Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: cSdTTPj4zGjBDgYwKGqBSK6kdsdCT5cOrmRGbLwf6PE=
Subject key identifier: 2A:7D:7A:C5:AE:D1:FA:36:0C:71:BE:D3:15:F1:DD:94:36:B1:58:15
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 01975DCAD4B9E8C57F1228026AA888FE0F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 1292
Signing time: Wed 11 Jun 2025 07:01:03 +0000
Manifest this update: Wed 11 Jun 2025 07:01:03 +0000
Manifest next update: Thu 12 Jun 2025 07:01:03 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: R/fQxondA+dmEx0Zyp4n/6NxA4sgrUrZLUqFXdzARjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:d4:b9:e8:c5:7f:12:28:02:6a:a8:88:fe:0f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Jun 11 07:01:03 2025 GMT
Not After : Jun 12 07:01:03 2025 GMT
Subject: CN=2a7d7ac5aed1fa360c71bed315f1dd9436b15815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:02:e1:41:ca:a4:4c:2f:ed:bb:bb:11:ef:
dd:47:82:17:75:2e:a1:0e:54:fb:cd:95:bc:52:ee:
38:bd:04:09:9a:79:c4:59:29:a6:35:54:8d:76:e2:
ba:2e:84:78:ad:fa:d2:42:32:f6:d7:c2:be:64:5c:
5a:38:01:3f:d3:35:c8:c5:af:0f:e0:a6:70:18:10:
c1:53:49:f5:a2:cb:62:ce:d4:36:c7:47:8d:11:4a:
65:4a:ef:c2:d1:73:39:b6:0a:cb:db:54:7d:c5:48:
d3:df:28:6c:2f:d4:90:e7:b5:ba:31:53:2f:4e:2a:
98:67:80:ee:77:ed:6f:45:22:89:78:83:54:10:e6:
c5:60:c4:9f:db:04:7f:81:be:43:bb:bb:62:f4:90:
e4:45:88:97:df:ca:c8:e7:c7:11:b0:18:2d:56:f5:
ef:35:64:84:22:b7:42:b9:21:cc:4a:be:22:d8:63:
ea:fc:85:7a:0c:74:ad:83:91:40:1b:43:9d:62:6f:
22:4a:73:d4:39:b9:88:c1:c4:9f:10:d3:6a:43:ab:
96:16:a3:5f:9d:f0:85:b4:23:1c:db:e0:87:0f:ad:
51:5a:aa:7f:10:10:55:73:47:54:9a:3a:aa:56:a8:
0d:02:11:87:25:4e:3f:0d:ab:73:c0:f6:b8:8d:5e:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:7A:C5:AE:D1:FA:36:0C:71:BE:D3:15:F1:DD:94:36:B1:58:15
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ae:0c:ac:5b:7b:1a:e2:07:e3:ec:df:3e:39:65:31:41:2c:
e6:f4:15:06:db:d7:fc:66:95:7b:62:12:e4:50:ac:be:9c:1a:
80:16:20:4a:00:63:70:11:f2:5b:2f:ef:d7:50:08:97:e4:54:
78:2b:f9:de:69:dd:18:15:e9:09:12:89:dc:65:f1:09:29:f2:
52:0b:0f:8a:69:9a:24:2e:10:04:b4:8e:4a:eb:4b:0a:ae:cf:
aa:0f:6d:81:fd:ce:22:f4:72:e9:7c:63:88:a1:16:6d:4a:09:
c2:58:3e:0e:9a:2d:8e:0c:ed:04:9d:ce:ca:2a:1d:ca:29:8b:
00:70:d6:c3:f4:82:93:57:b2:a6:10:c0:00:7e:b2:a3:8c:35:
50:09:a4:10:b4:3e:7f:f7:42:a3:e3:8d:47:4d:f6:90:3d:48:
95:d7:b2:0c:a9:d6:eb:0d:53:48:69:d8:fc:ec:54:e0:7a:49:
4c:17:da:75:51:bd:4c:33:db:7e:d8:15:21:bd:5f:bb:88:19:
ad:d4:31:0c:94:38:66:23:ec:21:1f:38:7b:7a:89:63:52:8b:
11:d2:ad:d7:f2:f6:a6:37:06:11:7a:0c:a2:b2:2e:da:b9:22:
69:ab:86:96:97:fa:6b:ab:ab:ba:29:28:a3:ae:ec:71:b2:93:
af:df:f2:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddytS56MV/EigCaqiI/g89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMDI5Yjg3MDRjMzJiYWZlYzJiM2M4MjlmY2Y1ODZhYTFi
M2Q5YzEwHhcNMjUwNjExMDcwMTAzWhcNMjUwNjEyMDcwMTAzWjAzMTEwLwYDVQQD
EygyYTdkN2FjNWFlZDFmYTM2MGM3MWJlZDMxNWYxZGQ5NDM2YjE1ODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y0C4UHKpEwv7bu7Ee/dR4IXdS6h
DlT7zZW8Uu44vQQJmnnEWSmmNVSNduK6LoR4rfrSQjL218K+ZFxaOAE/0zXIxa8P
4KZwGBDBU0n1ostiztQ2x0eNEUplSu/C0XM5tgrL21R9xUjT3yhsL9SQ57W6MVMv
TiqYZ4Dud+1vRSKJeINUEObFYMSf2wR/gb5Du7ti9JDkRYiX38rI58cRsBgtVvXv
NWSEIrdCuSHMSr4i2GPq/IV6DHStg5FAG0OdYm8iSnPUObmIwcSfENNqQ6uWFqNf
nfCFtCMc2+CHD61RWqp/EBBVc0dUmjqqVqgNAhGHJU4/DatzwPa4jV4tjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp9esWu0fo2DHG+0xXx3ZQ2sVgVMB8GA1UdIwQY
MBaAFBECm4cEwyuv7Cs8gp/PWGqhs9nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hYzgyNmEtMDliMC00YzU5LTlkYWUt
Y2U5YTc0MjFmYTY5LzEvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hYzgyNmEtMDliMC00YzU5LTlkYWUtY2U5YTc0MjFmYTY5
LzEvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPa4MrFt7
GuIH4+zfPjllMUEs5vQVBtvX/GaVe2IS5FCsvpwagBYgSgBjcBHyWy/v11AIl+RU
eCv53mndGBXpCRKJ3GXxCSnyUgsPimmaJC4QBLSOSutLCq7Pqg9tgf3OIvRy6Xxj
iKEWbUoJwlg+DpotjgztBJ3OyiodyimLAHDWw/SCk1eyphDAAH6yo4w1UAmkELQ+
f/dCo+ONR032kD1IldeyDKnW6w1TSGnY/OxU4HpJTBfadVG9TDPbftgVIb1fu4gZ
rdQxDJQ4ZiPsIR84e3qJY1KLEdKt1/L2pjcGEXoMorIu2rkiaauGlpf6a6uruiko
o67scbKTr9/yTA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:44 2025 by rpki-client