Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: SsjhVqNKNKkdQdzGwC2QnJZLUUXUSwmfRZeu1fa2Yu8=
Subject key identifier: C5:B7:8C:A3:5D:01:FE:48:6B:57:E3:8C:FD:30:1E:08:8E:91:2B:8A
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 01984C2F54C45D99623CB7EDF879B1B88EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 0FC4
Signing time: Sun 27 Jul 2025 14:00:26 +0000
Manifest this update: Sun 27 Jul 2025 14:00:26 +0000
Manifest next update: Mon 28 Jul 2025 14:00:26 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: epUruSkVilc/0fbelzwty5lGULFBoGfY/YYAhgBdWZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:54:c4:5d:99:62:3c:b7:ed:f8:79:b1:b8:8e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Jul 27 14:00:26 2025 GMT
Not After : Jul 28 14:00:26 2025 GMT
Subject: CN=c5b78ca35d01fe486b57e38cfd301e088e912b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:e3:b4:52:5b:a3:b1:8d:19:58:42:96:b9:
b3:95:7e:c6:bc:80:bb:5a:27:30:0b:88:f0:b0:6f:
a7:7c:45:6d:da:ce:5e:a2:fa:73:df:7c:b1:ff:b2:
1a:d0:74:b0:55:db:ca:41:78:08:ea:ca:0a:04:eb:
e6:5a:cc:2c:44:b9:00:f8:98:55:10:c4:bf:04:0c:
75:c0:c9:68:a9:7f:bd:3a:b5:ba:c1:01:e7:60:42:
70:96:5a:0e:7e:d9:24:6c:30:9a:fb:83:04:30:28:
01:5f:ae:71:1d:9b:44:1c:f8:a7:07:81:7d:bf:83:
8b:12:b3:95:42:f3:6b:ba:3f:bd:86:4b:e2:5b:64:
db:cc:e8:d6:48:4e:bd:61:6e:df:a4:73:7f:0d:ae:
79:ee:39:83:fb:d3:a2:66:69:f5:be:a6:91:60:bc:
93:25:b7:58:98:64:be:5b:0f:69:87:a4:aa:24:bc:
5d:ad:91:e7:c2:b0:a5:2a:23:95:35:a3:b5:d0:a3:
2d:0d:0b:d6:cc:a6:7f:ea:1c:8c:4a:00:24:b9:75:
23:fa:6e:1e:98:ad:9d:60:6f:9c:c5:30:f1:9c:a6:
fc:fe:b5:94:16:c1:e0:d3:80:1e:61:ed:16:e7:a7:
c2:3a:74:c2:13:aa:85:00:9f:26:9c:ba:18:4f:39:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:8C:A3:5D:01:FE:48:6B:57:E3:8C:FD:30:1E:08:8E:91:2B:8A
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:51:3e:69:ad:91:86:6b:8d:2a:d1:fb:ee:03:6d:17:a2:97:
dd:15:80:d2:6d:f6:97:ce:48:ad:f5:22:d0:5d:57:05:45:57:
78:8d:14:8c:2a:9a:f8:a5:4a:ea:33:4f:58:bb:9e:9b:90:69:
f5:71:8a:5c:2f:32:e5:3a:7a:d9:fa:fc:18:ff:e2:0f:b4:6b:
97:c0:0c:79:03:1d:2a:0d:58:5b:70:84:64:9b:9b:ae:55:22:
ea:ef:0c:78:8d:59:9d:e0:b9:a8:d0:ff:ec:9f:fe:a7:b5:43:
46:c7:ed:52:da:18:fa:c6:c3:35:2a:06:00:55:44:7c:23:dc:
e9:20:b4:df:ab:a9:22:1c:1d:55:d9:23:19:39:17:2b:db:65:
e8:88:7a:85:9e:1c:6f:b6:95:44:4d:19:3b:dc:26:93:d8:7b:
46:c7:ef:4f:2d:76:35:aa:a4:e8:71:26:a1:a3:ff:95:f2:40:
09:55:d9:76:42:e6:b5:6a:2b:e0:2e:dd:d9:bb:b8:ea:27:3b:
a0:41:27:6f:9d:1f:5a:d2:03:90:2b:8f:42:ee:d8:16:12:7a:
63:80:dc:e9:b5:0b:85:b4:33:ae:37:b5:29:6c:e7:a6:22:33:
0f:f6:15:1b:33:5e:0b:a3:07:80:97:e6:19:5e:10:ae:d2:de:
f3:22:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 22:38:14 2025 by rpki-client