Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: b7laWFCMaR4wrbsi0UaEDDrKmFo3OXyiX69x5bLxiHs=
Subject key identifier: F8:21:CC:A4:2C:37:4C:8F:D7:12:88:1E:C0:B6:C3:22:B7:18:4D:32
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01976DAB89868376A276E68843F328EF8665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 09:00:47 +0000
Manifest this update: Sat 14 Jun 2025 09:00:47 +0000
Manifest next update: Sun 15 Jun 2025 09:00:47 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: qTD2mj9wV/5Ud52lt5MTJapgSp2axGRf81IVmSy91pE=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:89:86:83:76:a2:76:e6:88:43:f3:28:ef:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jun 14 09:00:47 2025 GMT
Not After : Jun 15 09:00:47 2025 GMT
Subject: CN=f821cca42c374c8fd712881ec0b6c322b7184d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:58:f8:97:32:a7:42:27:23:45:9a:ed:70:
fa:84:6a:cb:1a:8a:30:89:df:64:f0:6c:ee:1a:7a:
41:5a:72:90:b2:d4:b7:c0:3b:24:86:a3:f1:66:d0:
2f:94:9f:27:8f:9c:45:93:bf:24:cf:eb:a7:e7:15:
ea:f0:b8:02:05:1a:52:b9:44:7b:f6:48:b9:cb:01:
3c:a0:d5:0f:09:87:12:da:75:86:02:9d:6b:55:88:
b9:d4:b4:d9:04:75:c9:ac:8f:e4:b9:c3:c4:1b:7e:
ab:9d:95:e9:d5:c9:a0:87:e8:d1:82:c7:6e:b0:32:
62:d9:f4:9f:33:07:33:79:bd:f5:36:05:41:3f:fc:
5e:d9:91:89:28:b2:e1:ee:f0:b7:dd:61:ca:72:bc:
64:a7:c8:6f:0d:08:42:e9:a5:96:38:e5:75:6e:51:
98:78:64:6b:35:7d:8b:84:4a:ad:3f:87:3d:ea:b2:
97:ca:c9:0a:e0:b1:14:aa:93:4b:e6:94:4c:a1:07:
1d:85:c9:31:68:53:d5:bd:78:be:2e:b0:a7:2d:4f:
1e:48:ce:41:30:a8:85:e2:8c:bf:d1:53:64:97:05:
74:e3:9e:59:15:0d:cd:f6:9c:d0:70:a8:7a:de:fb:
df:37:93:4a:51:7f:cb:98:d3:58:4e:2e:bf:81:2c:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:CC:A4:2C:37:4C:8F:D7:12:88:1E:C0:B6:C3:22:B7:18:4D:32
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a4:23:dd:23:9e:68:b4:d1:a8:e5:5d:c0:aa:99:95:9c:a4:
04:85:3d:8e:fe:d9:71:2f:0d:57:3d:72:50:4b:94:2e:98:7f:
bc:5d:e9:69:8f:50:78:11:cb:c3:35:92:6a:91:0f:89:ad:ef:
c5:e6:72:5d:36:bd:18:b1:2e:5e:8b:fa:09:e3:97:f6:29:ea:
87:d5:25:f9:80:27:63:41:31:50:0d:76:de:c4:3c:3c:5b:9c:
09:e1:31:d6:3b:05:3f:7e:2e:a3:84:62:29:bc:f1:99:ae:06:
5c:cb:03:ff:04:c1:8d:9d:e3:11:95:ff:22:80:d1:ea:06:82:
71:39:7d:77:d2:42:a4:c2:ff:e1:a8:6f:99:01:79:44:6b:4b:
13:c3:bc:88:20:80:08:18:2b:bf:b7:6e:3d:73:88:d0:8e:fb:
c0:fc:bf:27:2d:da:ef:b6:dd:53:64:a6:68:46:01:65:ea:59:
d5:40:b8:67:92:2c:f4:e9:aa:43:82:24:1d:8d:3c:38:15:03:
72:d0:ea:f5:44:02:45:96:47:85:05:d6:d1:ec:57:ca:a5:84:
6a:00:32:9f:a4:c4:5b:6b:b1:7a:df:f8:f9:8b:0c:7a:f9:db:
a6:8b:98:35:4a:66:d0:3e:49:5f:f5:86:b8:7a:d4:23:47:99:
cd:c7:18:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq4mGg3aiduaIQ/Mo74ZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjUwNjE0MDkwMDQ3WhcNMjUwNjE1MDkwMDQ3WjAzMTEwLwYDVQQD
EyhmODIxY2NhNDJjMzc0YzhmZDcxMjg4MWVjMGI2YzMyMmI3MTg0ZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo1Y+Jcyp0InI0Wa7XD6hGrLGoow
id9k8GzuGnpBWnKQstS3wDskhqPxZtAvlJ8nj5xFk78kz+un5xXq8LgCBRpSuUR7
9ki5ywE8oNUPCYcS2nWGAp1rVYi51LTZBHXJrI/kucPEG36rnZXp1cmgh+jRgsdu
sDJi2fSfMwczeb31NgVBP/xe2ZGJKLLh7vC33WHKcrxkp8hvDQhC6aWWOOV1blGY
eGRrNX2LhEqtP4c96rKXyskK4LEUqpNL5pRMoQcdhckxaFPVvXi+LrCnLU8eSM5B
MKiF4oy/0VNklwV0455ZFQ3N9pzQcKh63vvfN5NKUX/LmNNYTi6/gSwF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPghzKQsN0yP1xKIHsC2wyK3GE0yMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqQj3SOe
aLTRqOVdwKqZlZykBIU9jv7ZcS8NVz1yUEuULph/vF3paY9QeBHLwzWSapEPia3v
xeZyXTa9GLEuXov6CeOX9inqh9Ul+YAnY0ExUA123sQ8PFucCeEx1jsFP34uo4Ri
Kbzxma4GXMsD/wTBjZ3jEZX/IoDR6gaCcTl9d9JCpML/4ahvmQF5RGtLE8O8iCCA
CBgrv7duPXOI0I77wPy/Jy3a77bdU2SmaEYBZepZ1UC4Z5Is9OmqQ4IkHY08OBUD
ctDq9UQCRZZHhQXW0exXyqWEagAyn6TEW2uxet/4+YsMevnbpouYNUpm0D5JX/WG
uHrUI0eZzccY0w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 14:15:09 2025 by rpki-client