Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: wTUtnh4ivN5Hx6BJQ53x7UOkn1bKww4HzrXnHSJlTUE=
Subject key identifier: 44:3A:84:42:1A:54:BD:8A:7B:AF:AA:30:3E:E1:4F:9F:BB:F8:54:D2
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 01974BC40C80728202FA202D9D6307A5F320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: D4
Signing time: Sat 07 Jun 2025 19:00:28 +0000
Manifest this update: Sat 07 Jun 2025 19:00:28 +0000
Manifest next update: Sun 08 Jun 2025 19:00:28 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: WGF5BfpYoe2CiAi3BXOzYUvaLYjVlKsXgwqoONM6NJ4=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:0c:80:72:82:02:fa:20:2d:9d:63:07:a5:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Jun 7 19:00:28 2025 GMT
Not After : Jun 8 19:00:28 2025 GMT
Subject: CN=443a84421a54bd8a7bafaa303ee14f9fbbf854d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:74:fb:7a:18:e1:b5:03:35:e0:2c:e3:46:
74:bf:54:9a:e5:cc:f5:86:c8:fe:3c:f9:b5:2b:8c:
2d:c8:02:a6:32:c1:a3:ed:c8:7e:ce:6c:f6:1b:c3:
b5:75:dc:61:af:f7:4e:e3:b7:86:9b:06:e3:a8:24:
41:b0:b5:9d:36:e8:9d:ac:74:37:29:b6:9c:4f:91:
39:aa:ad:a0:3d:d1:78:bc:05:d9:fc:8d:78:67:b4:
65:3a:c2:a5:7a:30:a4:ab:99:14:2e:55:ca:86:eb:
49:8b:dc:f8:c0:4a:9d:c7:a5:41:27:fe:ba:f8:2b:
28:23:5a:9f:7c:be:f3:0d:5a:20:c6:0f:fa:6f:c0:
bc:0d:51:02:c8:08:36:c9:b6:46:90:dd:9a:e2:90:
9e:91:5d:6e:a1:f2:83:30:52:32:22:3f:2d:18:76:
8a:d5:56:3b:c2:c9:b0:51:e9:3e:b4:9e:fb:84:67:
af:05:04:b4:46:f2:6c:9a:fd:a4:59:c6:9e:5f:51:
08:8a:28:3d:ef:0f:b9:89:1a:49:54:a0:0f:4b:4b:
ec:5b:04:32:5e:3e:14:50:ec:2a:ae:54:6a:ee:91:
9c:da:86:22:b5:f5:43:ae:c1:20:79:92:e4:54:b2:
bb:32:b6:21:59:1c:9a:4d:ac:b1:cd:cd:6c:09:15:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:84:42:1A:54:BD:8A:7B:AF:AA:30:3E:E1:4F:9F:BB:F8:54:D2
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:35:e8:43:a0:17:32:2b:b8:9d:ee:32:1a:a4:50:19:0c:23:
11:65:9c:b2:f9:8e:7c:49:f1:e8:fd:7e:f3:ec:f6:bb:13:c5:
b9:40:f6:df:33:00:e8:14:b0:89:57:8b:64:65:af:f9:6b:cb:
66:06:1f:46:68:79:2a:54:8d:c5:b6:a4:07:ca:df:57:6b:7f:
ad:3f:25:c6:f7:a2:df:fd:dd:bd:e3:5b:61:ac:c2:8d:aa:63:
9f:10:f0:a1:8a:46:6e:a2:5c:93:25:40:e2:ad:58:9e:c1:19:
14:68:2a:7b:47:c8:0f:67:a4:4b:46:b9:dd:a0:6b:64:a3:30:
78:11:e8:a9:9f:11:5f:17:a7:0f:9d:69:85:80:cf:d6:5b:88:
59:bb:6d:5e:28:79:79:23:3a:a6:f9:88:6c:be:96:b2:92:53:
7a:6c:04:ba:f5:70:93:60:34:b3:cf:10:8b:30:1d:55:f4:9f:
8e:00:53:81:78:e6:17:a2:41:8e:b1:c0:dd:ee:f1:3e:23:09:
5a:7d:4e:c4:52:ae:eb:36:d0:ea:84:78:ff:81:9e:a9:7b:b2:
5b:45:70:58:89:6d:bf:a2:80:7b:cd:d3:44:4b:65:70:a0:eb:
30:bb:5c:7f:45:6f:e1:fd:16:a0:3d:9d:44:b1:da:46:ea:ef:
d8:44:1e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxAyAcoIC+iAtnWMHpfMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1
MjVmNGUwHhcNMjUwNjA3MTkwMDI4WhcNMjUwNjA4MTkwMDI4WjAzMTEwLwYDVQQD
Eyg0NDNhODQ0MjFhNTRiZDhhN2JhZmFhMzAzZWUxNGY5ZmJiZjg1NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk750+3oY4bUDNeAs40Z0v1Sa5cz1
hsj+PPm1K4wtyAKmMsGj7ch+zmz2G8O1ddxhr/dO47eGmwbjqCRBsLWdNuidrHQ3
KbacT5E5qq2gPdF4vAXZ/I14Z7RlOsKlejCkq5kULlXKhutJi9z4wEqdx6VBJ/66
+CsoI1qffL7zDVogxg/6b8C8DVECyAg2ybZGkN2a4pCekV1uofKDMFIyIj8tGHaK
1VY7wsmwUek+tJ77hGevBQS0RvJsmv2kWcaeX1EIiig97w+5iRpJVKAPS0vsWwQy
Xj4UUOwqrlRq7pGc2oYitfVDrsEgeZLkVLK7MrYhWRyaTayxzc1sCRXs8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ6hEIaVL2Ke6+qMD7hT5+7+FTSMB8GA1UdIwQY
MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt
OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl
LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjXoQ6AX
Miu4ne4yGqRQGQwjEWWcsvmOfEnx6P1+8+z2uxPFuUD23zMA6BSwiVeLZGWv+WvL
ZgYfRmh5KlSNxbakB8rfV2t/rT8lxvei3/3dveNbYazCjapjnxDwoYpGbqJckyVA
4q1YnsEZFGgqe0fID2ekS0a53aBrZKMweBHoqZ8RXxenD51phYDP1luIWbttXih5
eSM6pvmIbL6WspJTemwEuvVwk2A0s88QizAdVfSfjgBTgXjmF6JBjrHA3e7xPiMJ
Wn1OxFKu6zbQ6oR4/4GeqXuyW0VwWIltv6KAe83TREtlcKDrMLtcf0Vv4f0WoD2d
RLHaRurv2EQezw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:27:21 2025 by rpki-client