Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File: eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier: nbJ55pLFYV6+rdRECc+t0TZecey+17l1pH502w78oO0=
Subject key identifier: 7C:4C:B0:1B:E4:81:4F:12:EA:E0:33:0E:0E:BE:C0:A9:0D:1F:DB:C9
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial: 01992BFD1703518B422CA5B9A28620FBEDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number: 0652
Signing time: Tue 09 Sep 2025 01:00:30 +0000
Manifest this update: Tue 09 Sep 2025 01:00:30 +0000
Manifest next update: Wed 10 Sep 2025 01:00:30 +0000
Files and hashes: 1: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: pxbunEbzqgUEFRiVK1XaWDycXjCju5OWFFgS1otCzYA=)
2: rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa (hash: ZIVMbBVJwlrHJ75Ki0ODTTpJ9+ylEgTfPq67Cig5C+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:17:03:51:8b:42:2c:a5:b9:a2:86:20:fb:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Validity
Not Before: Sep 9 01:00:30 2025 GMT
Not After : Sep 10 01:00:30 2025 GMT
Subject: CN=7c4cb01be4814f12eae0330e0ebec0a90d1fdbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:19:f0:e6:ef:17:d0:44:2f:77:4f:04:a1:
51:a8:38:60:60:c4:4a:a6:13:2b:67:55:fa:57:79:
2f:dc:67:38:61:91:43:7b:49:78:e4:67:2e:58:e1:
c4:6e:45:3f:ab:07:b3:6b:20:4e:63:a9:b5:a6:ab:
55:97:55:ba:b8:89:ea:41:6a:7c:e6:7a:ff:94:f9:
d9:70:f7:49:a1:4f:71:6a:d3:c3:4c:4b:75:be:b2:
9d:8e:84:d5:8e:d5:ba:f2:26:58:a9:7c:0b:a7:fd:
db:62:7c:56:fe:89:ba:3a:78:55:42:8a:a7:e6:b0:
53:4b:55:80:72:f1:c6:e1:0b:a1:0a:01:a1:d2:b8:
1a:b7:28:c4:ca:2e:3d:11:63:0b:ce:a2:8f:7b:25:
fe:74:35:b2:82:79:1f:ab:b4:aa:87:82:f3:99:1b:
e5:25:7f:e9:a0:98:ff:d2:7d:84:f5:82:80:6b:e8:
e8:a6:b7:81:db:a4:1d:5b:c6:c2:f6:f9:ef:6f:f9:
82:5c:de:ab:d7:41:0a:8f:2f:79:c8:b8:b9:16:f6:
a0:95:db:64:fc:66:e5:51:1b:80:1b:ac:2c:40:21:
69:99:c0:8f:12:23:f3:50:32:c1:de:aa:14:7d:a3:
09:35:47:5f:44:44:fc:d1:3c:0d:4d:fd:18:d7:14:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:B0:1B:E4:81:4F:12:EA:E0:33:0E:0E:BE:C0:A9:0D:1F:DB:C9
X509v3 Authority Key Identifier:
keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:88:6c:33:b1:6a:43:76:c6:e3:01:f1:2b:5a:06:b5:e1:fc:
12:54:f3:bf:61:b0:5c:9b:52:d0:f0:82:b8:b8:54:23:b3:82:
f7:a8:c7:b2:7d:b1:40:04:40:68:c8:51:53:4e:fe:08:f3:04:
e1:c8:a5:db:51:bc:63:7a:8d:19:d9:da:69:aa:5d:ce:b9:58:
29:df:c3:7a:7a:15:3b:23:62:97:ba:d9:e0:d7:88:91:68:20:
ab:21:c3:c5:a8:11:b4:65:de:f9:89:44:b3:5a:ed:8e:a3:1e:
a6:68:89:4a:a8:b5:7c:71:06:68:af:d3:dd:af:21:a0:be:0e:
cd:58:a5:c7:ae:3e:54:29:1c:2e:42:8f:83:87:29:ff:5c:da:
04:3e:80:ed:ed:91:83:bd:57:fe:1a:d5:b7:03:b1:e3:78:73:
1a:9c:db:4f:93:41:4a:28:52:b4:1c:42:9c:c2:db:9e:1f:69:
be:eb:ab:52:d1:2b:d8:34:3a:c6:0a:ff:bf:f1:a3:12:59:26:
b9:8b:d6:52:a9:f7:bb:0d:3d:d0:50:2b:82:85:67:15:e2:1b:
54:07:49:a3:ae:85:77:9c:96:92:34:48:e3:13:16:6a:25:c0:
cd:71:e3:28:d3:5a:42:21:eb:e9:f4:28:0e:7c:eb:25:10:57:
b1:dd:ec:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkr/RcDUYtCLKW5ooYg++3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjBiMTlkNTBkNjFhN2UzMzNmM2QzMDBmMTE0OWNlZmRl
N2I2NGYwHhcNMjUwOTA5MDEwMDMwWhcNMjUwOTEwMDEwMDMwWjAzMTEwLwYDVQQD
Eyg3YzRjYjAxYmU0ODE0ZjEyZWFlMDMzMGUwZWJlYzBhOTBkMWZkYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulEZ8ObvF9BEL3dPBKFRqDhgYMRK
phMrZ1X6V3kv3Gc4YZFDe0l45GcuWOHEbkU/qwezayBOY6m1pqtVl1W6uInqQWp8
5nr/lPnZcPdJoU9xatPDTEt1vrKdjoTVjtW68iZYqXwLp/3bYnxW/om6OnhVQoqn
5rBTS1WAcvHG4QuhCgGh0rgatyjEyi49EWMLzqKPeyX+dDWygnkfq7Sqh4LzmRvl
JX/poJj/0n2E9YKAa+jopreB26QdW8bC9vnvb/mCXN6r10EKjy95yLi5Fvagldtk
/GblURuAG6wsQCFpmcCPEiPzUDLB3qoUfaMJNUdfRET80TwNTf0Y1xTbNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxMsBvkgU8S6uAzDg6+wKkNH9vJMB8GA1UdIwQY
MBaAFHiwsZ1Q1hp+Mz89MA8RSc7957ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDIt
ZjBlZDlhMmFiNjU0LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDItZjBlZDlhMmFiNjU0
LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIhsM7Fq
Q3bG4wHxK1oGteH8ElTzv2GwXJtS0PCCuLhUI7OC96jHsn2xQARAaMhRU07+CPME
4cil21G8Y3qNGdnaaapdzrlYKd/DenoVOyNil7rZ4NeIkWggqyHDxagRtGXe+YlE
s1rtjqMepmiJSqi1fHEGaK/T3a8hoL4OzVilx64+VCkcLkKPg4cp/1zaBD6A7e2R
g71X/hrVtwOx43hzGpzbT5NBSihStBxCnMLbnh9pvuurUtEr2DQ6xgr/v/GjElkm
uYvWUqn3uw090FArgoVnFeIbVAdJo66Fd5yWkjRI4xMWaiXAzXHjKNNaQiHr6fQo
DnzrJRBXsd3syA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:38:58 2025 by rpki-client