Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: NUvg2XUaxB+0e0nk7ZQZSwrCEDV60iBRNJpQi86QUGs=
Subject key identifier: 10:0E:31:3C:E3:B9:8C:5E:91:78:25:DC:E3:0E:9E:EA:BC:3D:F5:91
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01973D64511EF0D17C477AD6E6B67784A86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 157D
Signing time: Thu 05 Jun 2025 00:01:13 +0000
Manifest this update: Thu 05 Jun 2025 00:01:13 +0000
Manifest next update: Fri 06 Jun 2025 00:01:13 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: Oq+7+2z6rtFqAGXTEysTq/QqLLf8AE4B0VhZUlJTfIQ=)
4: Lhc4yA3jd8j7g6n7KG81PHwkNHA.roa (hash: RY0G2x4F2FmW8VJCMd43Nl3qoENwRZMQ0FWtUZlg72M=)
5: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
6: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
7: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
8: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3d:64:51:1e:f0:d1:7c:47:7a:d6:e6:b6:77:84:a8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jun 5 00:01:13 2025 GMT
Not After : Jun 6 00:01:13 2025 GMT
Subject: CN=100e313ce3b98c5e917825dce30e9eeabc3df591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:b7:96:75:1e:72:9f:ee:20:7c:a5:d1:b9:
02:1a:d5:03:1d:4b:37:7d:89:8b:4e:4c:45:ef:b5:
b1:c1:87:53:d2:94:41:33:33:68:b2:95:01:4d:b4:
84:77:9a:e4:b6:0b:bc:3a:ce:0d:d4:86:05:ae:c5:
c6:91:88:e0:16:d7:35:d0:5d:39:d7:f8:d5:78:ea:
9c:4a:c2:72:01:11:c0:a1:69:7b:9b:d9:9a:50:30:
09:61:5e:f4:07:f2:0b:d4:de:18:48:21:80:da:59:
a5:9a:ae:7b:6e:7b:8b:04:3f:cc:e7:6d:5a:83:d9:
af:7f:71:f7:3f:45:0c:61:62:70:03:c0:8b:a8:a9:
aa:77:36:4e:61:7b:e6:b0:89:e1:ba:18:35:8f:10:
a8:f3:1b:31:1e:27:ac:9a:72:c7:de:e4:c9:d7:c8:
b6:f6:26:0c:d3:83:b4:39:68:b4:04:31:ce:18:bc:
8d:75:63:64:53:78:60:9e:62:ef:76:03:69:13:82:
20:6b:a2:72:ba:dc:86:e3:a8:6c:cc:35:97:ed:ae:
fe:ca:43:9e:2d:02:f1:82:08:f9:8b:03:e0:a6:3a:
1c:a8:ce:11:5f:79:67:da:b9:86:74:77:0e:6b:0b:
79:d3:03:e1:5a:a0:5e:7b:d3:5b:82:1c:83:49:5d:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0E:31:3C:E3:B9:8C:5E:91:78:25:DC:E3:0E:9E:EA:BC:3D:F5:91
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5e:2e:52:a3:de:6c:d7:70:98:96:fe:6f:6b:a6:2f:7c:cd:
af:cd:f3:de:96:25:6f:f0:2f:a4:a3:3b:9f:c9:89:0c:f6:c9:
f2:17:51:33:31:6c:99:ef:c9:ba:e7:49:36:17:c9:37:3b:34:
6d:62:74:70:53:be:e2:25:c1:86:19:ec:43:4e:03:ad:ce:85:
20:12:b6:33:00:d5:77:90:20:f6:38:17:4c:ee:66:5f:4a:fd:
53:d6:b0:57:4c:d4:d6:1f:76:1e:cc:bf:2d:88:8a:8e:3b:2c:
b1:bc:48:7b:fe:77:13:cb:09:e0:7a:5f:83:df:e3:c5:b1:f3:
43:13:89:89:11:a6:dd:c8:22:10:22:69:74:bc:8c:80:67:27:
39:b4:99:fc:d0:0f:9c:b5:f0:ff:27:fa:f3:16:bc:14:3b:25:
a4:b1:cf:26:02:7c:40:ed:80:4a:e5:39:54:72:f2:e0:96:c7:
e3:16:d0:4b:83:05:3f:e1:0c:d2:27:6f:2a:37:36:48:20:5e:
01:25:a3:10:63:48:24:4a:29:8c:8f:4c:7c:79:17:3f:17:70:
f9:a3:cc:ac:8e:f9:a5:5a:e3:8a:76:ee:76:38:ae:40:b8:ab:
f4:ea:a2:71:21:a9:ef:76:d8:47:ba:98:9b:e1:49:8e:ac:ca:
be:2a:32:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc9ZFEe8NF8R3rW5rZ3hKhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjUwNjA1MDAwMTEzWhcNMjUwNjA2MDAwMTEzWjAzMTEwLwYDVQQD
EygxMDBlMzEzY2UzYjk4YzVlOTE3ODI1ZGNlMzBlOWVlYWJjM2RmNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsC3lnUecp/uIHyl0bkCGtUDHUs3
fYmLTkxF77WxwYdT0pRBMzNospUBTbSEd5rktgu8Os4N1IYFrsXGkYjgFtc10F05
1/jVeOqcSsJyARHAoWl7m9maUDAJYV70B/IL1N4YSCGA2lmlmq57bnuLBD/M521a
g9mvf3H3P0UMYWJwA8CLqKmqdzZOYXvmsInhuhg1jxCo8xsxHiesmnLH3uTJ18i2
9iYM04O0OWi0BDHOGLyNdWNkU3hgnmLvdgNpE4Iga6JyutyG46hszDWX7a7+ykOe
LQLxggj5iwPgpjocqM4RX3ln2rmGdHcOawt50wPhWqBee9NbghyDSV1LVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAOMTzjuYxekXgl3OMOnuq8PfWRMB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx14uUqPe
bNdwmJb+b2umL3zNr83z3pYlb/AvpKM7n8mJDPbJ8hdRMzFsme/JuudJNhfJNzs0
bWJ0cFO+4iXBhhnsQ04Drc6FIBK2MwDVd5Ag9jgXTO5mX0r9U9awV0zU1h92Hsy/
LYiKjjsssbxIe/53E8sJ4Hpfg9/jxbHzQxOJiRGm3cgiECJpdLyMgGcnObSZ/NAP
nLXw/yf68xa8FDslpLHPJgJ8QO2ASuU5VHLy4JbH4xbQS4MFP+EM0idvKjc2SCBe
ASWjEGNIJEopjI9MfHkXPxdw+aPMrI75pVrjinbudjiuQLir9OqicSGp73bYR7qY
m+FJjqzKvioyXA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 04:58:40 2025 by rpki-client