
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: BT+7SlWdoYUBhxQZBu0qDt6GDz+JNvoj8+eFUmBs+qA=
Subject key identifier: 09:E1:11:8F:BD:07:71:08:54:2B:AC:95:7D:8F:8F:D5:AE:04:AD:73
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 019748FA0EBB0DBF8AF350A335368D445147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 156A
Signing time: Sat 07 Jun 2025 06:00:36 +0000
Manifest this update: Sat 07 Jun 2025 06:00:36 +0000
Manifest next update: Sun 08 Jun 2025 06:00:36 +0000
Files and hashes: 1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: UaLahhziI5d5KEq0SaodgjXt3qBTCDz5UumBNaWwX2U=)
3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0e:bb:0d:bf:8a:f3:50:a3:35:36:8d:44:51:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Jun 7 06:00:36 2025 GMT
Not After : Jun 8 06:00:36 2025 GMT
Subject: CN=09e1118fbd077108542bac957d8f8fd5ae04ad73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:4a:24:9e:1c:0c:e9:e7:38:22:c2:12:42:
3f:7b:7b:fb:db:75:ee:b4:1a:bc:c4:02:ec:24:23:
5a:d7:5f:f4:7b:3e:7c:ba:4f:95:ef:28:b9:a4:f8:
5c:d5:ea:3e:b6:bd:d7:f3:1d:ce:6a:07:30:55:9b:
23:38:96:bc:a4:af:d7:e2:be:48:cf:4c:47:8a:86:
b5:68:86:84:42:10:e5:08:76:bf:b1:1e:a1:05:27:
ba:6b:c2:81:49:42:ca:2b:5b:5f:07:d2:bd:76:52:
31:e7:e1:92:a7:f2:1a:0d:fb:49:d9:7a:5f:d4:9d:
f6:e6:15:0e:d5:58:ee:7c:0d:b4:cd:f1:a2:2a:15:
5e:3b:40:77:46:8d:94:ed:93:a4:ad:6e:a8:34:60:
f8:9c:a4:8f:c5:d7:8c:92:c1:61:ba:72:29:4c:ed:
23:30:bc:14:0d:24:2f:e4:bd:96:ca:3f:48:0b:50:
22:ed:ad:17:f8:83:48:91:76:fa:74:64:15:0e:3d:
3e:bc:dd:69:12:ed:b0:7e:02:8e:8d:1c:b0:39:0d:
45:ea:97:e8:55:da:68:a9:ff:20:75:e9:b7:2e:cb:
fa:e3:ad:ee:f0:e2:b3:21:fe:0b:e4:e3:9a:a2:03:
ff:bb:79:76:ef:0f:78:90:a2:5a:76:22:14:a8:b9:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:11:8F:BD:07:71:08:54:2B:AC:95:7D:8F:8F:D5:AE:04:AD:73
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:58:f1:1c:f1:45:58:c6:ae:f2:ea:66:7f:9a:32:48:6d:46:
7b:30:aa:2d:52:02:0e:65:05:28:c9:7d:e9:85:d2:2f:38:8d:
58:04:96:72:f5:b1:c1:9d:3b:1f:ca:3c:16:4b:63:24:e6:18:
3b:05:73:19:d6:1c:c9:a4:e6:01:1f:c9:09:ec:da:15:30:a7:
74:4a:11:f8:24:49:68:e1:9e:db:10:d3:35:45:30:8b:f6:e4:
26:19:9a:5a:13:7f:20:f0:24:a4:46:4a:52:08:70:cb:1c:34:
ad:eb:b6:eb:af:e3:18:9c:b5:3a:a3:74:8d:c4:8b:8a:a7:f0:
ba:ba:de:e4:74:26:ca:76:73:1c:bd:0d:4e:ad:a0:37:0c:26:
cb:9c:fd:ea:04:c3:fe:75:af:11:f6:d6:6a:9e:50:31:d2:3b:
43:ee:e7:e3:c5:3e:d0:14:fb:13:9a:4f:ad:e8:11:34:85:23:
e7:42:5d:06:eb:71:91:ed:9c:a2:a8:98:b2:1f:4c:49:e5:82:
39:63:9c:8b:66:c8:73:7d:0b:63:83:8e:bc:8b:e8:34:a0:fa:
f8:ba:0d:f6:cf:6a:20:a5:7f:d2:39:ca:bb:23:a7:fb:8f:af:
09:cd:54:ba:97:01:0a:4f:fc:c5:a7:76:f1:ff:34:c2:9e:49:
90:87:bf:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+g67Db+K81CjNTaNRFFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjFkYmUyZmFmMmE2ZTdkZmE1NzRjZTU1MTkwOTYzMDE1
ZjFjNTMwHhcNMjUwNjA3MDYwMDM2WhcNMjUwNjA4MDYwMDM2WjAzMTEwLwYDVQQD
EygwOWUxMTE4ZmJkMDc3MTA4NTQyYmFjOTU3ZDhmOGZkNWFlMDRhZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH9KJJ4cDOnnOCLCEkI/e3v723Xu
tBq8xALsJCNa11/0ez58uk+V7yi5pPhc1eo+tr3X8x3OagcwVZsjOJa8pK/X4r5I
z0xHioa1aIaEQhDlCHa/sR6hBSe6a8KBSULKK1tfB9K9dlIx5+GSp/IaDftJ2Xpf
1J325hUO1VjufA20zfGiKhVeO0B3Ro2U7ZOkrW6oNGD4nKSPxdeMksFhunIpTO0j
MLwUDSQv5L2Wyj9IC1Ai7a0X+INIkXb6dGQVDj0+vN1pEu2wfgKOjRywOQ1F6pfo
Vdpoqf8gdem3Lsv6463u8OKzIf4L5OOaogP/u3l27w94kKJadiIUqLnXEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnhEY+9B3EIVCuslX2Pj9WuBK1zMB8GA1UdIwQY
MBaAFHix2+L68qbn36V0zlUZCWMBXxxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jNjY2YmYtYzhkNi00OGFkLTgwNzYt
YzNmZDlhZTgxMDEyLzEvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jNjY2YmYtYzhkNi00OGFkLTgwNzYtYzNmZDlhZTgxMDEy
LzEvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVjxHPFF
WMau8upmf5oySG1GezCqLVICDmUFKMl96YXSLziNWASWcvWxwZ07H8o8FktjJOYY
OwVzGdYcyaTmAR/JCezaFTCndEoR+CRJaOGe2xDTNUUwi/bkJhmaWhN/IPAkpEZK
Ughwyxw0reu266/jGJy1OqN0jcSLiqfwurre5HQmynZzHL0NTq2gNwwmy5z96gTD
/nWvEfbWap5QMdI7Q+7n48U+0BT7E5pPregRNIUj50JdButxke2coqiYsh9MSeWC
OWOci2bIc30LY4OOvIvoNKD6+LoN9s9qIKV/0jnKuyOn+4+vCc1UupcBCk/8xad2
8f80wp5JkIe/2g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:58 2025 by rpki-client