Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: M4t/zHJZeLZgbQtOxOvmdLer0BzjZJIp15VxVAqVy4s=
Subject key identifier: 72:03:6F:AC:47:B6:0B:13:A5:A3:43:2E:33:49:7F:C1:24:1F:56:F9
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 0198C97F68F4117C790C619F03FEC67CC52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 056C
Signing time: Wed 20 Aug 2025 22:00:26 +0000
Manifest this update: Wed 20 Aug 2025 22:00:26 +0000
Manifest next update: Thu 21 Aug 2025 22:00:26 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: uI990OuN7NWX+3AlkMAY7qaywichxcX9nmdeSyPmvgU=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:7f:68:f4:11:7c:79:0c:61:9f:03:fe:c6:7c:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Aug 20 22:00:26 2025 GMT
Not After : Aug 21 22:00:26 2025 GMT
Subject: CN=72036fac47b60b13a5a3432e33497fc1241f56f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:90:b8:a4:69:55:49:41:ca:94:5c:f6:68:
b0:ea:86:55:b4:27:ab:3e:9c:47:dd:2b:54:b0:f0:
4a:74:33:72:3a:40:d6:78:7b:ca:01:6e:f3:07:c3:
4c:af:2f:6d:34:57:d7:89:4e:98:e2:7c:aa:b8:9e:
8e:3b:3d:35:c8:99:df:64:ff:7e:7e:34:58:de:a8:
a0:d3:b8:f9:4f:d5:35:c8:0e:51:10:eb:23:75:c3:
dc:e4:97:68:94:58:0f:90:e9:84:62:f0:cd:4f:08:
17:2e:53:e0:12:b2:08:b8:1c:2d:97:ee:10:42:a1:
14:54:82:38:44:02:65:70:61:8e:85:7d:50:d4:f0:
79:89:fa:45:50:68:cf:17:a9:df:f2:f0:e5:fa:3b:
19:84:3a:ad:20:0c:08:84:fd:35:fb:b7:09:b3:14:
0a:ae:3a:43:eb:71:10:8a:87:dc:98:96:67:f9:42:
1b:23:d5:d0:68:61:f8:18:3e:4a:ef:af:3f:46:50:
d1:6b:fa:a2:7b:e6:5c:5e:b8:70:35:7c:c6:0c:ab:
22:38:96:ae:3a:75:b8:69:f1:8f:a6:d8:20:7b:83:
54:31:86:54:e9:8f:7d:a7:03:99:91:cd:3e:a6:75:
18:5f:f4:8a:6c:32:4e:73:74:dd:0d:83:c4:1f:46:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:6F:AC:47:B6:0B:13:A5:A3:43:2E:33:49:7F:C1:24:1F:56:F9
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:29:e4:c7:35:7e:44:42:5a:20:ca:b8:97:ef:50:29:a7:f5:
05:c2:64:82:0b:73:a6:04:fa:b7:2f:92:9d:bc:1a:27:5d:28:
d3:35:09:b2:09:5c:27:1b:23:ea:5d:11:fa:f8:4a:f8:61:97:
80:77:f5:fb:4c:ed:b0:ff:a4:77:c1:e0:40:77:58:a6:c1:f6:
b3:10:ce:ee:73:de:37:94:6b:f9:96:7c:7d:9c:86:71:51:8b:
46:e1:e7:29:10:f2:54:85:9e:0a:87:54:0f:c0:ec:01:36:54:
ed:1a:48:c8:29:b5:65:b6:b8:d0:30:65:21:eb:d0:e3:dd:30:
b1:ea:e5:e4:76:36:3a:a1:03:9c:d0:59:25:a3:78:fd:de:53:
00:5a:e8:4a:a3:a1:85:36:2b:0b:98:d2:9b:82:98:c0:87:f1:
8d:b6:d4:4d:a9:99:aa:f0:72:9e:d6:cb:96:90:86:58:7f:09:
95:97:2f:07:05:e4:ca:c8:aa:8e:29:0b:5e:a1:66:fe:65:1c:
89:97:3a:3b:67:ee:d2:89:f5:2d:99:51:e7:eb:88:e0:69:91:
30:d9:18:b6:d4:de:d6:f2:08:df:a1:a9:28:ca:aa:9a:78:0c:
d3:9b:db:2c:84:43:8d:91:11:7a:b6:e4:79:cc:03:d0:ae:bf:
c1:f5:17:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjJf2j0EXx5DGGfA/7GfMUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjY5YzBjMDg1Y2M5NzhhMzcyYTBlNGYwNTY0ODM5OGUx
ZTdmZTgwHhcNMjUwODIwMjIwMDI2WhcNMjUwODIxMjIwMDI2WjAzMTEwLwYDVQQD
Eyg3MjAzNmZhYzQ3YjYwYjEzYTVhMzQzMmUzMzQ5N2ZjMTI0MWY1NmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jaQuKRpVUlBypRc9miw6oZVtCer
PpxH3StUsPBKdDNyOkDWeHvKAW7zB8NMry9tNFfXiU6Y4nyquJ6OOz01yJnfZP9+
fjRY3qig07j5T9U1yA5REOsjdcPc5JdolFgPkOmEYvDNTwgXLlPgErIIuBwtl+4Q
QqEUVII4RAJlcGGOhX1Q1PB5ifpFUGjPF6nf8vDl+jsZhDqtIAwIhP01+7cJsxQK
rjpD63EQiofcmJZn+UIbI9XQaGH4GD5K768/RlDRa/qie+ZcXrhwNXzGDKsiOJau
OnW4afGPptgge4NUMYZU6Y99pwOZkc0+pnUYX/SKbDJOc3TdDYPEH0a5rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIDb6xHtgsTpaNDLjNJf8EkH1b5MB8GA1UdIwQY
MBaAFBNmnAwIXMl4o3Kg5PBWSDmOHn/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEt
NTNiMDQzNDI3ODNkLzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEtNTNiMDQzNDI3ODNk
LzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAminkxzV+
REJaIMq4l+9QKaf1BcJkggtzpgT6ty+SnbwaJ10o0zUJsglcJxsj6l0R+vhK+GGX
gHf1+0ztsP+kd8HgQHdYpsH2sxDO7nPeN5Rr+ZZ8fZyGcVGLRuHnKRDyVIWeCodU
D8DsATZU7RpIyCm1Zba40DBlIevQ490wserl5HY2OqEDnNBZJaN4/d5TAFroSqOh
hTYrC5jSm4KYwIfxjbbUTamZqvByntbLlpCGWH8JlZcvBwXkysiqjikLXqFm/mUc
iZc6O2fu0on1LZlR5+uI4GmRMNkYttTe1vII36GpKMqqmngM05vbLIRDjZERerbk
ecwD0K6/wfUXfg==
-----END CERTIFICATE-----
Generated at Thu Aug 21 08:16:21 2025 by rpki-client