Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
File: eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft (raw, json)
Hash identifier: 3ZQFIU23ajX40Mruqt+qeGXWXFiwlO4UCltj0/twLoI=
Subject key identifier: 53:CF:54:DE:FC:9E:8C:18:C2:DD:7B:07:91:30:DE:AD:48:4D:B5:8C
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial: 0198C5A32253B39B2C9B27732E3C1B38FD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
Manifest number: 24
Signing time: Wed 20 Aug 2025 04:00:59 +0000
Manifest this update: Wed 20 Aug 2025 04:00:59 +0000
Manifest next update: Thu 21 Aug 2025 04:00:59 +0000
Files and hashes: 1: 9oj7usn1jvbz0tFxG2Z5p-wgXKA.roa (hash: m2qYpphO1X68KFD3WfxpihFPRyWFaQCoGfFTXzr/Rf8=)
2: eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl (hash: +RuxGtLcab+SeAooFIV7DMakroaSHj484LeijZ2xEDo=)
3: i5JR4X8XkgqUjUR9AqA093RvF_M.roa (hash: sRMyH0MzuiMVwqi+BJl4/qjhytl5ZX1P2JdBj/8sRJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:a3:22:53:b3:9b:2c:9b:27:73:2e:3c:1b:38:fd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Validity
Not Before: Aug 20 04:00:59 2025 GMT
Not After : Aug 21 04:00:59 2025 GMT
Subject: CN=53cf54defc9e8c18c2dd7b079130dead484db58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:14:3a:8b:1e:7f:3a:e4:f8:eb:6e:07:62:
13:d8:12:0f:20:56:db:9a:03:ba:68:21:2c:86:42:
d7:82:1d:88:00:95:e2:a8:26:df:12:cd:1c:24:8a:
64:ce:83:9f:d0:9b:12:56:22:99:e5:2c:29:96:c5:
b7:78:d9:ae:c8:2a:4e:13:93:c8:9a:f4:86:d3:b2:
d9:53:76:da:2a:57:db:53:f4:93:c1:5f:df:4e:37:
cb:1f:fc:63:e5:d2:c6:bc:20:de:e1:55:2d:c2:17:
c5:f2:38:a8:c5:da:3a:78:1f:a2:7b:98:cb:ed:41:
25:6a:4d:c3:20:4f:36:1b:03:d2:ca:df:97:93:93:
9c:ca:e1:12:15:d4:68:10:a7:56:2a:74:d3:e1:1d:
63:cc:c0:40:60:45:0f:96:2f:0c:8f:8e:fe:26:40:
74:01:70:0a:dd:fb:8d:cd:44:48:60:b5:d7:44:24:
26:ba:0d:69:46:20:2a:ff:db:6c:21:32:5a:85:80:
4a:46:7c:f0:7b:53:c1:96:01:86:fe:54:11:a3:0d:
b0:2a:a3:fc:90:86:27:b9:77:44:f6:66:b9:d8:e1:
f1:b5:13:05:5f:ae:eb:c8:7f:b5:ce:63:79:db:e8:
68:a9:85:58:b4:5c:3d:d8:e4:99:e8:ec:31:d3:4b:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:54:DE:FC:9E:8C:18:C2:DD:7B:07:91:30:DE:AD:48:4D:B5:8C
X509v3 Authority Key Identifier:
keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:82:65:c5:31:9f:d7:9a:11:6a:ed:d1:65:2b:dd:c5:19:3b:
41:47:a0:ac:8f:6f:2a:9d:76:74:a5:2a:53:63:ee:8a:6d:b4:
47:1f:36:e2:97:be:59:f1:bd:4f:ac:e9:a8:a7:b7:8e:44:ba:
75:71:c8:2d:cf:39:ce:8b:a4:86:df:ce:97:b2:d7:5f:19:db:
b2:8f:48:78:c3:eb:b7:cf:27:21:da:e3:ad:f3:f1:a3:a0:c8:
14:ca:18:1e:c6:1e:6e:99:70:f4:1d:29:47:79:a6:0d:6a:97:
e5:a4:2e:51:66:1b:72:36:99:34:77:e3:60:61:70:f3:16:f4:
4b:45:b8:75:4a:5c:81:bc:d0:2f:3a:ac:2f:7a:af:2f:a7:00:
66:d2:dc:bd:3d:77:36:aa:e8:c7:79:da:d7:40:07:14:b1:be:
2b:98:50:93:58:70:99:01:ff:77:fa:0c:60:5c:d1:8e:f1:2a:
d8:31:d2:bf:16:ae:07:f7:c3:f6:84:ba:14:1b:b0:7a:e5:4d:
b5:66:c0:ac:d7:78:1a:2f:51:95:1c:99:80:c1:2b:82:d8:8a:
a0:3e:ee:83:2c:a8:6f:5c:f5:de:cf:db:a7:60:ce:13:17:ce:
3d:66:df:77:2d:a1:a1:91:93:09:35:44:b3:3f:fc:0c:69:99:
b7:c8:4f:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjFoyJTs5ssmydzLjwbOP1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZTk4ZGVlOWFhZGM4NmI0ZGZhOWUxNjhkOTIxYmQ4MGJh
M2YzYTYwHhcNMjUwODIwMDQwMDU5WhcNMjUwODIxMDQwMDU5WjAzMTEwLwYDVQQD
Eyg1M2NmNTRkZWZjOWU4YzE4YzJkZDdiMDc5MTMwZGVhZDQ4NGRiNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mAUOosefzrk+OtuB2IT2BIPIFbb
mgO6aCEshkLXgh2IAJXiqCbfEs0cJIpkzoOf0JsSViKZ5SwplsW3eNmuyCpOE5PI
mvSG07LZU3baKlfbU/STwV/fTjfLH/xj5dLGvCDe4VUtwhfF8jioxdo6eB+ie5jL
7UElak3DIE82GwPSyt+Xk5OcyuESFdRoEKdWKnTT4R1jzMBAYEUPli8Mj47+JkB0
AXAK3fuNzURIYLXXRCQmug1pRiAq/9tsITJahYBKRnzwe1PBlgGG/lQRow2wKqP8
kIYnuXdE9ma52OHxtRMFX67ryH+1zmN52+hoqYVYtFw92OSZ6Owx00seJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPPVN78nowYwt17B5Ew3q1ITbWMMB8GA1UdIwQY
MBaAFHjpje6archrTfqeFo2SG9gLo/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMt
NWM3MTk1NmE1Mzc3LzEvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMtNWM3MTk1NmE1Mzc3
LzEvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYJlxTGf
15oRau3RZSvdxRk7QUegrI9vKp12dKUqU2Puim20Rx824pe+WfG9T6zpqKe3jkS6
dXHILc85zoukht/Ol7LXXxnbso9IeMPrt88nIdrjrfPxo6DIFMoYHsYebplw9B0p
R3mmDWqX5aQuUWYbcjaZNHfjYGFw8xb0S0W4dUpcgbzQLzqsL3qvL6cAZtLcvT13
Nqrox3na10AHFLG+K5hQk1hwmQH/d/oMYFzRjvEq2DHSvxauB/fD9oS6FBuweuVN
tWbArNd4Gi9RlRyZgMErgtiKoD7ugyyob1z13s/bp2DOExfOPWbfdy2hoZGTCTVE
sz/8DGmZt8hPOw==
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:54:00 2025 by rpki-client