Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: 6j6uwDY3cs+st6scp3I1ctHKBqPbr3RjWcBU+YN1yP4=
Subject key identifier: 40:C2:1F:9A:74:26:FD:75:81:8E:12:27:E1:43:97:BD:A8:DE:BC:BE
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 01976C98E7027BDDB42D86A56C3C8640C7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 150D
Signing time: Sat 14 Jun 2025 04:00:49 +0000
Manifest this update: Sat 14 Jun 2025 04:00:49 +0000
Manifest next update: Sun 15 Jun 2025 04:00:49 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: bd7xDrqzXNvevnMwy1CCVfOyX/XyYKE3yls1tx63xzw=)
2: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (hash: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:e7:02:7b:dd:b4:2d:86:a5:6c:3c:86:40:c7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Jun 14 04:00:49 2025 GMT
Not After : Jun 15 04:00:49 2025 GMT
Subject: CN=40c21f9a7426fd75818e1227e14397bda8debcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b2:db:2e:e0:0c:8c:86:f4:56:4d:19:57:35:
4f:07:c8:85:bd:8c:3a:96:c7:2e:4c:ff:33:19:92:
ff:45:de:7e:11:55:fe:02:0b:98:86:0c:47:bd:cc:
b3:5a:c7:9d:54:e1:4f:e7:ef:b8:28:ba:a9:ec:68:
a6:82:28:89:72:a1:26:3a:33:11:ed:28:e7:a3:3b:
4a:a4:b4:ca:5f:b0:84:dd:44:a5:11:df:f5:4d:9c:
4a:8d:24:45:9b:05:51:db:13:0c:99:e8:ac:82:26:
d0:6a:e7:e3:24:51:3c:49:78:df:aa:31:4a:70:b0:
4b:d8:8e:67:5b:e6:0a:86:14:a4:de:81:28:f4:27:
d5:32:40:2b:01:4b:7d:dd:eb:73:0a:59:49:4a:83:
79:6f:cc:04:84:1c:f1:f4:71:33:00:66:e4:75:6b:
5d:21:7d:9e:6e:2e:35:a7:b4:2f:40:35:4e:0f:22:
01:ff:0d:71:be:f5:2c:1f:ac:8c:6e:63:f2:65:8b:
c2:e0:b3:d5:58:ea:58:f7:3d:7a:56:ba:68:f4:a9:
c9:9d:25:8c:0d:f8:b6:24:6f:0f:b4:d4:ba:29:54:
30:2d:4e:c7:33:3b:c7:b6:b8:6d:b8:cb:f5:94:d9:
91:c9:93:66:ec:f1:96:c5:84:5a:0c:4c:8a:68:04:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:1F:9A:74:26:FD:75:81:8E:12:27:E1:43:97:BD:A8:DE:BC:BE
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:05:0d:52:eb:bc:1e:69:93:a9:20:82:a4:25:ad:f6:18:8b:
fb:b8:33:ed:44:52:ac:92:b5:37:42:52:1b:2a:ef:22:4a:cc:
d2:f6:68:10:35:98:6d:33:ab:b8:3c:85:f8:f8:82:dd:88:68:
39:ed:31:87:ce:7e:40:39:b3:dc:02:41:19:88:1b:19:81:50:
46:6b:c2:ff:0d:8f:e1:cc:90:20:fb:2c:15:35:ab:ed:3c:38:
4d:61:87:4a:ad:8e:a3:0a:b2:bf:42:41:63:94:49:54:05:52:
09:8a:a5:19:1a:fa:6c:81:24:4e:b3:c0:c3:2d:50:c4:7b:4b:
20:9e:88:88:e8:61:7e:59:d8:91:f3:3d:83:c3:85:cb:27:66:
cb:c0:79:36:b2:01:b0:eb:be:86:37:bc:da:3a:1c:f5:d8:96:
97:20:50:ba:56:f0:f3:b1:bb:e7:cf:e7:4c:a9:a7:39:17:91:
15:32:fc:d2:07:28:00:71:3d:4d:99:50:f7:9d:f0:5d:aa:05:
d4:7c:c4:07:11:b1:7a:a6:3b:77:9f:2f:1c:ec:dc:8c:e2:c5:
e5:1e:36:37:ac:60:21:79:2b:25:69:bc:8a:9b:76:1a:9d:0a:
a0:1c:0f:3b:29:5d:10:88:97:b3:a6:4c:46:60:6d:52:e5:ef:
d1:99:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:35:27 2025 by rpki-client