Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File: E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier: 5ix1Z+ehPbPuJ2aYIPxGh78IDOWsjp050bac14EWr9Y=
Subject key identifier: D0:82:A3:B4:34:A0:67:71:55:28:AD:7B:DC:AD:C6:45:25:24:70:32
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 0197469EB6B6D1BFCEBF7E6C5B6BF694C333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number: 159C
Signing time: Fri 06 Jun 2025 19:01:35 +0000
Manifest this update: Fri 06 Jun 2025 19:01:35 +0000
Manifest next update: Sat 07 Jun 2025 19:01:35 +0000
Files and hashes: 1: 5KU69xpItYQY0WxFGzbCaR_xF-I.roa (hash: nALEvmxEmiAuf2P9EYLZypsp4ZL3LnUKyRUMkW+WsNM=)
2: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: jI3Z+pyComO3nOMRuREcUF1T/Ow3EkBMv0/noh5iL8M=)
3: iCZ5LkRRabrQM8eb0h1397FNbPc.roa (hash: /PXtPb3g/8dNDvzzTJMTXsHm+K21xBEsZZ9tlSPaX0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:b6:b6:d1:bf:ce:bf:7e:6c:5b:6b:f6:94:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Jun 6 19:01:35 2025 GMT
Not After : Jun 7 19:01:35 2025 GMT
Subject: CN=d082a3b434a067715528ad7bdcadc64525247032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:e4:6f:b7:16:52:35:dd:dd:ef:41:1b:63:
31:6a:6d:70:d3:f6:29:85:48:d8:93:55:cb:ed:53:
4a:1a:fd:47:e9:c7:38:1e:35:65:33:a1:9a:3e:9b:
83:68:56:11:1a:67:73:7a:f6:4e:70:c9:09:b9:09:
44:9f:64:71:9a:6d:04:6d:9c:61:85:23:f7:54:59:
df:6e:4b:4c:d5:6a:91:8b:81:83:29:5f:b1:95:1a:
59:4d:78:1b:e9:60:2d:54:6d:38:fc:c8:c0:45:be:
46:bf:18:ac:b6:e9:e8:a6:89:14:3b:c4:80:a0:5a:
be:1c:fb:3c:37:6f:16:c8:06:0f:5e:38:ed:5f:04:
2d:71:0d:1e:89:8f:3e:10:1b:2e:a2:b9:de:6d:66:
a7:74:48:e2:c1:93:f7:18:8c:96:b5:79:86:6d:ed:
a7:b6:67:e5:8c:7f:16:4b:bf:2b:41:15:35:ee:f5:
d4:fd:cc:62:f5:66:12:e5:45:18:e7:5e:cb:12:8c:
e9:d9:6b:f7:4f:c9:2b:11:8f:b0:49:55:1c:22:06:
7d:56:4b:1c:be:a3:07:c1:05:62:3c:d7:e1:48:77:
7e:fa:f5:73:5e:0f:84:10:b1:b1:bc:74:3f:00:22:
de:24:86:25:fb:31:1c:fa:ca:83:2c:a8:cd:56:c6:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:82:A3:B4:34:A0:67:71:55:28:AD:7B:DC:AD:C6:45:25:24:70:32
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6d:c0:41:ff:e3:9d:00:d4:5b:c6:ea:3c:2e:03:99:05:9f:
f9:17:03:05:e5:b0:f4:c6:1e:75:4e:d2:03:4f:8f:c6:b2:51:
39:26:d5:a6:af:a8:74:19:7b:28:16:77:1f:91:00:6e:a3:dc:
5e:8c:ed:cc:fb:82:9f:d1:56:bd:72:17:f3:2c:ce:eb:1f:d7:
ab:7e:41:fe:a3:4b:d8:d9:8a:05:12:63:3c:ad:c6:f8:54:20:
e5:7f:6a:8b:7d:04:6d:a0:f2:66:44:54:f6:e6:66:3f:b6:aa:
90:d7:ef:31:8e:af:71:1a:72:89:32:bb:86:e2:b1:6e:c9:3c:
03:cf:c1:73:67:54:18:b7:f3:e7:d4:39:2f:87:0c:42:02:3c:
21:a6:a0:87:19:33:fe:2b:96:b7:d9:69:6f:c8:d7:8e:a4:30:
39:7e:42:09:fa:14:2e:15:62:dc:b7:09:4a:f5:29:f6:24:39:
59:0e:e2:8f:89:3f:ff:21:54:90:f1:20:eb:c9:f5:fe:ff:67:
e3:81:60:ae:63:fe:20:27:cc:f2:60:44:e7:45:83:06:2e:12:
3e:65:a2:60:fc:e7:5c:58:ee:80:7d:68:ea:9c:7d:70:38:ca:
bc:9a:f2:b5:46:54:d2:29:43:00:81:5c:c6:55:5f:5f:dc:fb:
59:cd:77:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnra20b/Ov35sW2v2lMMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjZiOTYwYTZmMWYwNDQzOWYwOTE4NmY5ZWNmNTMxYTlj
ZTI2NDgwHhcNMjUwNjA2MTkwMTM1WhcNMjUwNjA3MTkwMTM1WjAzMTEwLwYDVQQD
EyhkMDgyYTNiNDM0YTA2NzcxNTUyOGFkN2JkY2FkYzY0NTI1MjQ3MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5nkb7cWUjXd3e9BG2Mxam1w0/Yp
hUjYk1XL7VNKGv1H6cc4HjVlM6GaPpuDaFYRGmdzevZOcMkJuQlEn2Rxmm0EbZxh
hSP3VFnfbktM1WqRi4GDKV+xlRpZTXgb6WAtVG04/MjARb5GvxistunopokUO8SA
oFq+HPs8N28WyAYPXjjtXwQtcQ0eiY8+EBsuornebWandEjiwZP3GIyWtXmGbe2n
tmfljH8WS78rQRU17vXU/cxi9WYS5UUY517LEozp2Wv3T8krEY+wSVUcIgZ9Vksc
vqMHwQViPNfhSHd++vVzXg+EELGxvHQ/ACLeJIYl+zEc+sqDLKjNVsbIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCCo7Q0oGdxVSite9ytxkUlJHAyMB8GA1UdIwQY
MBaAFBNmuWCm8fBEOfCRhvns9TGpziZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjIt
YTk2NzE1OWY4ODdkLzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjItYTk2NzE1OWY4ODdk
LzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGG3AQf/j
nQDUW8bqPC4DmQWf+RcDBeWw9MYedU7SA0+PxrJROSbVpq+odBl7KBZ3H5EAbqPc
XoztzPuCn9FWvXIX8yzO6x/Xq35B/qNL2NmKBRJjPK3G+FQg5X9qi30EbaDyZkRU
9uZmP7aqkNfvMY6vcRpyiTK7huKxbsk8A8/Bc2dUGLfz59Q5L4cMQgI8Iaaghxkz
/iuWt9lpb8jXjqQwOX5CCfoULhVi3LcJSvUp9iQ5WQ7ij4k//yFUkPEg68n1/v9n
44FgrmP+ICfM8mBE50WDBi4SPmWiYPznXFjugH1o6px9cDjKvJrytUZU0ilDAIFc
xlVfX9z7Wc13hw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:34:17 2025 by rpki-client