Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: bZpmoGPv2qRq3XwzyzSE2ISmYAqRCMBguOH5lGL122o=
Subject key identifier: 03:A2:C2:65:51:8B:59:BD:F2:E6:6F:FB:C5:F7:E9:BF:1F:AA:FE:5A
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 0197458BA129E8BA99ECCF6D0A35B51B93DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 0F3C
Signing time: Fri 06 Jun 2025 14:01:07 +0000
Manifest this update: Fri 06 Jun 2025 14:01:07 +0000
Manifest next update: Sat 07 Jun 2025 14:01:07 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: GpvOr3nJLXuRs3E12l2NA/84nEVh2kBeA63zgAx4C1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:a1:29:e8:ba:99:ec:cf:6d:0a:35:b5:1b:93:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Jun 6 14:01:07 2025 GMT
Not After : Jun 7 14:01:07 2025 GMT
Subject: CN=03a2c265518b59bdf2e66ffbc5f7e9bf1faafe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:90:29:ea:1e:68:54:26:d6:e6:1c:26:2a:
58:b3:1c:ba:06:de:d3:77:bd:fc:87:27:2c:07:ad:
9b:31:92:a9:cd:d5:11:82:31:49:de:36:45:10:40:
28:14:28:af:5f:27:6a:6b:0d:fd:ef:37:aa:a0:80:
68:21:b1:12:9a:c1:8e:d7:53:31:75:99:78:9d:a6:
a7:09:e9:0b:4f:47:d3:1f:34:1d:14:f6:68:86:e7:
24:23:ed:51:18:af:1d:21:ae:c8:13:ec:f2:e3:15:
ed:e4:4e:2f:dc:17:63:38:4a:79:87:32:51:83:3a:
f9:e2:a5:4b:a2:28:78:98:59:86:a3:87:4d:6d:c8:
83:8b:a3:5b:37:28:55:97:d4:c3:4a:58:d2:c3:3e:
d2:99:2e:6e:4c:ae:22:bd:5f:ba:9b:ef:dd:34:16:
26:12:bd:c3:12:92:2c:7d:0d:09:b8:8a:6f:a7:9c:
81:13:c5:92:d4:93:12:2c:b3:62:96:e2:65:4c:1a:
3d:75:e1:58:10:9d:2f:d2:86:b3:95:73:7b:b9:37:
9d:57:51:0b:85:19:f3:13:e5:8f:f2:41:e4:bf:d5:
d9:23:35:3d:c1:71:7f:47:57:af:ba:1d:6a:f2:d4:
28:fa:dc:9a:7e:b4:0c:fe:22:3f:2a:bc:e2:5f:76:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:C2:65:51:8B:59:BD:F2:E6:6F:FB:C5:F7:E9:BF:1F:AA:FE:5A
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:64:70:db:d0:db:74:29:43:e1:72:56:4a:de:9d:1e:27:6f:
e5:a8:a8:d8:3e:12:f2:97:b2:5b:60:11:ab:32:be:e0:a1:54:
22:73:3d:87:aa:15:ef:a6:b2:9e:85:31:16:3d:96:78:7a:ee:
9f:91:4d:1c:44:60:ea:a8:12:25:eb:0e:1c:d3:df:83:e3:86:
bc:fd:0f:c1:c9:5b:da:5f:fb:a9:e9:f2:6d:74:f7:3a:42:94:
90:39:cc:ad:08:4a:cd:4a:4c:91:7c:5a:53:c0:44:5f:0f:d1:
c2:3c:cd:02:bc:10:d8:b9:e5:b4:7c:91:fd:1d:17:3e:38:10:
7b:2b:82:0d:de:08:a5:be:f5:cf:7f:db:1d:ab:f9:7b:d0:e9:
02:7e:0f:b9:3a:ec:77:d6:00:0f:eb:5e:6f:7d:16:8b:93:34:
0c:45:4c:61:b1:5b:c5:f0:76:09:fa:dd:e3:e9:d5:1c:85:91:
0e:f0:52:ed:9d:a2:fb:00:14:7e:96:85:dd:e6:f7:48:3c:4f:
ca:00:e8:23:b1:74:61:f7:e1:96:20:64:77:93:0c:39:20:e2:
b0:ea:73:fe:bb:6f:dd:f8:1d:4b:15:97:77:8a:4e:56:74:be:
50:2e:a3:ef:0d:e6:55:f3:0c:88:77:4e:55:d8:70:fd:04:99:
67:0a:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:21 2025 by rpki-client