
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: xcy82HouGjRJySS4W8gGGYyeWuMzv2HJd86YTWriBdY=
Subject key identifier: C3:8F:C4:47:76:61:4D:8F:0E:49:05:F4:73:D5:41:44:70:5C:E5:5C
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 019747430A8904B05F7E6E37AE717AE8ECBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 12B9
Signing time: Fri 06 Jun 2025 22:01:05 +0000
Manifest this update: Fri 06 Jun 2025 22:01:05 +0000
Manifest next update: Sat 07 Jun 2025 22:01:05 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: NxsJ4aocMInxNXRHvKSnyXcJ6UBxO3L18xFfHuyrx0o=)
2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:43:0a:89:04:b0:5f:7e:6e:37:ae:71:7a:e8:ec:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Jun 6 22:01:05 2025 GMT
Not After : Jun 7 22:01:05 2025 GMT
Subject: CN=c38fc44776614d8f0e4905f473d54144705ce55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:c5:d3:9a:74:59:c4:1e:58:c7:e3:e1:0c:
5b:93:47:ac:ce:37:7a:94:bf:88:3d:03:7f:35:ea:
85:a8:ee:40:dd:49:d2:14:b0:f0:02:2c:e6:af:2c:
a0:65:eb:ad:03:a7:8a:8c:4e:56:e7:4d:b1:f7:05:
4f:b9:49:82:c1:34:0e:ad:70:70:a8:4b:cc:86:46:
a2:1e:bf:8d:af:14:d9:74:9d:d4:0c:a9:c4:6e:8b:
41:d5:cf:d6:b5:04:a2:1f:ed:7b:6d:5e:5f:6c:18:
63:dd:70:6d:9c:fe:30:12:07:a1:d9:1b:6f:b6:93:
3b:69:1a:fd:a2:c5:2a:37:ef:c9:26:40:5e:9f:0b:
71:b8:33:0b:56:7a:d8:1d:7a:90:f0:28:82:17:65:
4f:bb:6f:79:d1:70:24:75:ae:90:bc:10:95:64:64:
c4:ec:fb:72:d9:f4:d5:cd:38:11:36:2f:3f:b8:94:
23:78:9f:96:0e:89:b1:a6:1e:51:1e:ae:86:7a:39:
fc:53:c9:e0:86:6b:4b:bf:b1:06:1f:98:fd:0b:30:
34:19:ad:f9:15:76:a7:41:90:a3:cb:07:d4:b0:35:
68:d7:b7:70:b2:70:c0:dd:9e:e9:3d:60:fb:16:17:
fc:42:e9:e3:22:8c:ea:90:06:b8:17:b3:4c:01:8c:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:C4:47:76:61:4D:8F:0E:49:05:F4:73:D5:41:44:70:5C:E5:5C
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:65:cb:b3:c7:6c:0f:b3:ce:b2:d4:8e:df:ed:b3:19:ad:e1:
7e:39:98:38:30:b7:34:0e:53:ce:93:df:6f:12:e1:e2:dc:e8:
ef:65:27:cf:b3:bf:ca:e0:85:f0:78:bb:5b:7c:fe:2f:da:be:
2f:b3:e7:70:ce:53:dd:e9:40:f5:ac:8b:6b:3b:23:5a:76:30:
24:22:84:ba:07:f8:49:57:42:6c:04:4a:21:3d:22:b7:a1:28:
ee:55:58:cd:dd:62:1d:76:b3:71:2f:88:c6:eb:ae:ef:49:12:
7e:f4:3c:82:e2:7d:42:3c:cb:7c:ed:d5:ab:43:49:52:e7:bd:
d8:e8:bb:a8:88:7a:66:e0:28:41:a0:0e:40:70:81:13:c1:46:
6b:53:46:08:d8:06:35:12:4f:9b:4a:9b:8c:3d:51:63:dc:b9:
98:7e:15:f2:81:8d:62:60:aa:23:f9:9d:58:58:41:68:85:34:
6b:29:22:b7:5c:26:d1:f0:ed:15:3d:60:52:bf:31:2e:36:09:
1b:74:ea:31:28:da:d8:78:c3:05:b4:c0:fa:f6:45:5a:27:c7:
6b:cf:89:47:c8:66:3c:c2:3c:f9:18:cd:03:18:6f:1f:59:0b:
55:23:b7:53:66:3d:cb:f2:5e:ae:e3:08:ec:03:a9:c8:f7:40:
67:f2:68:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQwqJBLBffm43rnF66Oy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWM0NzMxZjEwMmMzMGNjMTNlMmZiNWE3Zjk3NThjZWE5
NjM0NTIwHhcNMjUwNjA2MjIwMTA1WhcNMjUwNjA3MjIwMTA1WjAzMTEwLwYDVQQD
EyhjMzhmYzQ0Nzc2NjE0ZDhmMGU0OTA1ZjQ3M2Q1NDE0NDcwNWNlNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIfF05p0WcQeWMfj4Qxbk0eszjd6
lL+IPQN/NeqFqO5A3UnSFLDwAizmryygZeutA6eKjE5W502x9wVPuUmCwTQOrXBw
qEvMhkaiHr+NrxTZdJ3UDKnEbotB1c/WtQSiH+17bV5fbBhj3XBtnP4wEgeh2Rtv
tpM7aRr9osUqN+/JJkBenwtxuDMLVnrYHXqQ8CiCF2VPu2950XAkda6QvBCVZGTE
7Pty2fTVzTgRNi8/uJQjeJ+WDomxph5RHq6Gejn8U8nghmtLv7EGH5j9CzA0Ga35
FXanQZCjywfUsDVo17dwsnDA3Z7pPWD7Fhf8QunjIozqkAa4F7NMAYz8xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOPxEd2YU2PDkkF9HPVQURwXOVcMB8GA1UdIwQY
MBaAFBPsRzHxAsMMwT4vtaf5dYzqljRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAt
ZDQxYmNjOTI4Mzc1LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAtZDQxYmNjOTI4Mzc1
LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2XLs8ds
D7POstSO3+2zGa3hfjmYODC3NA5TzpPfbxLh4tzo72Unz7O/yuCF8Hi7W3z+L9q+
L7PncM5T3elA9ayLazsjWnYwJCKEugf4SVdCbARKIT0it6Eo7lVYzd1iHXazcS+I
xuuu70kSfvQ8guJ9QjzLfO3Vq0NJUue92Oi7qIh6ZuAoQaAOQHCBE8FGa1NGCNgG
NRJPm0qbjD1RY9y5mH4V8oGNYmCqI/mdWFhBaIU0aykit1wm0fDtFT1gUr8xLjYJ
G3TqMSja2HjDBbTA+vZFWifHa8+JR8hmPMI8+RjNAxhvH1kLVSO3U2Y9y/JeruMI
7AOpyPdAZ/Jo5w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:01 2025 by rpki-client