Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier: 3mDtFZlFsbBIxE1mHXlmx9MIpTYnk4zeL1M9l7HXJbE=
Subject key identifier: 6B:AA:33:E0:0E:32:CC:15:6A:1D:B0:16:20:75:CA:DF:06:75:DE:1D
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial: 019754FE0CF7FEBA109BA6288C7698B70AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number: 1514
Signing time: Mon 09 Jun 2025 14:00:24 +0000
Manifest this update: Mon 09 Jun 2025 14:00:24 +0000
Manifest next update: Tue 10 Jun 2025 14:00:24 +0000
Files and hashes: 1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=)
2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: GRQEvuSDBUGazCnQzn+qeeI5Bpr6564I6gyC+PFv0zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:0c:f7:fe:ba:10:9b:a6:28:8c:76:98:b7:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Validity
Not Before: Jun 9 14:00:24 2025 GMT
Not After : Jun 10 14:00:24 2025 GMT
Subject: CN=6baa33e00e32cc156a1db0162075cadf0675de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:99:41:45:2a:45:83:fb:22:67:8a:f0:b6:a8:
7d:05:78:59:b0:51:d9:1b:fd:ce:26:4a:f3:e0:9b:
0e:86:b7:83:02:c8:21:0a:5b:32:dd:4f:8f:6d:89:
cd:73:e8:38:c1:f1:f9:98:b6:a0:0f:02:44:19:4c:
ac:c7:ce:c6:13:ba:16:e8:3f:24:ef:fc:8d:01:76:
ae:71:0f:55:1d:10:b0:c9:c5:0d:45:37:f3:85:77:
90:92:98:f4:e3:7f:b3:27:0c:15:0c:45:66:e8:03:
c0:72:9f:ad:98:e7:88:85:2b:bd:6e:a8:d1:0c:87:
09:99:a8:50:a7:25:ab:9a:4d:20:af:e3:2c:fe:09:
a8:dc:b3:23:99:b7:1f:0e:01:5a:82:13:4d:db:9e:
a2:89:93:46:0f:44:e6:e3:80:1d:52:f0:83:ab:39:
b0:c9:1f:13:8b:ab:7b:c7:cc:81:f5:05:c3:2b:f2:
e6:6d:cb:0d:ec:96:7b:5a:93:8a:d4:2d:28:98:01:
ee:3d:62:7b:7e:a2:d1:46:a2:a0:8a:46:ec:e6:25:
29:b3:cf:43:81:e9:ca:73:b7:11:c9:2f:e5:58:9b:
65:d9:a1:c6:a1:00:c4:36:a3:16:81:de:c7:94:42:
df:42:91:98:a0:9b:fb:19:2d:21:54:45:ef:96:5f:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AA:33:E0:0E:32:CC:15:6A:1D:B0:16:20:75:CA:DF:06:75:DE:1D
X509v3 Authority Key Identifier:
keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e0:cb:8c:c7:05:c8:d8:29:b7:76:ac:28:04:66:63:c1:0f:
8e:97:e3:c2:1c:b7:84:ec:c4:8a:6b:08:bf:fb:7a:96:d3:e6:
11:12:c2:6f:c7:3d:df:cd:34:d6:0a:03:58:2b:9d:fb:b6:d1:
2f:d4:35:76:59:b1:c9:29:eb:4d:18:56:d4:4a:90:7e:1c:83:
f5:af:90:5a:c3:99:20:80:a9:c4:29:e4:d0:00:f5:0a:54:30:
1a:33:cb:b8:a4:82:09:80:c4:c2:9d:0d:14:93:bb:dc:50:48:
c5:42:61:94:ab:91:f6:2b:f4:09:cf:cb:6f:3e:fe:dd:51:88:
fb:e0:a7:97:62:04:3d:cf:54:80:7b:3b:23:f3:4f:d1:7f:2f:
8d:e6:fc:14:fe:b8:c1:74:78:2b:33:81:1f:10:98:61:a3:b8:
c1:15:6d:70:b3:99:9f:62:df:ba:a6:d5:60:47:6d:e6:4d:9d:
16:2b:5d:98:37:d9:2a:d6:f4:da:8c:4d:5f:29:7e:99:53:24:
45:f2:3d:62:21:89:7f:00:9c:05:0f:d9:14:1a:b4:84:5b:57:
12:3d:78:80:8f:d0:db:14:c3:7a:ee:f5:d3:74:d9:8a:a3:fd:
a2:15:a1:6d:c8:31:16:c9:ae:63:f8:e5:51:46:fb:09:62:c1:
6d:26:cb:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdU/gz3/roQm6YojHaYtwr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWYwZWQxZTMwOTFlN2I1Yzk5Y2U0M2NhYzEwMzEwNTVi
MGYzODUwHhcNMjUwNjA5MTQwMDI0WhcNMjUwNjEwMTQwMDI0WjAzMTEwLwYDVQQD
Eyg2YmFhMzNlMDBlMzJjYzE1NmExZGIwMTYyMDc1Y2FkZjA2NzVkZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhplBRSpFg/siZ4rwtqh9BXhZsFHZ
G/3OJkrz4JsOhreDAsghClsy3U+PbYnNc+g4wfH5mLagDwJEGUysx87GE7oW6D8k
7/yNAXaucQ9VHRCwycUNRTfzhXeQkpj043+zJwwVDEVm6APAcp+tmOeIhSu9bqjR
DIcJmahQpyWrmk0gr+Ms/gmo3LMjmbcfDgFaghNN256iiZNGD0Tm44AdUvCDqzmw
yR8Ti6t7x8yB9QXDK/LmbcsN7JZ7WpOK1C0omAHuPWJ7fqLRRqKgikbs5iUps89D
genKc7cRyS/lWJtl2aHGoQDENqMWgd7HlELfQpGYoJv7GS0hVEXvll+HswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuqM+AOMswVah2wFiB1yt8Gdd4dMB8GA1UdIwQY
MBaAFO2vDtHjCR57XJnOQ8rBAxBVsPOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2Yt
MTdhMWY4NmM2ODA0LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2YtMTdhMWY4NmM2ODA0
LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuDLjMcF
yNgpt3asKARmY8EPjpfjwhy3hOzEimsIv/t6ltPmERLCb8c938001goDWCud+7bR
L9Q1dlmxySnrTRhW1EqQfhyD9a+QWsOZIICpxCnk0AD1ClQwGjPLuKSCCYDEwp0N
FJO73FBIxUJhlKuR9iv0Cc/Lbz7+3VGI++Cnl2IEPc9UgHs7I/NP0X8vjeb8FP64
wXR4KzOBHxCYYaO4wRVtcLOZn2LfuqbVYEdt5k2dFitdmDfZKtb02oxNXyl+mVMk
RfI9YiGJfwCcBQ/ZFBq0hFtXEj14gI/Q2xTDeu7103TZiqP9ohWhbcgxFsmuY/jl
UUb7CWLBbSbLcg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 22:56:25 2025 by rpki-client