Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: 156Kj/6AsNLdlt4MyMTyknyfFz77jKvMJEpOpTzIOW8=
Subject key identifier: 69:4B:9A:EB:0C:65:66:34:3F:0A:6B:15:7C:A0:F4:A2:CC:8A:0D:3F
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 01976BF3F86725C328765CE3CE38DB4C0BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 04A4
Signing time: Sat 14 Jun 2025 01:00:40 +0000
Manifest this update: Sat 14 Jun 2025 01:00:40 +0000
Manifest next update: Sun 15 Jun 2025 01:00:40 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: A4L0hyOA9iDZYRwM4AwQCJUZWMzMTDwkarMLDrpvdGY=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f8:67:25:c3:28:76:5c:e3:ce:38:db:4c:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jun 14 01:00:40 2025 GMT
Not After : Jun 15 01:00:40 2025 GMT
Subject: CN=694b9aeb0c6566343f0a6b157ca0f4a2cc8a0d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:2c:62:52:28:6b:c9:e6:b0:df:be:89:e5:
64:e5:32:bf:b2:f7:a2:84:13:11:68:ea:76:77:da:
04:4b:11:48:8f:16:57:ae:dc:f4:57:de:3c:d8:d7:
b4:d2:8a:ee:65:e1:72:88:f6:04:62:1b:2e:cc:87:
37:1a:4b:a2:73:87:2e:9e:1c:57:89:f7:f6:5f:34:
8f:1c:79:3f:f8:84:a2:a3:f8:5d:6e:da:4f:86:d6:
df:11:c8:f2:bb:b1:eb:6a:8b:50:14:00:71:ea:7e:
f1:fc:b6:6f:77:ca:09:9d:5d:2f:c2:f4:2c:10:63:
3e:25:be:b0:aa:5a:40:67:68:7c:e7:09:c6:18:db:
4f:13:bd:8a:36:9b:6a:c5:6f:83:fd:7e:a7:b5:dd:
1b:f3:ee:cf:95:c6:3b:6a:74:a1:0b:ab:1c:64:4f:
a6:fc:bb:4c:40:2c:a2:bf:18:33:83:61:82:86:9b:
1d:d9:1a:ff:f2:9d:6b:c9:42:f3:0d:ac:00:75:e1:
32:57:61:d6:fc:83:7c:90:f3:29:c1:3e:9a:66:79:
2d:00:b7:c0:79:d2:d4:aa:11:e0:ef:5d:f6:c3:b7:
10:bf:33:4f:ee:e2:1a:4b:41:01:cf:28:10:3f:2a:
2d:2d:e6:09:cb:28:c1:9d:da:bf:ed:ad:8e:db:ba:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4B:9A:EB:0C:65:66:34:3F:0A:6B:15:7C:A0:F4:A2:CC:8A:0D:3F
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:94:ff:3a:b0:f8:75:c0:77:49:76:88:fc:f2:04:20:eb:e9:
fe:95:2e:31:b7:dc:23:82:0a:36:27:75:bb:5e:69:1f:8b:64:
61:8f:66:6d:60:e1:7e:0e:47:06:04:aa:dc:55:fb:5a:41:b1:
4a:25:0d:31:aa:e3:f7:f4:01:86:42:27:a3:20:09:7f:d4:db:
f3:b9:5c:06:d3:a8:78:13:8b:ca:4d:50:d2:61:55:ed:58:88:
b6:03:5a:04:d1:63:dd:5a:08:72:51:7e:e0:6b:fc:fb:c1:ba:
3d:f8:27:46:bd:56:51:cd:23:00:25:52:c4:bc:05:14:02:2e:
b6:16:03:6c:77:00:3b:22:ec:be:99:f3:bc:49:8c:ab:71:d7:
19:b8:b2:39:d8:16:b3:89:36:fc:4e:c4:82:70:1f:66:60:7e:
80:c9:bd:e6:fd:85:89:e7:c0:58:a6:41:e7:d0:4d:9f:c0:7e:
f3:83:5d:51:3c:44:30:24:aa:50:e2:36:92:1a:09:12:8f:fa:
56:c3:bf:5d:cb:7a:d0:ab:ea:67:3e:89:7c:7b:0b:aa:45:55:
50:f4:e6:a2:7a:68:cc:11:2b:02:c1:cd:7b:f6:4b:ba:aa:3e:
89:2c:6d:1e:71:54:0c:6a:be:5e:a1:6e:b3:d3:99:73:88:82:
c0:c4:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:37 2025 by rpki-client