Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: EW5LW2Knhb8WT21qsGu4QJuU84y3G7Co356m1itybjE=
Subject key identifier: 52:D6:DC:3B:11:0B:D5:55:17:44:B8:94:38:46:27:C0:33:C8:53:A7
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 01974DB2A0BF59C974C0AAD649F84D8A81FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 14FD
Signing time: Sun 08 Jun 2025 04:00:41 +0000
Manifest this update: Sun 08 Jun 2025 04:00:41 +0000
Manifest next update: Mon 09 Jun 2025 04:00:41 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: UIPepfBe9obSSZ6TKrdSjGzQA6Yz83TfUG2pT7ByVdY=)
2: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (hash: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a0:bf:59:c9:74:c0:aa:d6:49:f8:4d:8a:81:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Jun 8 04:00:41 2025 GMT
Not After : Jun 9 04:00:41 2025 GMT
Subject: CN=52d6dc3b110bd5551744b894384627c033c853a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:24:ee:d8:33:09:ee:85:b7:6f:2d:31:d2:
2e:6d:62:f3:5b:59:74:2e:a2:55:32:b0:a5:2b:39:
3f:6a:3c:c1:c6:fc:ce:3a:db:fe:19:60:ab:27:0d:
11:f0:ff:ca:5d:7b:00:6e:46:b5:9d:3b:1d:05:35:
85:ec:be:ca:8f:6b:ec:bf:39:b4:56:b4:27:51:37:
a4:61:ab:83:33:b7:34:0a:49:fb:26:8f:cd:39:43:
ae:02:f7:a7:a3:61:65:15:bd:e2:1d:38:d4:9b:a5:
07:0f:1a:eb:14:05:81:27:b8:ac:c6:da:72:e8:2d:
71:66:b5:22:6c:e0:85:1f:81:d6:19:b9:cb:cd:56:
02:ee:61:62:c0:49:bb:3e:d8:c0:19:5f:65:d3:cf:
79:8b:d9:5e:2f:4c:c3:a8:7c:c0:47:45:be:cc:07:
eb:b7:70:b0:05:2a:53:10:7e:60:b1:d4:ec:0e:ea:
1c:19:d1:0f:8f:c8:b9:24:47:b6:80:3c:17:bf:8c:
16:30:2a:4b:1b:56:a2:dc:70:7f:63:c3:cb:38:24:
95:74:03:44:92:b7:65:ff:02:f1:de:95:23:21:25:
a5:4d:62:20:5a:65:7e:43:05:0e:b0:bf:b8:b0:47:
8b:b2:ab:bb:ea:84:7f:83:0f:ad:f0:6c:ea:28:79:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:DC:3B:11:0B:D5:55:17:44:B8:94:38:46:27:C0:33:C8:53:A7
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c4:c2:f1:36:1f:de:b2:44:fb:c6:72:c0:f9:f7:68:4f:fb:
1a:4c:61:2f:70:a3:00:97:ef:4d:11:32:da:db:88:c5:42:3f:
5a:c1:ce:49:56:ad:23:88:eb:41:6d:48:24:20:d9:a0:16:fc:
d6:74:e4:03:23:d7:e0:b8:11:5b:68:0d:ff:2e:7a:bc:c3:16:
cc:65:74:52:6c:7a:3d:ff:43:7b:e8:31:92:7c:c6:81:24:66:
46:d3:48:62:e4:6d:b1:0a:53:8a:b4:b6:c5:5b:d2:3f:1e:41:
18:ac:22:ff:07:3d:1f:1f:8a:69:eb:18:85:5f:2b:3f:4f:b9:
12:0a:1f:45:e7:17:6d:83:b6:f6:e0:aa:09:f4:98:0a:79:d2:
8d:53:09:69:74:79:5a:84:e2:65:02:82:6e:d8:57:30:ed:38:
64:84:b9:f5:d5:5e:3a:d5:8e:ac:58:37:a4:32:1a:1d:96:8c:
34:cd:47:70:82:91:15:fe:38:88:38:23:f1:ae:ba:5c:78:48:
2a:bd:d3:61:dd:cb:56:85:ae:a1:a0:7e:e8:13:a9:fb:74:b8:
6d:0c:9a:39:71:b7:a9:5f:aa:1e:c0:c1:29:5c:2b:50:55:39:
de:53:43:ef:43:8c:6f:a4:ed:ef:98:82:e8:89:b9:87:47:62:
1e:c9:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:30:16 2025 by rpki-client