Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: dtEy0gdnS+LrKes1DQ33sZNDIFUbnmlzK+YpnKrkN5g=
Subject key identifier: 4B:67:08:EC:DD:E3:85:DE:B8:64:3A:C8:1F:C5:69:9E:1B:58:C5:A5
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 0199345B7835F15B7A42E0D8DFD838C9972F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 153C
Signing time: Wed 10 Sep 2025 16:00:33 +0000
Manifest this update: Wed 10 Sep 2025 16:00:33 +0000
Manifest next update: Thu 11 Sep 2025 16:00:33 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: QUS4+ocmqn/+AHBZ0YIqCjnQUD2P2F7ytqCRV3Ogops=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:78:35:f1:5b:7a:42:e0:d8:df:d8:38:c9:97:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Sep 10 16:00:33 2025 GMT
Not After : Sep 11 16:00:33 2025 GMT
Subject: CN=4b6708ecdde385deb8643ac81fc5699e1b58c5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:cc:9b:a4:30:ae:15:18:0e:13:83:9d:71:
eb:fd:40:62:71:08:a8:77:8e:8b:af:83:a6:71:d2:
d9:3f:e2:c7:b1:42:ae:89:e9:00:eb:81:55:3a:8a:
9d:ef:f7:a8:c0:60:c5:d5:d8:5e:8e:b6:8c:51:36:
0e:2f:18:50:90:50:48:4a:f7:3b:a7:1e:81:12:97:
8e:96:89:9f:ef:59:d5:d0:81:9b:fa:9b:e3:37:60:
86:de:32:61:ef:3a:91:96:e4:24:b1:8f:54:dd:02:
e6:e5:37:59:29:a6:64:df:58:6f:7d:af:56:29:61:
72:6f:51:1c:73:46:f7:68:2e:e0:d1:7d:97:70:12:
19:fb:0d:84:d7:3b:1e:14:78:03:2a:0c:f9:98:db:
2e:2a:a9:53:e3:84:30:65:8e:bd:cf:8c:e7:b1:61:
c6:a6:8e:4b:f9:fd:bd:41:61:33:66:82:e9:48:56:
d4:32:00:ab:63:35:9b:6d:9b:63:2a:e6:90:b0:d6:
d5:da:69:e4:9f:4e:c8:f7:15:d2:59:c3:95:73:8c:
aa:7d:24:6e:63:95:37:cd:57:e1:ab:53:32:74:52:
e1:ce:50:ad:74:52:b2:57:40:95:00:6c:14:b6:8e:
a2:88:7e:85:31:20:1f:69:7a:ca:32:51:75:cc:ad:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:08:EC:DD:E3:85:DE:B8:64:3A:C8:1F:C5:69:9E:1B:58:C5:A5
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:16:f1:12:29:26:72:4e:8c:f8:16:db:55:72:b4:62:af:41:
2c:ef:a0:b9:82:22:3f:cf:4d:80:33:93:99:33:52:8b:db:d8:
b7:72:c3:72:25:e1:fa:2d:24:bd:6a:5b:be:d8:c5:ab:61:cf:
d9:c3:53:0e:32:cb:8d:33:b8:a3:2f:66:54:45:9e:68:f2:35:
87:5f:16:9e:58:ae:da:cc:e5:ef:d5:24:b8:09:7e:b3:49:55:
6e:ab:7e:8a:79:7f:05:ba:74:c3:3f:bd:28:f3:f5:e7:b2:83:
07:5c:8c:4f:9a:d6:22:aa:1d:6c:ba:2b:83:b0:83:fb:71:7a:
c7:bf:4f:8a:7b:3b:44:6f:c1:0f:57:c1:b6:62:42:6e:bf:5b:
6e:12:03:ca:a8:cb:5c:11:4c:70:f0:98:c2:74:ed:ef:8f:46:
cf:a4:2c:2f:15:36:41:01:b4:63:32:dd:cd:1b:f4:f8:0e:e8:
2b:0b:aa:c8:47:f8:c8:f2:31:93:75:d0:d8:11:d9:f2:b8:d2:
e2:58:aa:1d:d8:16:5a:62:59:00:0f:eb:f2:f3:17:4b:fb:37:
a5:3e:b0:aa:e7:35:cf:57:81:80:15:4d:08:90:89:de:89:8a:
44:a0:2a:c5:68:42:b6:90:fa:da:91:15:5d:be:48:f2:53:8b:
15:02:4d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0W3g18Vt6QuDY39g4yZcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjUwOTEwMTYwMDMzWhcNMjUwOTExMTYwMDMzWjAzMTEwLwYDVQQD
Eyg0YjY3MDhlY2RkZTM4NWRlYjg2NDNhYzgxZmM1Njk5ZTFiNThjNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW/Mm6QwrhUYDhODnXHr/UBicQio
d46Lr4OmcdLZP+LHsUKuiekA64FVOoqd7/eowGDF1dhejraMUTYOLxhQkFBISvc7
px6BEpeOlomf71nV0IGb+pvjN2CG3jJh7zqRluQksY9U3QLm5TdZKaZk31hvfa9W
KWFyb1Ecc0b3aC7g0X2XcBIZ+w2E1zseFHgDKgz5mNsuKqlT44QwZY69z4znsWHG
po5L+f29QWEzZoLpSFbUMgCrYzWbbZtjKuaQsNbV2mnkn07I9xXSWcOVc4yqfSRu
Y5U3zVfhq1MydFLhzlCtdFKyV0CVAGwUto6iiH6FMSAfaXrKMlF1zK36SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtnCOzd44XeuGQ6yB/FaZ4bWMWlMB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRbxEikm
ck6M+BbbVXK0Yq9BLO+guYIiP89NgDOTmTNSi9vYt3LDciXh+i0kvWpbvtjFq2HP
2cNTDjLLjTO4oy9mVEWeaPI1h18Wnliu2szl79UkuAl+s0lVbqt+inl/Bbp0wz+9
KPP157KDB1yMT5rWIqodbLorg7CD+3F6x79Pins7RG/BD1fBtmJCbr9bbhIDyqjL
XBFMcPCYwnTt749Gz6QsLxU2QQG0YzLdzRv0+A7oKwuqyEf4yPIxk3XQ2BHZ8rjS
4liqHdgWWmJZAA/r8vMXS/s3pT6wquc1z1eBgBVNCJCJ3omKRKAqxWhCtpD62pEV
Xb5I8lOLFQJNuA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:36 2025 by rpki-client