Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: UjiSVWAMersdLmQm5/BGNHwTLjX177SlVsd4arUBmG0=
Subject key identifier: 8A:D8:B9:06:2C:60:70:CE:B5:15:2E:AB:11:06:5D:1A:F7:BD:CF:75
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 0197499EDC83A564AD84E810897C67295FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0D71
Signing time: Sat 07 Jun 2025 09:00:37 +0000
Manifest this update: Sat 07 Jun 2025 09:00:37 +0000
Manifest next update: Sun 08 Jun 2025 09:00:37 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: TJJM1y2Vuuk26mLbHWBKCRAv6Krv8nMvh5ukHi0KJkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:dc:83:a5:64:ad:84:e8:10:89:7c:67:29:5f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Jun 7 09:00:37 2025 GMT
Not After : Jun 8 09:00:37 2025 GMT
Subject: CN=8ad8b9062c6070ceb5152eab11065d1af7bdcf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:9e:9c:f5:de:9d:d5:5e:33:32:c6:94:86:
71:25:da:f1:4f:e7:5c:e1:15:90:db:1d:b0:a9:80:
c9:ea:ae:1c:1c:17:74:05:77:b6:01:97:0d:c7:8d:
ca:cc:44:ef:25:d8:8e:af:41:b1:14:ba:99:88:7a:
2e:09:dc:ba:80:1a:87:f6:d4:92:56:90:8e:eb:00:
2c:bd:db:46:34:81:ee:1f:61:31:24:10:a1:88:49:
fd:f7:76:17:51:a9:db:75:cc:88:d2:a3:85:6c:b3:
bf:82:0c:35:70:15:0d:fa:92:e9:2e:27:ce:e8:cc:
ab:35:b0:f1:65:97:85:d4:e0:e8:11:d1:b8:a7:f6:
73:70:90:6a:3f:8f:6d:5b:c1:1b:d1:5f:ae:e3:83:
54:f4:6c:cc:1f:26:95:29:6a:9d:e0:75:ea:79:76:
fb:aa:68:80:9a:ab:c8:77:0f:15:f2:65:f9:58:12:
e5:18:25:85:f1:a8:18:87:5d:c6:e9:a2:e9:eb:12:
f2:e8:95:f8:1b:4a:c5:26:36:2d:57:f0:5a:76:74:
e0:a3:c8:e6:df:e4:af:e5:f0:a5:28:bc:de:04:0b:
9f:2c:d5:d3:94:b9:ef:98:32:92:42:62:c7:b3:9c:
c6:14:55:62:8e:a7:25:30:7f:99:bf:fd:82:4c:31:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D8:B9:06:2C:60:70:CE:B5:15:2E:AB:11:06:5D:1A:F7:BD:CF:75
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:90:e2:e9:bb:85:f7:a6:8d:fb:cd:9f:64:48:70:9d:2c:b9:
6f:fe:29:4c:b1:7a:b1:73:fb:e5:8a:2f:84:a2:96:7c:0c:bc:
b7:ac:07:22:eb:cf:19:9d:bc:16:d7:5d:d5:aa:c9:5c:6d:e8:
13:91:13:eb:35:fc:e0:86:3f:39:60:6c:c7:c9:03:41:64:d1:
d6:7a:32:00:2c:8d:90:12:fa:07:1c:c2:6c:a9:79:6f:c9:e3:
fd:3f:dc:13:34:33:32:75:bc:ff:4d:69:47:11:3f:74:3c:a4:
a1:58:65:9a:24:bb:d9:3f:4e:60:26:4f:c5:98:ae:b8:f5:54:
a9:13:aa:1f:a3:20:f8:62:67:83:db:f7:0c:ab:92:9d:ac:61:
61:ad:1b:a0:87:d7:4b:97:42:c1:41:d7:38:9e:20:e5:58:7d:
9b:1a:d1:96:01:9f:cf:8d:c2:31:07:c1:bb:19:19:9d:5d:ac:
53:a9:5b:24:f7:49:93:d6:f9:b1:5b:46:70:a1:0c:1d:f3:fd:
f7:79:c5:44:4e:fc:be:85:ea:57:68:02:af:74:dc:ae:cf:f8:
ac:a8:b8:ab:64:00:03:4b:c8:98:8b:63:95:37:fa:0a:cf:fa:
35:15:7b:03:d4:de:56:8a:3d:93:4b:52:42:11:80:1a:f1:ba:
f4:90:8e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:28 2025 by rpki-client