Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: 82kVvXu95PBLMWhW31vqmPiuDiS+3jQJC7Bqv31f0Rk=
Subject key identifier: F5:0D:69:7E:73:AC:56:E3:B1:33:B6:3C:ED:22:07:2F:28:95:F7:BD
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 0198880DEBEE4AE7B739E96506D18B39AF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0679
Signing time: Fri 08 Aug 2025 05:01:10 +0000
Manifest this update: Fri 08 Aug 2025 05:01:10 +0000
Manifest next update: Sat 09 Aug 2025 05:01:10 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: 8/QpafdJrtrAiYJRfpqJtSbNT5HhXNTz28H2tTX0ROs=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:eb:ee:4a:e7:b7:39:e9:65:06:d1:8b:39:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Aug 8 05:01:10 2025 GMT
Not After : Aug 9 05:01:10 2025 GMT
Subject: CN=f50d697e73ac56e3b133b63ced22072f2895f7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:98:6a:2f:42:9d:20:e7:2c:69:53:68:5e:
86:81:e4:b1:f3:08:cc:2a:7e:9b:f8:0a:bd:8d:b2:
2f:a8:48:32:20:c8:29:32:92:ae:e9:45:bc:ef:d3:
96:9d:93:8b:17:27:c4:41:6f:29:63:36:08:9b:3c:
8c:f9:73:ff:9e:24:61:07:ad:fe:c4:d0:32:0b:9e:
46:8d:42:80:dc:65:70:27:35:ca:ef:fa:8e:e4:b4:
b5:b8:31:68:25:4a:21:65:7b:2a:fe:a2:00:3a:e4:
b7:12:5b:42:f2:2e:c0:43:21:48:7b:94:a3:66:81:
25:29:b5:6e:90:7a:cd:03:2b:13:bd:a1:72:ca:0c:
b6:48:8b:8b:f6:36:39:c2:69:b2:f3:e5:8f:5d:ef:
ca:e6:e4:c4:e0:e1:f0:06:5f:05:6d:c0:34:ca:ae:
0d:7f:7d:12:7f:67:e9:47:2f:ba:2c:a5:1d:87:10:
d1:0c:d0:79:50:f9:a0:20:d1:04:48:f2:4b:8a:b1:
8f:2d:04:11:cf:70:f5:7c:3f:0e:90:86:03:68:9d:
9e:74:1d:7a:1b:1d:78:5e:df:10:ec:73:c5:88:e8:
e5:df:03:61:d3:42:e4:3b:e7:05:85:8f:aa:8b:61:
90:71:a6:a5:4b:39:e7:c0:fd:cd:01:0a:33:29:dd:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0D:69:7E:73:AC:56:E3:B1:33:B6:3C:ED:22:07:2F:28:95:F7:BD
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2a:61:a2:30:7c:33:31:b1:af:04:1e:04:60:7c:67:b3:1d:
e5:7a:b0:c9:b7:a3:27:96:0f:7a:9d:ab:5e:2d:9b:c0:f5:bc:
4e:df:21:4f:85:25:ab:2f:96:85:72:43:5d:0f:a1:81:90:13:
c3:55:e5:c1:c8:3e:ab:0c:6e:6f:93:d3:05:84:c3:5e:f5:07:
50:b1:ff:2d:01:2b:b3:bd:1c:ea:3c:6d:f2:8c:bd:7b:d9:48:
bb:92:a5:ac:76:c3:29:de:a4:8b:d1:7a:ac:e2:3d:09:34:e1:
1c:35:eb:aa:0b:6e:1b:b1:f8:5e:9c:63:fd:37:c6:62:c3:3c:
fe:76:24:16:95:d3:3b:15:61:ac:5e:1a:e7:66:19:78:d3:9e:
84:13:8e:47:77:7a:12:be:8f:11:86:1c:cb:22:c6:d3:c7:ac:
43:82:5e:2e:9b:88:e7:b4:a3:c4:b8:94:2e:00:e3:b8:ec:4f:
d8:24:a3:60:fc:21:70:27:f8:cb:28:f6:73:03:0a:93:9d:b4:
5f:43:88:7a:8f:a1:c0:68:1d:47:c6:5d:d6:ef:cd:50:cc:ad:
fb:4f:98:c0:4b:1d:5c:22:c2:16:fd:b1:8b:5a:c5:b4:02:a8:
03:fe:64:ad:34:d9:ac:4b:ea:80:07:cd:47:05:41:86:18:f2:
39:bd:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:34 2025 by rpki-client