Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: 4CRwcilqXePBz9FCv8ZcbBDQ7r9+qJe5eWGwGhcQVA0=
Subject key identifier: 98:32:6B:B8:6D:93:FA:80:CC:68:87:8E:62:49:DD:94:6E:5D:49:A2
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 01974D44AD0F7630C2F6ECBD2E3AA6F2B959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 02:00:35 +0000
Manifest this update: Sun 08 Jun 2025 02:00:35 +0000
Manifest next update: Mon 09 Jun 2025 02:00:35 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: INCjcwOXDZ5Fri4SZK1+NxQRZRicHKJyYCO6k/YFt7M=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:ad:0f:76:30:c2:f6:ec:bd:2e:3a:a6:f2:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jun 8 02:00:35 2025 GMT
Not After : Jun 9 02:00:35 2025 GMT
Subject: CN=98326bb86d93fa80cc68878e6249dd946e5d49a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:4b:f3:48:d3:55:2e:a2:4e:0e:6f:6a:79:
ae:62:58:af:5c:93:04:57:3b:70:62:d5:d0:f8:2b:
ef:6f:de:ce:a1:0b:43:83:a7:39:42:7f:98:32:38:
28:a5:e4:4d:da:ff:c8:77:1e:0e:97:04:08:65:57:
65:7d:77:62:c3:fc:29:45:46:97:38:51:37:d9:3b:
8c:b9:61:57:53:9c:7d:0d:e9:4a:bc:7f:3b:44:aa:
ce:57:23:1a:b9:b1:17:c8:5d:fb:0f:6f:f4:4d:43:
83:99:4a:ef:2e:94:3b:aa:b7:32:85:d3:32:21:5c:
a3:e9:90:39:0f:85:72:3e:4c:14:b1:85:65:39:8a:
1d:24:bb:75:3e:70:f9:58:49:f2:ea:c6:b8:b0:8a:
b7:5a:0c:0d:f2:77:39:fd:f9:a2:d9:26:6a:fa:02:
ba:de:4c:b2:13:da:6a:77:2b:dd:14:57:79:b6:03:
de:e8:e4:9f:60:4f:23:a0:73:2f:04:34:f7:bd:2d:
b0:42:68:65:76:0d:b6:84:7f:5d:93:6b:e4:c6:2e:
35:24:96:19:1e:fd:e7:ab:ec:3c:a7:c2:c5:32:76:
d6:de:2f:ab:6d:67:0b:5a:1b:df:c4:ea:d5:96:29:
30:6b:04:78:ea:ba:59:01:c8:ef:24:e2:3f:6d:c5:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:6B:B8:6D:93:FA:80:CC:68:87:8E:62:49:DD:94:6E:5D:49:A2
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1b:06:d8:75:8d:7d:ad:c0:5b:6d:4f:8e:e6:54:c0:d4:c0:
56:8a:35:97:77:73:ac:aa:ec:7e:9c:53:bb:c9:aa:09:7f:60:
9e:50:51:ec:f2:fe:1a:e1:6d:01:87:01:97:f5:7b:56:29:e2:
5b:22:8f:5f:0f:cd:31:2a:23:99:fa:7e:81:f6:86:65:84:5c:
1a:d0:8c:3e:af:d8:e8:c7:45:29:ea:b9:9b:09:85:15:ba:9d:
96:1f:86:99:9c:35:50:aa:7d:15:45:86:36:5a:a9:a6:10:95:
22:87:0d:39:c6:7d:09:49:68:45:e7:8e:1d:ab:a2:6b:dc:69:
b4:f2:87:96:35:5e:af:01:dd:73:00:53:19:50:12:f9:f3:65:
3e:43:53:e3:fe:cb:b5:8d:11:50:29:49:99:99:1e:0c:da:5d:
fa:a8:54:e3:a9:10:04:53:00:2a:82:a4:ab:e3:b3:6d:97:4c:
96:f3:7a:bd:21:14:85:9a:a2:55:da:36:14:e0:78:3d:d5:6e:
c1:56:3a:08:d8:97:c9:bf:fd:ce:4c:0f:d1:48:f4:a8:7c:3f:
77:c5:b4:b6:9c:dc:77:7d:d0:ca:48:35:dd:e9:1c:07:99:be:
87:95:18:49:6e:8c:04:b3:71:cb:92:2b:d2:b7:e8:98:00:a3:
ad:c8:7e:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRK0PdjDC9uy9Ljqm8rlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMmE4YWMzMDI4YjcwOTExY2I2MTExZmZkYTNhMmVmZTU1
ODg2MmQwHhcNMjUwNjA4MDIwMDM1WhcNMjUwNjA5MDIwMDM1WjAzMTEwLwYDVQQD
Eyg5ODMyNmJiODZkOTNmYTgwY2M2ODg3OGU2MjQ5ZGQ5NDZlNWQ0OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XBL80jTVS6iTg5vanmuYlivXJME
VztwYtXQ+Cvvb97OoQtDg6c5Qn+YMjgopeRN2v/Idx4OlwQIZVdlfXdiw/wpRUaX
OFE32TuMuWFXU5x9DelKvH87RKrOVyMaubEXyF37D2/0TUODmUrvLpQ7qrcyhdMy
IVyj6ZA5D4VyPkwUsYVlOYodJLt1PnD5WEny6sa4sIq3WgwN8nc5/fmi2SZq+gK6
3kyyE9pqdyvdFFd5tgPe6OSfYE8joHMvBDT3vS2wQmhldg22hH9dk2vkxi41JJYZ
Hv3nq+w8p8LFMnbW3i+rbWcLWhvfxOrVlikwawR46rpZAcjvJOI/bcVS/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgya7htk/qAzGiHjmJJ3ZRuXUmiMB8GA1UdIwQY
MBaAFHsqisMCi3CRHLYRH/2jou/lWIYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEt
ODU4ZGQxYjE2MTdmLzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEtODU4ZGQxYjE2MTdm
LzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBsG2HWN
fa3AW21PjuZUwNTAVoo1l3dzrKrsfpxTu8mqCX9gnlBR7PL+GuFtAYcBl/V7Vini
WyKPXw/NMSojmfp+gfaGZYRcGtCMPq/Y6MdFKeq5mwmFFbqdlh+GmZw1UKp9FUWG
NlqpphCVIocNOcZ9CUloReeOHauia9xptPKHljVerwHdcwBTGVAS+fNlPkNT4/7L
tY0RUClJmZkeDNpd+qhU46kQBFMAKoKkq+OzbZdMlvN6vSEUhZqiVdo2FOB4PdVu
wVY6CNiXyb/9zkwP0Uj0qHw/d8W0tpzcd33Qykg13ekcB5m+h5UYSW6MBLNxy5Ir
0rfomACjrch+OQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:18 2025 by rpki-client