Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: kq0+mWQ6nCgj/37RY7RIAov/9k0LYNLfpchGhjiEwFc=
Subject key identifier: EA:8F:D1:DC:02:98:28:64:AF:CA:BB:22:FF:A3:03:5D:D8:FC:8F:C1
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 01975F13E739FA1CCA920DB7D7B1DB223308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 15
Signing time: Wed 11 Jun 2025 13:00:29 +0000
Manifest this update: Wed 11 Jun 2025 13:00:29 +0000
Manifest next update: Thu 12 Jun 2025 13:00:29 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: TLPfxuu5B4qmwGZs6+IjsVIHMdsBv/JOQWlM9mYhSt4=)
2: nHxs1XMfnqzh-Z8aeIMb_NiElkE.roa (hash: 8Qy8fF7R1NwaP6gn0wt2uKO1stfFsvaIv7LK8MDpXo4=)
3: uPdsoPPsIplTvcCyAbcJMwYg9pQ.roa (hash: csIN1YT5O+6UepoAW4L5bp8f0Qp/luUK9hGbpbp+j+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:13:e7:39:fa:1c:ca:92:0d:b7:d7:b1:db:22:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Jun 11 13:00:29 2025 GMT
Not After : Jun 12 13:00:29 2025 GMT
Subject: CN=ea8fd1dc02982864afcabb22ffa3035dd8fc8fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:be:50:ba:3b:3c:31:96:b5:b9:ac:8c:51:
6a:47:df:16:26:66:d7:46:22:3b:90:2b:48:82:2c:
86:9a:ae:bf:56:7b:3d:17:8a:67:41:29:ed:54:e0:
e3:83:4a:22:6c:00:d4:9a:43:4c:ef:40:f9:29:76:
c0:c3:b4:f2:51:35:10:71:4d:98:9c:95:17:4a:b7:
09:91:d8:7c:2a:77:07:fd:e2:a4:db:57:51:4f:98:
eb:5e:f5:8e:8c:8d:b7:3d:20:9a:b7:3a:5e:eb:85:
af:81:a1:cf:c1:ef:95:4b:4e:7b:33:0a:fd:c1:12:
d8:45:8b:c4:50:95:c0:01:22:fb:df:c9:ab:23:29:
ea:c0:fc:d5:56:29:57:aa:38:dc:de:d6:3f:58:76:
cb:7e:31:37:ea:b6:41:e6:d8:33:4a:9e:de:3c:41:
a3:de:ed:25:75:02:5c:d9:1f:2b:17:ae:d4:52:31:
02:09:34:63:db:a6:32:38:07:96:64:84:97:a6:ee:
31:93:06:99:ac:18:2d:98:c8:4f:7c:7e:cf:69:51:
65:4f:be:79:25:43:10:4a:e4:77:39:a4:4a:f9:7d:
05:08:fe:69:29:33:fe:37:ba:f9:04:ac:30:fc:3b:
48:01:cf:ef:30:0e:ab:07:3e:85:14:54:15:08:7b:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:D1:DC:02:98:28:64:AF:CA:BB:22:FF:A3:03:5D:D8:FC:8F:C1
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0a:1d:ab:55:c6:4b:74:8f:22:8a:17:fd:59:3b:5a:9b:5d:
ee:73:d0:5f:53:37:8c:f5:c6:42:4f:51:28:41:73:e1:fc:cc:
b3:24:ed:62:95:f8:de:e0:ac:93:ce:5a:9f:49:11:b7:21:bc:
43:45:15:7a:c1:9b:29:63:d0:76:01:56:cd:e1:42:26:b3:7a:
2f:05:91:b7:79:8e:6c:b9:af:48:e8:76:70:a4:0a:cf:3a:d7:
8c:b5:5a:49:08:58:c4:74:f9:dc:ab:0b:57:31:3a:a8:c2:a7:
fd:2c:c1:e9:22:fb:63:cf:30:da:f8:41:7e:d7:6c:a9:94:31:
ea:b0:bd:b8:d5:77:ed:3c:85:87:3a:a9:a3:2b:bc:0d:ef:5b:
96:1e:43:f5:ea:b8:8f:94:4e:b4:bf:13:cc:d5:4d:52:96:b0:
18:79:2e:ed:52:c0:ea:e4:ef:6e:c0:69:5a:35:ad:1c:da:69:
c5:ad:d3:51:a6:ec:fd:fa:da:74:35:b6:65:79:d2:e6:a8:3c:
68:16:d3:69:8f:b8:0a:8c:0c:8c:7e:3c:f9:11:05:38:45:26:
74:8c:11:93:16:aa:55:55:a9:b8:52:cc:eb:a5:09:3e:ff:92:
9c:ea:8d:d4:9e:07:bb:57:a4:3d:f2:aa:66:f2:34:e1:a9:80:
28:fa:63:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfE+c5+hzKkg2317HbIjMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh
M2ViZjQwHhcNMjUwNjExMTMwMDI5WhcNMjUwNjEyMTMwMDI5WjAzMTEwLwYDVQQD
EyhlYThmZDFkYzAyOTgyODY0YWZjYWJiMjJmZmEzMDM1ZGQ4ZmM4ZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmu+ULo7PDGWtbmsjFFqR98WJmbX
RiI7kCtIgiyGmq6/Vns9F4pnQSntVODjg0oibADUmkNM70D5KXbAw7TyUTUQcU2Y
nJUXSrcJkdh8KncH/eKk21dRT5jrXvWOjI23PSCatzpe64WvgaHPwe+VS057Mwr9
wRLYRYvEUJXAASL738mrIynqwPzVVilXqjjc3tY/WHbLfjE36rZB5tgzSp7ePEGj
3u0ldQJc2R8rF67UUjECCTRj26YyOAeWZISXpu4xkwaZrBgtmMhPfH7PaVFlT755
JUMQSuR3OaRK+X0FCP5pKTP+N7r5BKww/DtIAc/vMA6rBz6FFFQVCHth5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqP0dwCmChkr8q7Iv+jA13Y/I/BMB8GA1UdIwQY
MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct
MzQyMWVhNDFkZjM2LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2
LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAodq1XG
S3SPIooX/Vk7Wptd7nPQX1M3jPXGQk9RKEFz4fzMsyTtYpX43uCsk85an0kRtyG8
Q0UVesGbKWPQdgFWzeFCJrN6LwWRt3mObLmvSOh2cKQKzzrXjLVaSQhYxHT53KsL
VzE6qMKn/SzB6SL7Y88w2vhBftdsqZQx6rC9uNV37TyFhzqpoyu8De9blh5D9eq4
j5ROtL8TzNVNUpawGHku7VLA6uTvbsBpWjWtHNppxa3TUabs/fradDW2ZXnS5qg8
aBbTaY+4CowMjH48+REFOEUmdIwRkxaqVVWpuFLM66UJPv+SnOqN1J4Hu1ekPfKq
ZvI04amAKPpjIA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 22:16:08 2025 by rpki-client