Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: KiD+8LAzdVjGCG5Mnl/Mbf5RvcATC92VL7ZHz9oRp0Y=
Subject key identifier: C8:EE:33:DE:66:5A:E5:F4:62:AD:A2:6B:BB:69:4E:CF:02:6F:77:F5
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019846645C6A68380F14A79D7C6BA98296B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0657
Signing time: Sat 26 Jul 2025 11:00:39 +0000
Manifest this update: Sat 26 Jul 2025 11:00:39 +0000
Manifest next update: Sun 27 Jul 2025 11:00:39 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: cj0FtxTnUNDnhinFoq/kIzPRhd/gtjjQUfAGg2XIit0=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:5c:6a:68:38:0f:14:a7:9d:7c:6b:a9:82:96:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Jul 26 11:00:39 2025 GMT
Not After : Jul 27 11:00:39 2025 GMT
Subject: CN=c8ee33de665ae5f462ada26bbb694ecf026f77f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:4e:b4:e8:59:3c:84:1c:cc:41:b9:6e:d6:
a3:df:c3:c5:ca:97:ea:56:52:92:eb:f5:8e:0b:13:
a7:67:6c:51:87:c5:85:0a:a8:c2:ec:27:7f:da:cc:
32:55:62:99:5b:53:30:65:fd:9a:a0:58:ef:cc:9b:
48:40:45:49:67:c5:47:cd:ef:93:4e:7c:ac:87:45:
e6:78:d0:e3:f3:bb:22:1a:00:0f:34:e9:df:cd:c6:
62:4d:05:83:7b:b1:64:c5:4f:b1:de:02:ec:cb:4e:
b6:ef:4f:26:db:d1:1a:42:91:80:7e:32:f5:5b:24:
25:83:98:2f:12:01:b5:bf:03:a5:aa:f2:12:45:29:
07:f3:c9:e3:96:04:ac:fe:78:4c:4d:94:f7:df:af:
43:74:5c:13:d9:89:bd:dc:45:ce:97:6e:a0:23:c6:
49:58:a4:9b:68:60:b2:9d:a9:13:75:80:87:13:8f:
b5:9d:77:a0:e7:41:91:0d:22:25:82:f0:e2:15:6e:
4e:15:f5:34:d3:c1:7f:b6:37:fe:d7:97:65:67:9e:
cd:6a:dd:3f:08:cb:b6:82:0f:16:f4:b4:2e:bf:fe:
4f:e4:05:cc:92:75:79:d6:5a:71:8b:c0:ea:9f:fa:
5c:b7:d2:23:a8:10:81:fb:ae:8b:2e:c0:e6:21:57:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EE:33:DE:66:5A:E5:F4:62:AD:A2:6B:BB:69:4E:CF:02:6F:77:F5
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ef:af:b3:11:ca:27:e2:5d:98:33:5a:b6:b3:63:7b:90:d2:
e5:6e:3b:f9:95:7f:47:7b:2c:76:0d:15:43:2a:f9:55:7e:fe:
19:02:5a:5d:68:bc:5f:ed:c1:31:23:d3:f4:e7:2e:f7:79:93:
40:28:17:df:c5:80:e6:9d:28:67:fe:69:7b:b8:42:aa:5a:ff:
36:c2:12:99:34:f4:3f:4f:5c:1e:6b:a1:ce:31:ff:b3:c5:33:
25:45:63:e9:1b:82:3c:f1:6b:e6:7f:ac:a4:b1:53:db:7c:7a:
7d:19:9c:ea:a7:14:98:10:c8:1e:6b:e6:70:d7:74:10:08:11:
ab:62:71:0d:21:b7:b5:70:32:ce:28:17:e2:08:3f:2a:07:a0:
fa:67:88:d5:65:94:6b:0a:7d:e6:d1:fc:62:d4:96:81:53:a6:
5f:81:92:b6:f4:d9:bc:e4:ef:f2:de:80:85:9b:41:46:f4:c3:
0b:29:72:fe:79:a1:ef:07:93:3e:73:38:1a:0e:45:bf:6f:eb:
05:4c:78:c0:fe:74:f0:7b:6d:71:d9:bc:46:77:60:56:29:1c:
f7:64:0c:5d:8b:9b:cf:ad:08:cb:fd:84:e1:35:98:b9:04:79:
bb:51:83:f1:72:3c:b4:0f:27:86:6f:f1:82:47:48:4a:f4:86:
c8:a3:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:47 2025 by rpki-client