt/NOiWHvFX/cknBsIGvIR2ldXpJ3ZS1UtFE2PwZleyWr9gMa
y3Jlo/uVwkBTF8Rp6DIjJO/q21lX2/3p1B+fCsqcaFjzjjr3bmIsfoc5CZ3QqJ8w
OZdfYH5kOFmCUHCd+zWHAKLhDV6eGZnepi2mg7AbxcyLvitlGXfRcbZ6PAY4MZwv
ct6S5IctJnXt0JYf1elI/JHgzfefFhxFxsJkCU6mP5LbTL/UqwH4kdUYe9Fa98MY
n67/S4jmpz8/Og==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:13:13 2025 by rpki-client