Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: cRApuI0jH5wB7fUh9tOqQTx931fzRUOy4B+zNbm31SQ=
Subject key identifier: 77:C7:24:D6:A2:EF:55:75:6C:7E:59:96:53:7C:FA:1E:60:B3:CD:F8
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019748C34FB00D0E822EAA7EB162F27411DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 11A2
Signing time: Sat 07 Jun 2025 05:00:48 +0000
Manifest this update: Sat 07 Jun 2025 05:00:48 +0000
Manifest next update: Sun 08 Jun 2025 05:00:48 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: yGYZp/yErDjO7sUw5WWVKd3BIP8mYdtr2FiX+o4o+N0=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:4f:b0:0d:0e:82:2e:aa:7e:b1:62:f2:74:11:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jun 7 05:00:48 2025 GMT
Not After : Jun 8 05:00:48 2025 GMT
Subject: CN=77c724d6a2ef55756c7e5996537cfa1e60b3cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:4f:30:a4:61:a9:16:71:11:2d:1f:b6:de:
dd:7d:e0:55:d5:35:9c:68:6b:90:3c:79:b8:ec:48:
63:8d:bb:7c:a8:a1:0b:b7:ee:a2:63:9d:e4:a3:f2:
5e:2d:04:34:be:39:4b:f5:a6:1e:f9:ee:0e:46:6e:
2c:5a:b9:7c:a5:cc:6e:77:0a:6f:d8:41:0a:e2:31:
1e:3e:42:e8:01:4f:d5:ec:d2:6c:32:84:40:c6:99:
63:95:40:79:4d:23:96:28:d0:ad:97:79:1e:d5:bf:
0b:a9:34:24:f3:f8:73:bf:38:7d:70:1b:c5:74:d5:
40:ee:e1:34:77:05:1c:28:ec:fc:99:9d:1b:6a:98:
f3:7c:a5:c7:6a:6e:22:df:02:47:ed:06:03:92:6a:
65:e5:16:37:61:c7:ba:f9:aa:14:96:40:5f:f0:af:
3c:9a:e5:d3:c9:f3:cd:c3:56:df:dd:10:18:d2:36:
7d:37:ef:c3:0a:1d:e1:03:96:a3:8a:ab:b5:25:6f:
83:b5:c5:53:c8:7c:2c:24:62:b7:4e:d3:99:68:ac:
02:2d:c1:d7:e7:16:77:6a:0c:a5:38:7e:55:27:5a:
0e:5c:63:3a:13:8e:f4:c3:02:76:1e:fc:43:d4:09:
9c:74:c3:6c:25:80:2a:7f:43:17:3c:b2:34:3d:bd:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:24:D6:A2:EF:55:75:6C:7E:59:96:53:7C:FA:1E:60:B3:CD:F8
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:04:a4:4c:95:02:a3:0e:3c:16:31:e4:20:40:5f:1b:71:2c:
be:3c:22:0b:03:0a:ba:74:47:48:7f:1c:78:db:c9:ef:d0:f1:
62:3a:ea:6c:f1:df:88:18:5e:ab:b5:51:48:7f:03:e2:d5:de:
3f:07:13:cb:b3:79:ec:ab:a4:f9:f4:c9:f3:99:85:23:3b:8f:
92:ad:e3:7f:03:a7:49:a6:66:d4:72:82:5e:cb:04:cc:1f:4a:
32:30:fd:5b:74:99:5a:9c:17:a7:0e:de:59:45:96:f7:46:29:
2a:be:e0:40:bf:21:c3:8a:4b:f5:fc:12:0e:a4:6d:95:b1:10:
78:80:48:18:9f:3f:11:ac:d5:bb:75:74:af:54:89:a1:12:34:
47:dc:07:29:84:68:99:d2:6b:dc:dc:66:f8:ff:c9:90:b4:9d:
1f:4f:9e:1b:77:ac:99:4c:e4:43:a7:73:1f:71:69:d7:af:2e:
db:2c:5a:44:12:80:6b:70:d1:7b:76:91:ea:3e:cf:c6:04:b9:
76:9e:96:6a:ff:fe:6e:f3:fb:ad:57:66:aa:1b:8d:f1:9a:66:
61:c4:79:66:1a:89:72:67:a6:70:e4:80:9b:fe:0f:72:6d:59:
3a:71:bf:52:30:f6:95:ff:e3:a9:38:ce:05:08:f5:34:b3:fc:
13:3f:e9:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw0+wDQ6CLqp+sWLydBHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz
YjRjYzMwHhcNMjUwNjA3MDUwMDQ4WhcNMjUwNjA4MDUwMDQ4WjAzMTEwLwYDVQQD
Eyg3N2M3MjRkNmEyZWY1NTc1NmM3ZTU5OTY1MzdjZmExZTYwYjNjZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6NPMKRhqRZxES0ftt7dfeBV1TWc
aGuQPHm47Ehjjbt8qKELt+6iY53ko/JeLQQ0vjlL9aYe+e4ORm4sWrl8pcxudwpv
2EEK4jEePkLoAU/V7NJsMoRAxpljlUB5TSOWKNCtl3ke1b8LqTQk8/hzvzh9cBvF
dNVA7uE0dwUcKOz8mZ0bapjzfKXHam4i3wJH7QYDkmpl5RY3Yce6+aoUlkBf8K88
muXTyfPNw1bf3RAY0jZ9N+/DCh3hA5ajiqu1JW+DtcVTyHwsJGK3TtOZaKwCLcHX
5xZ3agylOH5VJ1oOXGM6E470wwJ2HvxD1AmcdMNsJYAqf0MXPLI0Pb2jVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfHJNai71V1bH5ZllN8+h5gs834MB8GA1UdIwQY
MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt
M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx
LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjASkTJUC
ow48FjHkIEBfG3EsvjwiCwMKunRHSH8ceNvJ79DxYjrqbPHfiBheq7VRSH8D4tXe
PwcTy7N57Kuk+fTJ85mFIzuPkq3jfwOnSaZm1HKCXssEzB9KMjD9W3SZWpwXpw7e
WUWW90YpKr7gQL8hw4pL9fwSDqRtlbEQeIBIGJ8/EazVu3V0r1SJoRI0R9wHKYRo
mdJr3Nxm+P/JkLSdH0+eG3esmUzkQ6dzH3Fp168u2yxaRBKAa3DRe3aR6j7PxgS5
dp6Wav/+bvP7rVdmqhuN8ZpmYcR5ZhqJcmemcOSAm/4Pcm1ZOnG/UjD2lf/jqTjO
BQj1NLP8Ez/pKw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:21 2025 by rpki-client