Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: LkA08q7bG9SnJdUJ7LHQ4v5jjsHmFlfhg8m6HVGOqGM=
Subject key identifier: A3:1C:EB:EF:EF:C4:B7:30:5D:41:FD:56:0D:5F:32:46:F5:5C:37:94
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01973C8862AAE38B43225593FA6CF3D86E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0CAE
Signing time: Wed 04 Jun 2025 20:01:00 +0000
Manifest this update: Wed 04 Jun 2025 20:01:00 +0000
Manifest next update: Thu 05 Jun 2025 20:01:00 +0000
Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=)
2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: iVia0wKH/yMQ+KD/hkwF/r1AL1rUr1G1/1XFl2LU+uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:88:62:aa:e3:8b:43:22:55:93:fa:6c:f3:d8:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Jun 4 20:01:00 2025 GMT
Not After : Jun 5 20:01:00 2025 GMT
Subject: CN=a31cebefefc4b7305d41fd560d5f3246f55c3794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:bf:eb:ad:df:fa:4a:bb:57:d6:26:f4:88:
ff:f7:52:bd:1e:68:e4:68:6e:0f:fb:d3:87:69:b3:
96:4b:7c:ac:08:21:15:99:db:69:f1:d1:2c:e8:73:
b9:3c:55:b6:1b:a3:ce:82:92:ad:52:b6:d0:b0:fe:
52:d8:78:39:c3:ed:49:50:58:0e:79:e4:36:89:1c:
c5:42:6c:52:31:bd:97:e3:40:fb:e2:f9:84:72:8d:
bf:09:80:d5:91:25:1a:fa:a4:d2:05:f0:64:4e:53:
11:58:4d:2f:b7:f8:fc:1e:20:33:5b:3c:56:0b:aa:
a7:68:0f:d6:2a:86:cd:e2:10:79:39:de:48:dd:0d:
af:12:56:8a:6c:03:1b:77:72:23:34:05:58:61:e0:
9e:a2:3e:e3:3d:24:a3:12:d0:9d:ad:d3:f6:b2:d3:
ef:ab:03:f4:0f:72:0a:cc:a0:23:ff:52:6a:52:a0:
58:59:32:b2:1a:21:3e:db:13:9c:c7:ab:0c:e5:ec:
1a:8c:6b:65:82:73:d5:ef:e3:77:b5:cd:c4:fa:ff:
c3:cb:8b:09:8e:64:72:1b:04:7f:a1:e3:96:b6:7b:
18:6f:47:d1:75:59:0c:ac:96:6d:68:cc:2b:e8:82:
54:d2:6e:ed:67:eb:48:a2:59:a6:d3:fc:96:76:8b:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1C:EB:EF:EF:C4:B7:30:5D:41:FD:56:0D:5F:32:46:F5:5C:37:94
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:6e:49:2f:c0:fd:ec:8d:db:fb:5e:88:55:85:65:5e:c1:
7d:f2:66:ad:18:04:30:ed:d1:24:1b:10:c5:f6:2f:e2:8d:fc:
de:98:24:c8:25:4b:dc:d7:e7:0f:a1:da:05:b2:db:ec:80:64:
10:97:ec:8b:3d:91:a6:59:bf:b8:44:25:39:bf:41:bd:0c:ae:
8b:79:d2:e2:81:48:8b:a7:ce:ce:a0:84:6e:4a:16:1b:0c:23:
87:8c:5a:dc:7c:29:0a:80:d3:98:8a:27:c7:9a:25:b8:6e:cd:
da:35:3e:c1:cc:04:92:56:11:af:43:a9:09:db:63:ca:87:fb:
bd:7e:ec:76:6a:82:4b:b9:0a:57:3f:56:3e:2b:a3:45:91:e8:
72:63:da:d3:cb:58:fa:eb:3d:b2:24:c0:cb:9c:e6:fd:8e:cb:
05:69:d4:46:0a:36:61:51:d0:7c:51:23:8e:0e:cf:26:65:63:
1c:60:c8:9b:88:e0:19:10:4b:11:44:b9:ae:3a:7f:d5:5d:1b:
d6:f7:cf:2f:24:41:fa:0a:ae:b7:ef:10:f9:8b:ca:2c:e0:f0:
86:f6:0d:08:99:30:d1:a5:b5:5c:08:be:47:84:22:62:25:97:
e6:b6:44:10:12:d2:3f:aa:47:f0:5d:b6:be:0a:79:80:dc:76:
8a:f6:b8:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc8iGKq44tDIlWT+mzz2G6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh
YzA4NTkwHhcNMjUwNjA0MjAwMTAwWhcNMjUwNjA1MjAwMTAwWjAzMTEwLwYDVQQD
EyhhMzFjZWJlZmVmYzRiNzMwNWQ0MWZkNTYwZDVmMzI0NmY1NWMzNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkey/663f+kq7V9Ym9Ij/91K9Hmjk
aG4P+9OHabOWS3ysCCEVmdtp8dEs6HO5PFW2G6POgpKtUrbQsP5S2Hg5w+1JUFgO
eeQ2iRzFQmxSMb2X40D74vmEco2/CYDVkSUa+qTSBfBkTlMRWE0vt/j8HiAzWzxW
C6qnaA/WKobN4hB5Od5I3Q2vElaKbAMbd3IjNAVYYeCeoj7jPSSjEtCdrdP2stPv
qwP0D3IKzKAj/1JqUqBYWTKyGiE+2xOcx6sM5ewajGtlgnPV7+N3tc3E+v/Dy4sJ
jmRyGwR/oeOWtnsYb0fRdVkMrJZtaMwr6IJU0m7tZ+tIolmm0/yWdotFowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMc6+/vxLcwXUH9Vg1fMkb1XDeUMB8GA1UdIwQY
MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt
ZWYyMTkzODFmMTBlLzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl
LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieZuSS/A
/eyN2/teiFWFZV7BffJmrRgEMO3RJBsQxfYv4o383pgkyCVL3NfnD6HaBbLb7IBk
EJfsiz2Rplm/uEQlOb9BvQyui3nS4oFIi6fOzqCEbkoWGwwjh4xa3HwpCoDTmIon
x5oluG7N2jU+wcwEklYRr0OpCdtjyof7vX7sdmqCS7kKVz9WPiujRZHocmPa08tY
+us9siTAy5zm/Y7LBWnURgo2YVHQfFEjjg7PJmVjHGDIm4jgGRBLEUS5rjp/1V0b
1vfPLyRB+gqut+8Q+YvKLODwhvYNCJkw0aW1XAi+R4QiYiWX5rZEEBLSP6pH8F22
vgp5gNx2iva4gg==
-----END CERTIFICATE-----
Generated at Wed Jun 4 23:59:23 2025 by rpki-client