Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File: eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier: YHBBlv0rfUug2T+1R0vd8qkVvGikJXslJYACW9vE2NI=
Subject key identifier: 33:68:78:4A:18:AF:0B:23:F8:A6:0D:4E:45:81:19:5B:86:DB:CA:7B
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 0197E00A99E051B88DD0BCE86DD71A8E8613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number: 0DDB
Signing time: Sun 06 Jul 2025 14:01:20 +0000
Manifest this update: Sun 06 Jul 2025 14:01:20 +0000
Manifest next update: Mon 07 Jul 2025 14:01:20 +0000
Files and hashes: 1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: QD9KeWTyFGizH7qXfe42TzW4hIJUIORalBLHlJbx8vE=)
3: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e0:0a:99:e0:51:b8:8d:d0:bc:e8:6d:d7:1a:8e:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jul 6 14:01:20 2025 GMT
Not After : Jul 7 14:01:20 2025 GMT
Subject: CN=3368784a18af0b23f8a60d4e4581195b86dbca7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:06:79:c7:62:fd:e1:74:77:aa:9d:6c:1d:8e:
3d:5f:7b:d2:0d:2d:d5:cc:1e:13:8b:6e:ee:6c:4f:
fd:35:eb:b4:80:b2:a9:c6:c8:d1:fd:4c:30:33:f2:
49:c1:f9:e0:5c:38:e7:3d:78:57:ad:dd:80:21:84:
55:f5:85:1d:30:81:af:81:57:58:77:4d:9c:c8:b4:
67:43:74:00:41:ec:ca:7b:7e:f5:6c:88:d4:12:ba:
a6:2d:2d:cb:2a:45:b2:c5:e2:f9:ca:bf:18:62:b5:
13:f8:9f:f8:97:4d:ad:48:cd:fe:4f:08:8b:48:ad:
16:46:a8:6c:f0:7c:f6:f5:5c:83:21:8e:41:32:f7:
66:1d:ac:db:7e:f9:ac:87:b1:9f:e0:06:a1:38:db:
fc:76:70:17:90:9d:71:d2:a7:e3:62:e2:b0:33:ce:
3c:16:68:84:94:b8:f9:30:d3:86:2a:dd:ac:c6:16:
d7:e8:3f:bd:49:77:94:70:5c:79:9b:0c:a2:45:8a:
1f:e8:6a:7b:12:bc:10:a5:0f:39:33:4a:08:24:b2:
68:d1:82:2a:c4:b0:05:42:55:b1:13:8e:54:59:29:
60:be:50:14:c5:93:2d:09:8f:76:5d:55:38:cd:de:
59:04:e3:a7:c3:47:fa:df:64:9f:d5:07:48:a2:0c:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:78:4A:18:AF:0B:23:F8:A6:0D:4E:45:81:19:5B:86:DB:CA:7B
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:94:92:e5:4b:b3:ed:fe:9c:6c:bc:41:f0:70:5c:40:b6:f9:
e1:6f:a9:92:7a:59:75:a9:2c:a5:82:c3:79:3d:35:b9:cd:e6:
a0:ac:b1:61:60:f5:d6:07:71:c9:6d:14:35:1a:62:62:3a:ea:
c2:89:60:83:fa:62:51:61:61:65:09:d5:1c:de:1f:e4:73:5a:
1c:bf:f5:42:5e:86:15:af:76:10:78:be:b6:b9:a1:f2:80:33:
34:4f:5e:51:c6:ee:a8:fa:6b:67:94:6d:18:22:59:5c:90:41:
c5:ee:c3:9c:d8:b4:f7:e5:9f:9c:0f:1a:c1:e3:f7:f4:93:28:
b7:6d:83:71:15:53:a1:75:6d:24:35:7d:da:90:53:98:b6:53:
9c:76:c2:1e:3c:b3:54:8d:e6:79:cc:56:1e:27:85:03:95:be:
a1:74:99:4a:3f:28:9d:d0:7e:6b:72:a2:98:c8:ae:36:b2:13:
81:39:3e:92:ec:5d:b4:b7:09:38:1d:d7:8b:fb:99:68:e4:48:
7f:58:86:ca:58:b9:f6:75:e0:05:e8:7e:b9:77:60:8c:01:e5:
9b:29:fc:a2:c5:64:08:d6:ff:c6:50:6d:cb:64:48:6e:44:bb:
d0:a9:6f:37:a9:b9:b9:f3:df:67:a5:50:c5:fe:bb:59:e7:b4:
34:d9:13:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfgCpngUbiN0LzobdcajoYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjUwNzA2MTQwMTIwWhcNMjUwNzA3MTQwMTIwWjAzMTEwLwYDVQQD
EygzMzY4Nzg0YTE4YWYwYjIzZjhhNjBkNGU0NTgxMTk1Yjg2ZGJjYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wZ5x2L94XR3qp1sHY49X3vSDS3V
zB4Ti27ubE/9Neu0gLKpxsjR/UwwM/JJwfngXDjnPXhXrd2AIYRV9YUdMIGvgVdY
d02cyLRnQ3QAQezKe371bIjUErqmLS3LKkWyxeL5yr8YYrUT+J/4l02tSM3+TwiL
SK0WRqhs8Hz29VyDIY5BMvdmHazbfvmsh7Gf4AahONv8dnAXkJ1x0qfjYuKwM848
FmiElLj5MNOGKt2sxhbX6D+9SXeUcFx5mwyiRYof6Gp7ErwQpQ85M0oIJLJo0YIq
xLAFQlWxE45UWSlgvlAUxZMtCY92XVU4zd5ZBOOnw0f632Sf1QdIogxYCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNoeEoYrwsj+KYNTkWBGVuG28p7MB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJSS5Uuz
7f6cbLxB8HBcQLb54W+pknpZdakspYLDeT01uc3moKyxYWD11gdxyW0UNRpiYjrq
wolgg/piUWFhZQnVHN4f5HNaHL/1Ql6GFa92EHi+trmh8oAzNE9eUcbuqPprZ5Rt
GCJZXJBBxe7DnNi09+WfnA8aweP39JMot22DcRVToXVtJDV92pBTmLZTnHbCHjyz
VI3mecxWHieFA5W+oXSZSj8ondB+a3KimMiuNrITgTk+kuxdtLcJOB3Xi/uZaORI
f1iGyli59nXgBeh+uXdgjAHlmyn8osVkCNb/xlBty2RIbkS70KlvN6m5ufPfZ6VQ
xf67Wee0NNkT7g==
-----END CERTIFICATE-----
Generated at Sun Jul 6 22:44:53 2025 by rpki-client