Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: 4ElwdXwuLQVCIwzGb+w5Yj87Hz+GyFwDNeDQ7aBViB4=
Subject key identifier: DE:0B:07:5F:53:48:F6:8F:B8:99:19:F3:33:40:7D:A3:4D:B7:C7:31
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 019846D26471494EFCE6F38B63F3EF2057DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 157E
Signing time: Sat 26 Jul 2025 13:00:50 +0000
Manifest this update: Sat 26 Jul 2025 13:00:50 +0000
Manifest next update: Sun 27 Jul 2025 13:00:50 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: pp8YhDxvE5O0anXYPC0Nc/n7IHLjbnQJGHJODBxgOvg=)
2: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (hash: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:64:71:49:4e:fc:e6:f3:8b:63:f3:ef:20:57:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Jul 26 13:00:50 2025 GMT
Not After : Jul 27 13:00:50 2025 GMT
Subject: CN=de0b075f5348f68fb89919f333407da34db7c731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:f0:0c:c9:5c:9f:cc:0b:a3:db:3b:96:6e:
1f:11:3d:9f:21:89:41:70:1d:a8:43:a7:12:40:b3:
42:7e:17:c5:ab:48:98:65:5d:1c:44:5b:c6:a2:75:
8d:4a:32:b0:4e:97:fd:a4:59:39:3d:82:3a:82:ef:
c1:13:03:6e:01:fc:24:84:69:1a:9c:14:04:16:5d:
4f:93:d3:ba:de:5e:b9:f9:66:29:41:ba:f6:04:29:
f3:16:a8:94:71:99:77:a2:0a:ce:e9:4b:64:d5:17:
10:0b:f6:fb:b9:47:fb:66:bc:4e:92:8a:9a:f2:58:
a2:53:0d:4d:b5:96:ef:a6:fe:42:24:ff:25:19:cc:
aa:6b:90:94:aa:0d:ac:b5:f6:cd:60:76:1c:9d:9b:
55:ba:55:da:96:6a:e1:d6:9b:56:f3:62:18:ad:21:
55:81:af:ee:6e:1b:58:15:14:2d:2b:bc:19:6b:62:
48:9c:63:70:ba:1f:de:7b:9d:1f:46:e9:e7:2b:40:
fb:43:21:56:1c:08:a1:f6:0e:2a:9e:1f:d0:30:3f:
e1:1c:5b:a9:d7:72:3b:39:af:02:08:e6:eb:c5:ec:
63:d8:c1:66:45:2b:ff:bf:90:37:cf:78:35:7b:c5:
b8:22:0a:3a:01:63:d7:19:24:06:04:f3:8f:e7:fe:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:07:5F:53:48:F6:8F:B8:99:19:F3:33:40:7D:A3:4D:B7:C7:31
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:34:b2:55:43:62:a1:ae:66:af:0e:24:b8:ec:15:2f:62:
e5:53:d0:01:c1:ef:a4:7e:22:61:03:84:78:20:f9:a6:3e:2b:
87:6d:a4:7e:23:12:9b:6f:cc:38:f3:7e:1d:a9:35:a3:b4:ec:
dd:95:85:8a:7e:5d:5b:eb:94:c9:7f:b2:d8:ea:6b:05:31:73:
cd:c6:f3:a0:2c:c1:b9:95:e1:53:a8:79:ac:13:27:46:c2:55:
3c:95:b5:6f:dc:22:96:cc:44:b8:0f:16:1f:70:10:b6:d9:56:
ae:d8:96:c3:64:0b:1c:b7:e1:43:2d:23:c2:0d:0e:aa:da:83:
dc:ed:7d:80:6a:97:53:e6:cf:08:68:fe:9d:aa:20:15:ef:44:
ed:e5:16:6d:01:eb:ea:b5:98:e6:30:61:5f:85:0b:43:55:d9:
86:48:db:5e:00:ba:ac:92:9d:0b:60:d6:96:51:ac:a5:b5:a9:
b7:d6:e8:27:49:c6:37:ba:39:40:fe:a0:ed:61:45:e4:72:97:
31:dc:c5:85:06:ee:d0:ec:e3:f0:56:fc:44:11:60:63:1b:ae:
fe:f9:83:d6:3f:cf:8b:69:2d:67:af:5d:2d:d0:17:9a:a7:12:
9b:a3:60:63:6c:10:20:24:55:23:96:6b:ec:30:24:77:99:d6:
e8:46:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:34 2025 by rpki-client