Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: Pnx489d7uWeolm0SzsiB8nzl/lDprj3y0DeUPTrVjoo=
Subject key identifier: 38:38:F9:57:BB:DE:2A:A8:88:FA:30:85:06:A9:45:D0:9E:2B:0E:CF
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 019769CF16531ECE9793ADB7163209C1E700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 157B
Signing time: Fri 13 Jun 2025 15:01:08 +0000
Manifest this update: Fri 13 Jun 2025 15:01:08 +0000
Manifest next update: Sat 14 Jun 2025 15:01:08 +0000
Files and hashes: 1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: mY2409QWn9CVMREudxT1qL2U4WMzz8V8d0TFZzsTy/Q=)
3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:16:53:1e:ce:97:93:ad:b7:16:32:09:c1:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Jun 13 15:01:08 2025 GMT
Not After : Jun 14 15:01:08 2025 GMT
Subject: CN=3838f957bbde2aa888fa308506a945d09e2b0ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:83:19:04:c8:f9:ee:17:71:cf:6c:16:b7:
b4:cf:39:59:c9:85:e9:31:36:57:dc:b0:71:ff:1c:
44:18:8e:6c:a5:3a:d2:8b:69:ff:cd:fc:a5:e6:cc:
12:3e:81:c6:57:eb:4b:12:22:05:77:11:c3:5b:3f:
3d:ac:f8:b2:35:da:b3:d9:68:e1:ba:f7:86:7b:56:
2b:85:a6:e6:60:0a:9a:f7:9d:a0:15:a1:61:3b:02:
62:01:9b:11:43:cc:5f:17:24:86:99:36:45:ce:89:
d6:39:78:92:ee:3f:21:20:79:a7:72:11:82:27:9c:
df:12:b6:9a:44:b5:a1:07:31:2c:66:16:ff:ba:c8:
f0:5a:67:af:f6:0d:83:60:d9:56:a5:b7:d1:be:1b:
eb:85:7b:0b:1d:e0:ae:2b:87:1e:a8:4b:cf:c0:92:
ed:60:ef:e5:e9:fc:86:f4:6a:30:3d:0e:fb:07:98:
de:4b:3e:6f:58:e4:d1:ee:13:c6:67:a0:79:f3:0f:
f7:b7:21:ff:a4:fe:f7:6d:93:cc:6f:a8:23:04:61:
16:d6:c5:17:78:03:e6:61:40:3c:52:53:17:02:9a:
95:50:e1:72:55:37:c9:aa:34:4f:df:b3:61:bd:56:
72:e7:a6:eb:f7:83:2b:8a:b5:55:39:e1:29:32:fd:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:38:F9:57:BB:DE:2A:A8:88:FA:30:85:06:A9:45:D0:9E:2B:0E:CF
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4e:82:83:1f:6b:c0:a4:b8:0d:e4:24:29:ae:13:c5:3f:22:
74:d5:3e:aa:3a:54:a1:62:99:f0:b6:ec:48:3d:5a:00:4a:8e:
8c:8d:d4:29:93:de:cd:6c:d6:a2:b0:ce:6f:ba:73:be:87:48:
69:88:b2:19:47:f9:87:e3:ac:01:09:96:02:ff:48:e0:18:11:
9e:f9:4c:42:1d:4c:77:99:8c:90:1a:36:48:5a:c4:88:9b:20:
3e:b0:8a:5a:79:0e:3f:cb:45:d5:95:1d:e2:58:dd:b9:4d:c4:
d4:41:ae:15:0d:79:1a:72:ed:1c:69:b0:a1:30:d2:e3:17:2f:
ad:b3:ae:79:53:5e:61:84:74:3a:c4:0e:c7:a7:4c:8a:70:b6:
ef:c5:d9:97:bb:36:e7:3c:c7:a9:05:9c:9f:ae:e3:2b:b4:58:
f9:84:3c:82:81:63:a2:f4:83:e6:02:62:ec:66:bf:e7:47:b0:
fc:1c:63:69:33:08:49:a1:88:24:29:c7:0f:cc:7c:f6:51:89:
ab:28:92:be:4f:56:ab:f9:3c:b8:89:99:02:e9:db:86:df:32:
9e:66:5c:5a:b4:1c:f0:2d:82:4a:49:bc:80:bb:68:35:a6:a8:
40:ce:6d:18:51:38:c1:28:4c:a5:88:c3:f9:c6:fd:84:af:16:
19:44:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:33 2025 by rpki-client