
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: Vw7r1nLoWIpC0nWXzhF7cDImaU0a5lbqRtAeXkSLr1g=
Subject key identifier: 52:C5:C5:63:CF:93:B6:EB:51:01:B1:57:1C:DD:8B:DA:A3:7A:C9:05
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 019873E3433FACAAD19D85D5896AFECE84B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:02:10 +0000
Manifest this update: Mon 04 Aug 2025 07:02:10 +0000
Manifest next update: Tue 05 Aug 2025 07:02:10 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: i2EiDXy31aA5Hq/cKRGSL/+5BeOToNPXayt0Ds1oj/4=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:43:3f:ac:aa:d1:9d:85:d5:89:6a:fe:ce:84:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Aug 4 07:02:10 2025 GMT
Not After : Aug 5 07:02:10 2025 GMT
Subject: CN=52c5c563cf93b6eb5101b1571cdd8bdaa37ac905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:e3:f3:bf:c5:d3:bf:90:60:76:f2:98:f3:
f3:88:67:ec:71:47:6f:3d:d8:e1:80:c0:5f:dc:33:
68:0e:6b:af:84:19:60:73:cb:ed:d4:24:ab:0e:a5:
56:ea:6c:45:3c:88:01:a0:41:41:19:e8:4d:f4:52:
25:77:ab:12:e6:ad:5e:3c:ee:43:0c:99:e2:ea:89:
3f:22:95:4a:2a:7a:c0:e1:0e:dd:5f:bf:35:d3:83:
cd:4b:82:3c:b0:64:55:c7:47:71:47:f2:1c:45:69:
51:64:fc:24:e4:c7:60:cc:b1:c6:b3:7a:5d:5e:6f:
f4:fe:85:2a:e6:99:de:c4:25:fa:5a:cc:69:b2:37:
3c:a5:02:ea:75:f1:3b:c0:3b:24:16:b5:da:8a:fb:
93:98:3b:e8:d6:41:37:09:4a:e2:7f:8e:ff:80:df:
62:e3:72:7d:4b:2b:da:da:19:3e:e8:70:e7:eb:63:
bb:22:fd:19:01:a5:e0:49:4f:ba:5f:9a:6b:b5:2a:
71:f8:41:5b:6d:0b:dd:eb:99:fd:a4:1b:38:90:11:
4e:8a:3e:74:ca:9c:a2:24:33:32:5a:83:ba:fa:6f:
4b:f3:75:15:f7:00:45:76:36:79:32:fc:d1:81:ff:
53:b5:49:80:80:3d:40:1b:3c:51:6d:06:f4:5a:1c:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C5:C5:63:CF:93:B6:EB:51:01:B1:57:1C:DD:8B:DA:A3:7A:C9:05
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ab:c5:04:f3:14:ab:15:d7:e9:02:b8:02:86:0a:bb:3b:46:
77:c8:27:bd:2e:d0:14:aa:c7:c1:80:7b:2f:8a:92:03:43:d9:
50:fb:0e:7c:f3:06:92:08:21:01:39:07:8a:3c:f4:1f:63:3e:
4b:61:d4:f3:1b:b3:03:a3:f3:a4:f7:a8:3b:92:03:95:1d:26:
93:64:2d:5e:27:c6:db:57:12:82:e3:b2:50:33:79:2a:81:dc:
67:02:bb:7f:64:06:00:91:8b:bd:37:54:a9:55:89:63:3a:75:
f2:5f:29:11:54:a2:ec:71:65:ce:ae:74:6d:d2:68:9b:76:9b:
d5:f3:e5:c4:e6:b7:5f:1a:2e:63:e3:03:9b:3d:d5:80:9c:a3:
5b:36:15:d4:21:cb:f8:9f:d1:91:80:37:9b:02:46:4e:17:ea:
dd:4f:cc:eb:81:e9:e1:fd:95:1f:fa:ad:6f:f5:d3:30:a2:6f:
fc:21:25:5a:38:31:64:23:54:38:37:57:f4:30:14:af:e9:a8:
99:17:d6:46:18:31:2f:1b:e5:db:0a:1c:5b:32:70:aa:11:bc:
bf:30:d4:64:85:ff:7e:84:42:fe:a2:51:12:db:be:23:e0:95:
9d:d8:70:34:50:f3:41:4d:67:f1:8a:34:b4:18:51:55:0c:78:
9a:5c:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:27 2025 by rpki-client