Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
File: euxtTzVbc4ad_qGnkYDIoheN8f0.mft (raw, json)
Hash identifier: iuBhOwcGv37piOZVGNUjnw/xf1CyzKpgoOAg9AidoD4=
Subject key identifier: 9D:25:A9:19:93:85:2E:A2:22:31:ED:8B:43:63:A1:00:04:75:90:CC
Authority key identifier: 7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD
Certificate issuer: /CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
Certificate serial: 019922FA2E6129C18C26142AC885E3C5CECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
Manifest number: 0219
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: GlERHStnJxWQurcUkrnzvUsZBvQ.roa (hash: 2BqHZp4aDN03bLESoTVqSnJeyUSck+7eAGoy0G/N7ws=)
2: euxtTzVbc4ad_qGnkYDIoheN8f0.crl (hash: iYXfK1VSj5QPTxOqujwlPLXDzqv6g1bXSzVfaJrlLLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2e:61:29:c1:8c:26:14:2a:c8:85:e3:c5:ce:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=9d25a91993852ea22231ed8b4363a100047590cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:f3:91:fd:42:6a:d2:c2:c7:a4:a2:d3:bd:
b2:c5:de:69:b1:ca:17:fe:eb:e8:ad:91:33:45:fc:
3e:d4:e9:8c:a0:8d:ee:e8:36:a2:a5:9b:93:e2:de:
fa:d8:eb:ba:7e:5a:44:3d:d7:b8:a4:d5:e2:b9:7e:
f5:54:7d:7c:e5:74:25:5c:33:5b:93:d5:77:56:21:
b0:c0:78:7e:23:2e:49:d2:43:84:89:b6:82:d8:39:
aa:44:15:07:2e:df:58:be:7c:50:2d:2b:71:f4:7e:
8f:d3:fa:62:dd:93:f5:0f:dc:86:78:a7:8c:59:d7:
79:b5:f8:af:a9:96:a7:3b:27:1b:6a:1d:4d:b2:2c:
54:ee:d8:d3:44:68:d4:48:42:d6:cc:83:d2:19:db:
77:4d:6a:84:e0:8c:98:65:14:5e:74:0b:7c:6d:d0:
5b:c9:81:74:56:d3:40:18:84:ea:e7:97:84:3d:7c:
52:3f:f0:16:8c:05:df:3c:e6:31:52:28:4c:e9:d4:
ae:6f:9c:52:5d:18:f5:b2:03:1b:26:c9:24:53:80:
ca:c8:be:bb:a6:34:6a:f8:fa:10:a8:5b:7f:71:8c:
eb:91:7c:fe:4d:af:b8:9e:73:a3:96:a6:f3:f6:49:
7b:08:74:92:10:c0:40:c5:52:1f:09:8d:0e:75:82:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:A9:19:93:85:2E:A2:22:31:ED:8B:43:63:A1:00:04:75:90:CC
X509v3 Authority Key Identifier:
keyid:7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f5:56:0d:29:2d:31:e1:80:bd:6f:3f:08:13:99:64:00:46:
47:15:19:0a:8c:f2:8a:94:98:68:57:8d:af:21:09:f1:2e:a7:
27:ec:14:07:e8:45:77:b0:d9:8d:89:f4:b1:69:74:b0:1d:e8:
eb:40:aa:ed:3d:60:da:10:a5:9a:cc:1f:f8:31:50:8d:0f:d9:
94:46:d8:ab:bb:87:09:73:a9:ed:ad:2b:2a:14:38:a5:89:f2:
d2:36:1b:6e:30:5c:4e:48:58:cb:0b:01:d0:ad:f9:8b:97:db:
57:7a:0e:c0:83:93:1c:3e:e7:ca:87:cc:4a:89:25:4b:13:67:
77:90:71:ea:fd:e1:18:5b:87:52:60:73:ab:b8:c3:d8:73:d1:
04:f3:e3:5f:29:ef:23:c7:d3:24:e2:72:57:b4:e3:f4:13:86:
d5:e1:16:8b:1d:0d:8d:75:3d:9a:b0:21:98:82:6c:95:18:7f:
d3:2d:0e:13:92:eb:7b:c5:56:63:62:22:ad:97:a6:1f:9b:5a:
9f:c7:46:28:c4:72:5d:a9:1f:90:a4:bd:c4:a6:a5:dc:08:df:
1b:e7:06:5e:8f:6e:3d:0c:f4:13:ee:5e:5a:c1:09:9c:ad:f3:
56:70:60:fd:25:b5:ca:de:cf:8d:ac:83:7c:94:f9:b7:99:67:
aa:4c:d4:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+i5hKcGMJhQqyIXjxc7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZWM2ZDRmMzU1YjczODY5ZGZlYTFhNzkxODBjOGEyMTc4
ZGYxZmQwHhcNMjUwOTA3MDcwMDQ1WhcNMjUwOTA4MDcwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZDI1YTkxOTkzODUyZWEyMjIzMWVkOGI0MzYzYTEwMDA0NzU5MGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQvzkf1CatLCx6Si072yxd5pscoX
/uvorZEzRfw+1OmMoI3u6DaipZuT4t762Ou6flpEPde4pNXiuX71VH185XQlXDNb
k9V3ViGwwHh+Iy5J0kOEibaC2DmqRBUHLt9YvnxQLStx9H6P0/pi3ZP1D9yGeKeM
Wdd5tfivqZanOycbah1NsixU7tjTRGjUSELWzIPSGdt3TWqE4IyYZRRedAt8bdBb
yYF0VtNAGITq55eEPXxSP/AWjAXfPOYxUihM6dSub5xSXRj1sgMbJskkU4DKyL67
pjRq+PoQqFt/cYzrkXz+Ta+4nnOjlqbz9kl7CHSSEMBAxVIfCY0OdYJLzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0lqRmThS6iIjHti0NjoQAEdZDMMB8GA1UdIwQY
MBaAFHrsbU81W3OGnf6hp5GAyKIXjfH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXV4dFR6VmJjNGFkX3FHbmtZRElvaGVOOGYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80MDUyNmEtMDViYy00ZWM3LWI5OTkt
MWZmNjMwZjFkODQxLzEvZXV4dFR6VmJjNGFkX3FHbmtZRElvaGVOOGYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My80MDUyNmEtMDViYy00ZWM3LWI5OTktMWZmNjMwZjFkODQx
LzEvZXV4dFR6VmJjNGFkX3FHbmtZRElvaGVOOGYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/VWDSkt
MeGAvW8/CBOZZABGRxUZCozyipSYaFeNryEJ8S6nJ+wUB+hFd7DZjYn0sWl0sB3o
60Cq7T1g2hClmswf+DFQjQ/ZlEbYq7uHCXOp7a0rKhQ4pYny0jYbbjBcTkhYywsB
0K35i5fbV3oOwIOTHD7nyofMSoklSxNnd5Bx6v3hGFuHUmBzq7jD2HPRBPPjXynv
I8fTJOJyV7Tj9BOG1eEWix0NjXU9mrAhmIJslRh/0y0OE5Lre8VWY2IirZemH5ta
n8dGKMRyXakfkKS9xKal3AjfG+cGXo9uPQz0E+5eWsEJnK3zVnBg/SW1yt7PjayD
fJT5t5lnqkzUYg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:29 2025 by rpki-client