Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
File: eLBPuvqja3H8027KULX-DojdNVE.mft (raw, json)
Hash identifier: KXz8F2k3ImO07fRZbKlzSMYS7pbKgbkSqWEyYfKx4Ro=
Subject key identifier: 29:EA:09:A5:79:21:BC:F6:95:C0:22:5F:F4:EC:F0:C1:FC:76:42:FA
Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Certificate serial: 01976E87574D014A23923EFA9D560D4325B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 13:00:52 +0000
Manifest this update: Sat 14 Jun 2025 13:00:52 +0000
Manifest next update: Sun 15 Jun 2025 13:00:52 +0000
Files and hashes: 1: _bd1uUXdWfimJKjSRLsLwjuEcR8.roa (hash: uctm/cSaahCT9GH/ghFykbr6OfbIpXkqwxi32eXN9Ao=)
2: bqoiPzwRe4PUMqiK_-uqiOSrT8g.roa (hash: zxBqKx04g5nB2wdjrM/3iI8Vlwm/BGdUl98rn328O3U=)
3: eLBPuvqja3H8027KULX-DojdNVE.crl (hash: 2CMwNy9UUn4BlXcIj8v9okFVv8A9jIWs+yyG33QsQJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:57:4d:01:4a:23:92:3e:fa:9d:56:0d:43:25:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Validity
Not Before: Jun 14 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=29ea09a57921bcf695c0225ff4ecf0c1fc7642fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:df:ab:e2:bd:37:55:6b:e8:3f:b6:e8:d5:
7a:53:42:c7:93:9b:f9:5c:bc:3c:99:ae:6b:04:22:
fc:34:76:87:88:c7:a3:4d:68:f6:c0:51:a3:eb:e4:
64:a1:45:d8:06:a3:f0:50:ac:a8:2c:1d:2f:a2:a3:
e9:b8:9b:65:46:71:d7:2b:f5:59:a9:74:d2:0b:d0:
10:ea:36:a3:bf:af:7b:6a:81:cc:3a:92:d0:61:61:
27:d0:f2:b1:f7:ae:4f:95:e2:96:e3:38:f8:f6:1e:
fe:9b:6c:2f:b9:95:43:07:9e:c9:21:52:e5:78:0d:
1f:99:9c:02:80:0e:21:20:e3:1e:3e:23:6b:6c:0c:
d2:c5:28:94:9e:15:77:2e:cb:0c:3d:6d:c3:5f:80:
e1:ac:93:42:bc:84:26:63:af:c1:3c:59:bd:50:20:
22:9e:80:e3:65:8c:84:c2:c4:d1:51:6e:d4:db:45:
a0:91:22:86:08:1c:66:91:84:f9:49:65:8e:b8:17:
c5:10:dd:80:5c:11:02:96:80:07:d0:75:66:72:2c:
30:65:3f:55:27:d0:64:08:83:37:96:58:61:e8:70:
91:c7:8a:21:5b:25:ac:96:1f:24:86:77:72:84:5f:
ba:84:64:5e:72:06:ac:db:9d:25:d7:b7:0a:c6:70:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EA:09:A5:79:21:BC:F6:95:C0:22:5F:F4:EC:F0:C1:FC:76:42:FA
X509v3 Authority Key Identifier:
keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:52:70:ec:f5:5a:a0:fb:31:6e:f5:e5:82:c4:86:8d:86:39:
84:22:4c:4b:52:74:ab:2e:c9:90:b4:17:65:5c:5c:76:13:8d:
f3:fe:8f:43:8e:b6:9f:1f:9c:20:06:ca:43:e7:87:fd:15:f2:
98:ff:d1:99:2d:3b:a2:40:66:5f:2c:46:3f:7e:4f:af:c8:f1:
aa:8b:f2:17:11:55:87:73:0b:cd:19:ce:b9:9c:7f:f5:f4:54:
0b:33:98:00:6d:18:fe:1b:56:d4:c3:b7:ac:9b:66:dc:78:74:
fb:e9:7c:96:9e:94:00:8b:df:59:21:8e:a6:e5:c9:57:47:1e:
99:b7:1e:e1:c6:09:0b:65:0f:50:84:60:d4:0c:ae:15:c0:c7:
30:d4:a8:8a:4d:ce:b5:d5:b2:87:03:b2:cc:0a:de:2d:4b:90:
a3:33:2e:a8:f1:30:44:d4:5a:0d:88:f5:32:e9:71:0b:55:32:
16:9f:ff:67:fa:63:8f:db:a1:8e:aa:8f:54:67:58:60:2b:b4:
e7:de:a4:54:ed:05:67:04:16:79:96:e3:e7:db:e2:7b:c1:b5:
7b:13:17:8e:0e:ce:9f:7e:23:19:a0:f8:3e:bb:59:4f:aa:36:
4a:d0:d5:36:c5:ff:ef:50:fd:ac:77:09:2d:f6:e2:d5:96:87:
ab:34:9f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:11 2025 by rpki-client