Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: 0t5TQapDFzas/wiDrkdqdUWzKINlQJXOY6P4uoJn55Q=
Subject key identifier: 8F:15:A9:0C:3A:31:7D:1B:48:3F:DC:61:69:52:B4:28:52:5E:A9:AE
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 01974967C41FF1A44651849D89BA39169B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 08:00:26 +0000
Manifest this update: Sat 07 Jun 2025 08:00:26 +0000
Manifest next update: Sun 08 Jun 2025 08:00:26 +0000
Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: b6QAbe2Z1sPOTNdTh5eEtmQnAIS+Hb3pJHKBzLjYesw=)
2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c4:1f:f1:a4:46:51:84:9d:89:ba:39:16:9b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Jun 7 08:00:26 2025 GMT
Not After : Jun 8 08:00:26 2025 GMT
Subject: CN=8f15a90c3a317d1b483fdc616952b428525ea9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:bf:6d:3d:cc:6e:72:b2:19:57:7f:2f:93:
a2:3d:97:e8:5d:e2:f8:0e:75:63:15:b9:29:c1:51:
1c:16:4d:8d:60:fb:1e:fe:b0:d8:89:26:15:59:83:
f3:b2:03:33:3b:da:54:f3:61:88:c4:2f:b4:88:0a:
95:44:59:18:1c:52:08:b5:7f:70:66:21:85:14:a4:
bc:3a:4c:b3:f6:10:d2:68:e7:42:23:64:2d:2c:4a:
b2:2e:2a:bd:fa:2e:7a:a5:22:fe:5e:95:41:02:c1:
82:0a:95:98:ef:40:a1:31:68:bf:a8:f7:03:5e:f2:
0a:8d:97:c8:12:65:bf:71:6c:be:bb:7a:59:62:0d:
68:ad:77:ac:b5:aa:c2:87:c4:6a:21:f7:ac:e3:95:
ee:2e:6e:98:65:d6:0d:08:4d:f7:0b:33:99:28:09:
29:87:14:ae:3a:27:ab:0b:a7:88:b2:06:68:2c:0c:
f4:0b:3b:92:30:34:fc:d5:3d:b2:3b:d5:2f:e2:c0:
a0:2b:9e:32:7c:86:d9:f1:aa:fa:d5:ac:70:66:94:
7f:d7:33:58:59:e4:94:0b:15:ac:16:c5:10:fb:2e:
8e:34:16:17:f1:39:2d:be:c3:2b:52:5a:53:a1:52:
23:80:8f:39:8d:14:fb:ab:64:63:00:98:77:53:5c:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:A9:0C:3A:31:7D:1B:48:3F:DC:61:69:52:B4:28:52:5E:A9:AE
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9e:4d:e9:b7:c7:28:0d:dc:a8:ed:e0:3d:a6:97:41:52:03:
1b:e0:95:f5:3f:38:1c:e3:f7:78:cc:c0:dd:7e:c0:60:78:87:
a5:b9:77:4a:52:fe:d0:7f:35:fb:af:23:e4:20:9a:ea:41:09:
30:82:3d:b9:f9:e2:3f:0a:08:93:16:88:ae:13:ee:db:16:47:
eb:5a:82:41:95:17:86:76:30:56:ce:c0:6f:d3:34:76:eb:8d:
56:3e:5c:82:a4:6a:25:8e:09:40:8e:10:f5:b8:1a:d6:df:42:
a0:99:f2:bc:0d:c6:df:6e:39:a3:37:7a:b4:f2:f8:8e:98:15:
e6:14:e8:33:a9:50:ff:df:13:8a:33:3e:e7:a2:f0:d2:c0:88:
c1:92:f1:df:34:0f:e2:e1:52:bf:63:ac:fd:15:f7:50:f3:78:
00:73:33:eb:e2:ab:a2:41:11:70:f9:e7:4e:01:88:e2:7e:ec:
c6:1e:8f:e0:bf:52:00:db:e4:a2:3c:13:1c:72:ab:df:cb:ff:
e6:2e:d3:6b:b7:e9:17:65:c3:58:fb:a0:11:7c:d7:d1:f6:7f:
d2:fa:e4:dd:e1:96:fe:ea:40:d4:6d:6d:f9:49:53:81:6d:14:
98:d9:31:97:2b:13:10:3c:04:aa:5f:5b:8c:84:08:75:d7:95:
6c:95:76:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ8Qf8aRGUYSdibo5FptTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDllZWFmMjQzNDJjM2IyYzYzMmM5ZTQ4NDYzMTM4ZGUy
ZGMwMGIwHhcNMjUwNjA3MDgwMDI2WhcNMjUwNjA4MDgwMDI2WjAzMTEwLwYDVQQD
Eyg4ZjE1YTkwYzNhMzE3ZDFiNDgzZmRjNjE2OTUyYjQyODUyNWVhOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BG/bT3MbnKyGVd/L5OiPZfoXeL4
DnVjFbkpwVEcFk2NYPse/rDYiSYVWYPzsgMzO9pU82GIxC+0iAqVRFkYHFIItX9w
ZiGFFKS8Okyz9hDSaOdCI2QtLEqyLiq9+i56pSL+XpVBAsGCCpWY70ChMWi/qPcD
XvIKjZfIEmW/cWy+u3pZYg1orXestarCh8RqIfes45XuLm6YZdYNCE33CzOZKAkp
hxSuOierC6eIsgZoLAz0CzuSMDT81T2yO9Uv4sCgK54yfIbZ8ar61axwZpR/1zNY
WeSUCxWsFsUQ+y6ONBYX8TktvsMrUlpToVIjgI85jRT7q2RjAJh3U1xsOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8VqQw6MX0bSD/cYWlStChSXqmuMB8GA1UdIwQY
MBaAFHpJ7q8kNCw7LGMsnkhGMTjeLcALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTct
ZjliNjA3MTE0NTNjLzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTctZjliNjA3MTE0NTNj
LzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYp5N6bfH
KA3cqO3gPaaXQVIDG+CV9T84HOP3eMzA3X7AYHiHpbl3SlL+0H81+68j5CCa6kEJ
MII9ufniPwoIkxaIrhPu2xZH61qCQZUXhnYwVs7Ab9M0duuNVj5cgqRqJY4JQI4Q
9bga1t9CoJnyvA3G3245ozd6tPL4jpgV5hToM6lQ/98TijM+56Lw0sCIwZLx3zQP
4uFSv2Os/RX3UPN4AHMz6+KrokERcPnnTgGI4n7sxh6P4L9SANvkojwTHHKr38v/
5i7Ta7fpF2XDWPugEXzX0fZ/0vrk3eGW/upA1G1t+UlTgW0UmNkxlysTEDwEql9b
jIQIddeVbJV2HA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:01:58 2025 by rpki-client