Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: CJDIa2dxn5bo1xC64r3beOK7G2BdFswraCEOqNk0OUo=
Subject key identifier: CF:BA:7C:4D:42:64:41:14:CE:7F:34:4C:26:83:78:56:31:8C:26:AD
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 01974EFC4A8AE6A9401407FCFE8B118739C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 10:00:46 +0000
Manifest this update: Sun 08 Jun 2025 10:00:46 +0000
Manifest next update: Mon 09 Jun 2025 10:00:46 +0000
Files and hashes: 1: 0_OjcrNhtyr0s5_bJUkD8pGLgnM.roa (hash: X1Jy4DzINB1nWI37uRDEG9JSOWaqgSKmrsD2P/grQ20=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: WY0yn8BM/JftPxDjfjvZ3hffzhtxv8L6MzfgSzKL6Sg=)
3: bA_e5br1PmSxWsqLddr2vRjon7w.roa (hash: K7HaBSLbX+bu7BjrpU1/OOqg8JnIXozOGz2JaJqaEA0=)
4: jjt9HI1NN3XupeLRtsqDq6eclfU.roa (hash: 6LBWyMoFnrlnaY8dAxvg8w98D1RRaAabb2BYYMk19Zw=)
5: yahFXL8WchvVvLEEaOs9ROPCOuY.roa (hash: QGTni4yC0/AQyam/WFFScLyUqzuHZrT6aTReWZmwEg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:4a:8a:e6:a9:40:14:07:fc:fe:8b:11:87:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jun 8 10:00:46 2025 GMT
Not After : Jun 9 10:00:46 2025 GMT
Subject: CN=cfba7c4d42644114ce7f344c26837856318c26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:75:ee:21:fb:a9:df:0b:d7:b7:2d:54:66:
35:0e:c8:0b:9c:73:35:12:cb:41:36:ae:ba:30:3e:
05:47:96:55:68:c4:2c:92:f8:85:7a:b6:83:89:a3:
c2:05:53:72:b8:84:5f:85:5b:3d:90:7a:aa:cd:da:
78:87:a8:49:5c:86:a8:b2:f0:e5:66:80:7f:82:5b:
9a:61:bc:02:16:68:b1:e5:75:4e:66:48:4f:90:ba:
49:5e:2a:91:89:ef:8b:44:9a:46:02:51:96:45:f0:
fc:f0:66:df:0b:5a:7b:de:78:41:75:52:5a:1d:3a:
e0:1b:d1:25:a8:83:c5:5a:af:7a:ba:7d:e4:4c:59:
63:82:fc:4f:fe:74:27:67:fa:0f:37:03:f6:0f:6d:
35:1d:fa:8b:b4:91:34:fa:d6:18:d4:4b:75:24:30:
8a:e1:6b:71:c5:59:2b:75:1e:5b:2d:15:3e:47:6c:
61:34:90:58:46:bb:d3:b5:b7:52:7c:c9:46:6d:23:
b1:17:73:32:c4:07:74:65:52:19:35:13:42:53:86:
70:0e:74:42:8f:45:a5:83:e4:31:18:63:06:e9:ad:
08:5b:c2:c6:c5:19:1c:2f:76:c9:07:89:2b:f3:2c:
3b:5b:39:ee:83:85:49:84:98:8e:89:ff:8d:a8:49:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BA:7C:4D:42:64:41:14:CE:7F:34:4C:26:83:78:56:31:8C:26:AD
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:34:a3:95:ab:57:27:48:21:81:bc:bc:0b:ff:1f:16:9a:00:
a9:e6:85:ad:6b:52:81:84:ef:74:32:00:3a:90:72:e8:99:16:
cf:c1:d8:a3:3c:e4:c7:4f:64:9b:5d:3c:c5:e6:99:4f:57:3b:
9a:bc:ae:50:df:3f:f7:47:1b:ce:70:37:d5:88:8f:f2:4c:89:
c4:4f:42:8f:ac:1a:02:99:76:15:29:79:8a:50:eb:89:dd:f9:
64:0f:51:03:2d:52:62:f2:c6:a6:82:5c:cc:03:00:0c:5a:c9:
87:52:1a:3b:b7:80:84:99:c5:7f:ce:a3:d8:15:1b:41:89:3b:
55:9a:31:6d:b3:5e:68:f5:68:9e:95:f5:21:d1:44:fe:24:62:
ca:bd:8b:30:0e:f4:b8:ce:26:83:4f:92:ff:c7:fb:93:5e:3b:
3a:bb:08:c8:97:58:bc:30:07:d9:6e:02:40:ff:0c:e0:0d:e9:
ae:ef:61:8a:e9:5e:73:97:36:d8:8d:cd:29:78:16:7b:f2:ae:
a4:25:7f:7e:f0:cf:ee:24:9f:b4:06:b8:bc:e8:dd:83:6f:3d:
2c:b5:bc:04:ac:79:b0:ae:bc:36:a7:f1:e0:94:bd:b2:b8:01:
71:99:1c:70:49:dd:9b:28:a0:46:0c:a8:66:5a:69:78:20:d4:
f3:af:0a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/EqK5qlAFAf8/osRhznCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjUwNjA4MTAwMDQ2WhcNMjUwNjA5MTAwMDQ2WjAzMTEwLwYDVQQD
EyhjZmJhN2M0ZDQyNjQ0MTE0Y2U3ZjM0NGMyNjgzNzg1NjMxOGMyNmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh917iH7qd8L17ctVGY1DsgLnHM1
EstBNq66MD4FR5ZVaMQskviFeraDiaPCBVNyuIRfhVs9kHqqzdp4h6hJXIaosvDl
ZoB/gluaYbwCFmix5XVOZkhPkLpJXiqRie+LRJpGAlGWRfD88GbfC1p73nhBdVJa
HTrgG9ElqIPFWq96un3kTFljgvxP/nQnZ/oPNwP2D201HfqLtJE0+tYY1Et1JDCK
4WtxxVkrdR5bLRU+R2xhNJBYRrvTtbdSfMlGbSOxF3MyxAd0ZVIZNRNCU4ZwDnRC
j0Wlg+QxGGMG6a0IW8LGxRkcL3bJB4kr8yw7Wznug4VJhJiOif+NqEmdFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+6fE1CZEEUzn80TCaDeFYxjCatMB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjSjlatX
J0ghgby8C/8fFpoAqeaFrWtSgYTvdDIAOpBy6JkWz8HYozzkx09km108xeaZT1c7
mryuUN8/90cbznA31YiP8kyJxE9Cj6waApl2FSl5ilDrid35ZA9RAy1SYvLGpoJc
zAMADFrJh1IaO7eAhJnFf86j2BUbQYk7VZoxbbNeaPVonpX1IdFE/iRiyr2LMA70
uM4mg0+S/8f7k147OrsIyJdYvDAH2W4CQP8M4A3pru9hiulec5c22I3NKXgWe/Ku
pCV/fvDP7iSftAa4vOjdg289LLW8BKx5sK68Nqfx4JS9srgBcZkccEndmyigRgyo
ZlppeCDU868KeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 21:19:38 2025 by rpki-client