Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: m0K7/Ni+XxPtoIDnta1leDdNWSFavcdJbl+50UOcTfw=
Subject key identifier: EB:A5:33:76:FF:98:BB:F4:47:0F:65:8B:7B:6F:1F:64:D0:A9:82:78
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 01976C2B68D54AB916BF1DF8B101CCB92169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 05E6
Signing time: Sat 14 Jun 2025 02:01:13 +0000
Manifest this update: Sat 14 Jun 2025 02:01:13 +0000
Manifest next update: Sun 15 Jun 2025 02:01:13 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: f9OI4Q4Dsbi64NnwkluqakoTCw9DZb1SipxJRC/XLhI=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:68:d5:4a:b9:16:bf:1d:f8:b1:01:cc:b9:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Jun 14 02:01:13 2025 GMT
Not After : Jun 15 02:01:13 2025 GMT
Subject: CN=eba53376ff98bbf4470f658b7b6f1f64d0a98278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:a5:ff:49:d4:36:26:99:4c:f1:14:a7:03:
68:06:d0:c4:b9:02:86:7e:fc:ac:7d:bd:3c:ea:ce:
ad:a4:2c:e2:39:38:c8:c8:b3:49:7b:2e:e9:05:6f:
27:cd:8e:21:c6:5c:b3:00:89:60:5c:df:2c:60:92:
ee:55:18:fb:95:19:bd:6b:07:45:fa:d7:d3:bf:fe:
a0:c0:13:32:b8:32:88:dd:7f:af:0b:98:85:ed:56:
15:93:7b:63:8c:4d:bd:e4:86:32:77:51:00:76:90:
17:56:69:5d:be:29:aa:4c:6c:0a:8a:b9:79:86:eb:
ed:9c:8e:71:59:0b:9f:b2:9b:15:11:34:56:da:e1:
db:17:91:00:b7:91:be:01:7d:72:3b:21:c0:80:50:
35:47:b0:82:99:51:64:62:04:61:ee:5d:5e:f6:a4:
9f:b6:36:ec:f1:bb:64:71:99:5b:6c:b7:4a:7a:79:
ac:a9:35:70:55:15:15:77:b7:6e:a7:27:6e:8e:0e:
99:31:0b:f2:6d:f7:82:87:37:2b:95:54:ef:31:6d:
9d:80:1f:9d:bf:f6:01:8f:e0:30:c5:af:e8:b3:ae:
67:a6:1d:50:14:f0:ef:71:68:b3:b4:e0:29:11:53:
a1:91:f7:67:61:12:f1:b6:ed:02:dd:54:37:dd:ee:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A5:33:76:FF:98:BB:F4:47:0F:65:8B:7B:6F:1F:64:D0:A9:82:78
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c4:ad:7d:83:a7:5c:08:3b:a9:9c:4c:78:48:1f:c8:8d:14:
7a:9b:81:4c:02:a6:aa:6f:e5:d6:1c:f2:a5:ed:64:70:cd:0e:
fa:ab:d7:5d:c9:67:2f:d0:ad:39:02:74:c2:2d:9b:36:6e:e9:
15:2a:7c:7d:17:72:8f:57:45:04:37:e9:22:32:1e:de:4c:82:
96:ec:14:fd:54:90:5f:ce:cb:2d:69:70:4c:a3:95:4c:2c:22:
92:45:bf:2c:10:c1:5e:3c:f3:9c:18:ff:fa:72:a9:35:38:48:
d5:06:17:82:37:dc:ee:a4:c4:21:91:0b:74:4e:a1:d4:04:8a:
21:40:54:91:a6:2b:aa:b7:22:14:b1:90:70:51:a0:84:0e:b1:
6c:6a:b0:40:1b:35:39:22:43:45:d2:68:b2:ac:f7:8d:c3:37:
a1:1f:c3:13:7e:4e:d3:f2:4f:3d:68:50:c1:62:bf:0e:24:ee:
41:12:86:63:e8:c0:a6:65:7a:78:fc:67:c8:d1:e0:72:78:b0:
c0:78:e9:66:9c:93:14:f2:2e:1c:03:06:e8:b3:90:10:6f:b3:
0e:12:c7:29:2b:5d:f3:76:13:08:9b:0a:20:f8:df:82:1e:7d:
96:ab:90:e8:22:67:58:df:da:d3:8c:50:00:6f:ec:4f:c0:4d:
63:72:78:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK2jVSrkWvx34sQHMuSFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNWIwM2UyNDgzYmVkMTM0Mzg3YmZjMzA0N2ExMzk4OWZk
ZWE0MWYwHhcNMjUwNjE0MDIwMTEzWhcNMjUwNjE1MDIwMTEzWjAzMTEwLwYDVQQD
EyhlYmE1MzM3NmZmOThiYmY0NDcwZjY1OGI3YjZmMWY2NGQwYTk4Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLOl/0nUNiaZTPEUpwNoBtDEuQKG
fvysfb086s6tpCziOTjIyLNJey7pBW8nzY4hxlyzAIlgXN8sYJLuVRj7lRm9awdF
+tfTv/6gwBMyuDKI3X+vC5iF7VYVk3tjjE295IYyd1EAdpAXVmldvimqTGwKirl5
huvtnI5xWQufspsVETRW2uHbF5EAt5G+AX1yOyHAgFA1R7CCmVFkYgRh7l1e9qSf
tjbs8btkcZlbbLdKenmsqTVwVRUVd7dupydujg6ZMQvybfeChzcrlVTvMW2dgB+d
v/YBj+Awxa/os65nph1QFPDvcWiztOApEVOhkfdnYRLxtu0C3VQ33e7F6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOulM3b/mLv0Rw9li3tvH2TQqYJ4MB8GA1UdIwQY
MBaAFHpbA+JIO+0TQ4e/wwR6E5if3qQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMt
NzFlNTYxY2I3OGU5LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMtNzFlNTYxY2I3OGU5
LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasStfYOn
XAg7qZxMeEgfyI0UepuBTAKmqm/l1hzype1kcM0O+qvXXclnL9CtOQJ0wi2bNm7p
FSp8fRdyj1dFBDfpIjIe3kyCluwU/VSQX87LLWlwTKOVTCwikkW/LBDBXjzznBj/
+nKpNThI1QYXgjfc7qTEIZELdE6h1ASKIUBUkaYrqrciFLGQcFGghA6xbGqwQBs1
OSJDRdJosqz3jcM3oR/DE35O0/JPPWhQwWK/DiTuQRKGY+jApmV6ePxnyNHgcniw
wHjpZpyTFPIuHAMG6LOQEG+zDhLHKStd83YTCJsKIPjfgh59lquQ6CJnWN/a04xQ
AG/sT8BNY3J4Xg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:12 2025 by rpki-client