Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier: jD53KYxhXKi7pYiyneYUn8p57UsrI6xqHEG0IfHLXto=
Subject key identifier: 1C:72:FE:91:75:C2:F5:A9:39:9D:7E:51:4F:8F:AA:F3:7E:71:D2:B7
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 019918E504238D5EF049A548DBBA3A2328D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number: 127C
Signing time: Fri 05 Sep 2025 08:01:25 +0000
Manifest this update: Fri 05 Sep 2025 08:01:25 +0000
Manifest next update: Sat 06 Sep 2025 08:01:25 +0000
Files and hashes: 1: 6T07akuBxgvG0izMFImIY3LJxqs.roa (hash: XGRbraQFnaK7TkdQ/duWwEkwP4S4BhjaDtKSynptX9M=)
2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: Rv+Y336hxG0aLquOaw2IgtS7xtixYkX5DWETfeUzYe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:e5:04:23:8d:5e:f0:49:a5:48:db:ba:3a:23:28:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Sep 5 08:01:25 2025 GMT
Not After : Sep 6 08:01:25 2025 GMT
Subject: CN=1c72fe9175c2f5a9399d7e514f8faaf37e71d2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:c2:93:f9:7a:e1:3d:2d:c5:7f:a2:e4:cd:
3e:97:c3:f1:d8:1c:4b:30:9c:2a:af:16:da:83:1e:
50:d4:2e:4b:89:76:1c:4a:45:4a:64:9f:4c:ca:64:
57:24:ab:81:e0:f3:a1:fa:04:27:2d:bd:d8:fc:f6:
e4:90:7b:30:c5:29:f4:f8:c9:45:0d:18:ac:3c:38:
a6:f1:f0:1f:e1:bb:e6:9f:c5:2b:76:9f:ac:8d:b4:
5d:54:c5:97:da:71:72:68:e0:c4:8d:78:a7:f6:55:
3b:e8:9f:42:36:21:cc:fd:2c:42:66:06:51:c3:9f:
32:71:13:11:81:91:0d:80:2f:96:47:92:a4:06:1e:
d6:2f:c5:d8:40:d5:d8:f3:84:c6:e7:f7:29:9e:bc:
55:64:5b:39:d7:e8:14:ad:7e:95:4a:15:12:75:94:
fc:88:61:de:b3:20:97:cf:b0:93:bb:64:42:b6:98:
7e:cd:86:2f:46:45:b5:0c:c4:e4:22:9d:8c:f8:11:
d9:92:29:4b:1f:24:42:6a:03:d0:c8:fa:6e:cb:bb:
c1:7a:73:68:86:39:34:b5:b7:86:3b:6d:e7:bc:ca:
57:e8:b8:5d:6b:00:5a:22:78:57:ab:01:8a:f1:ca:
fc:c7:7e:44:a4:70:07:fb:b1:cc:66:c3:67:90:a6:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:FE:91:75:C2:F5:A9:39:9D:7E:51:4F:8F:AA:F3:7E:71:D2:B7
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:2a:d7:0a:20:ab:d0:6f:7b:2f:85:f9:3d:42:5e:8e:ac:
90:d6:54:46:b3:95:6e:06:c1:a7:32:cb:ee:29:ac:fd:4b:86:
50:fe:d4:52:37:46:d9:21:3a:30:a3:19:f2:cc:40:7a:4c:c7:
09:ab:20:b5:0a:23:d2:54:a8:bf:01:e2:fa:90:9c:5f:c1:a5:
3c:31:d3:65:3f:91:5d:ea:9f:1d:9c:10:ed:74:0c:fa:68:5b:
76:3d:61:ce:7b:9e:70:3b:e9:34:05:b4:c8:51:68:79:5a:7b:
b5:95:81:44:a8:c3:43:0b:22:a0:3b:51:38:7a:0d:f5:e6:35:
4c:ae:55:0f:fc:f2:6c:e3:76:92:61:85:5e:b8:76:51:d7:60:
ff:82:95:a1:bd:a2:bd:53:9d:b0:44:36:7e:60:86:69:eb:59:
93:24:d5:b1:d3:90:19:1a:f2:0f:8f:40:ef:dc:e4:15:9b:dd:
45:a9:90:45:f6:20:29:8c:e6:4b:1f:5e:1c:53:9c:2b:c4:9a:
16:ac:d0:54:f9:e6:b4:a4:54:39:04:b7:2a:9d:e5:55:03:bb:
9e:6d:18:27:6a:55:e3:4a:91:3f:4f:8a:73:31:41:6e:3a:31:
db:c6:e0:40:57:94:bc:ad:25:81:d2:2f:6e:db:4e:7a:4e:5d:
26:ee:da:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkY5QQjjV7wSaVI27o6IyjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk
ODdlOGUwHhcNMjUwOTA1MDgwMTI1WhcNMjUwOTA2MDgwMTI1WjAzMTEwLwYDVQQD
EygxYzcyZmU5MTc1YzJmNWE5Mzk5ZDdlNTE0ZjhmYWFmMzdlNzFkMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaPCk/l64T0txX+i5M0+l8Px2BxL
MJwqrxbagx5Q1C5LiXYcSkVKZJ9MymRXJKuB4POh+gQnLb3Y/PbkkHswxSn0+MlF
DRisPDim8fAf4bvmn8Urdp+sjbRdVMWX2nFyaODEjXin9lU76J9CNiHM/SxCZgZR
w58ycRMRgZENgC+WR5KkBh7WL8XYQNXY84TG5/cpnrxVZFs51+gUrX6VShUSdZT8
iGHesyCXz7CTu2RCtph+zYYvRkW1DMTkIp2M+BHZkilLHyRCagPQyPpuy7vBenNo
hjk0tbeGO23nvMpX6LhdawBaInhXqwGK8cr8x35EpHAH+7HMZsNnkKasIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxy/pF1wvWpOZ1+UU+PqvN+cdK3MB8GA1UdIwQY
MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt
ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4
LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJEq1wog
q9Bvey+F+T1CXo6skNZURrOVbgbBpzLL7ims/UuGUP7UUjdG2SE6MKMZ8sxAekzH
CasgtQoj0lSovwHi+pCcX8GlPDHTZT+RXeqfHZwQ7XQM+mhbdj1hznuecDvpNAW0
yFFoeVp7tZWBRKjDQwsioDtROHoN9eY1TK5VD/zybON2kmGFXrh2Uddg/4KVob2i
vVOdsEQ2fmCGaetZkyTVsdOQGRryD49A79zkFZvdRamQRfYgKYzmSx9eHFOcK8Sa
FqzQVPnmtKRUOQS3Kp3lVQO7nm0YJ2pV40qRP0+KczFBbjox28bgQFeUvK0lgdIv
bttOek5dJu7amw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 11:06:15 2025 by rpki-client