Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: BfyOMFGDCduerM6WF1phmdl52wOg9z0m7EMlCzxFu1k=
Subject key identifier: A4:DF:5A:77:9C:BE:0E:01:78:EA:F4:7D:E3:72:FB:70:7E:DD:6E:F1
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 01987298416F836B9A2B202AC276E855B2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 052C
Signing time: Mon 04 Aug 2025 01:00:37 +0000
Manifest this update: Mon 04 Aug 2025 01:00:37 +0000
Manifest next update: Tue 05 Aug 2025 01:00:37 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: +RMDwrkU1rrHq3ow7A6/ul9/3cbVTELDSt/U1ISskls=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:41:6f:83:6b:9a:2b:20:2a:c2:76:e8:55:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Aug 4 01:00:37 2025 GMT
Not After : Aug 5 01:00:37 2025 GMT
Subject: CN=a4df5a779cbe0e0178eaf47de372fb707edd6ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:6c:c8:b8:dd:52:73:b4:b0:bb:8e:b4:9d:
d0:e4:e3:8f:2e:d0:92:ae:ad:64:09:32:af:31:56:
ae:f7:49:19:ea:d8:cd:9a:c0:cd:0c:02:67:26:75:
67:b7:29:1c:9c:05:bb:6c:21:4f:37:5b:91:96:fe:
fb:b1:71:29:c4:46:8b:57:5b:35:6d:50:be:a5:a4:
96:0a:7e:dd:6c:15:5a:01:d2:0d:e4:e9:c8:4f:d9:
34:48:e1:95:42:01:7f:c8:a9:a0:14:09:ca:16:15:
65:a9:f1:83:f9:90:79:4d:96:d1:9b:40:4f:f8:b6:
98:e3:91:81:3f:66:28:1a:44:18:75:5d:a8:39:ad:
50:0f:ce:38:64:c1:cd:38:f4:f2:a4:32:77:d9:d1:
72:9e:c0:28:d5:55:9b:c8:c4:a9:69:1e:63:69:d3:
1a:4a:42:d7:50:93:14:52:c9:ac:e0:8b:8e:09:c1:
28:79:53:92:e4:c3:33:33:4f:3b:cc:b5:f5:04:fc:
d6:98:00:a5:69:d2:6d:a4:ca:b3:0c:a4:35:77:4c:
6e:e3:16:c2:2c:8b:7a:47:66:a1:95:e0:2d:35:db:
e6:14:69:16:b0:41:61:d7:bb:8f:c9:de:9c:cc:44:
51:19:cc:66:9e:d2:3c:11:1c:a6:7c:b7:73:cd:cf:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DF:5A:77:9C:BE:0E:01:78:EA:F4:7D:E3:72:FB:70:7E:DD:6E:F1
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:65:dd:80:d2:3b:17:5e:84:28:2f:fb:10:0b:d1:eb:a5:b8:
a2:57:51:da:ee:82:70:95:b4:40:7b:b9:cc:f1:24:b9:63:96:
3f:6d:b4:a7:2a:0d:42:b0:1a:c0:a9:c8:74:57:4d:e0:b9:78:
50:de:46:2c:07:06:ec:12:1d:2a:e9:f7:bb:20:91:16:31:46:
fc:b8:9e:b1:b9:97:64:d8:fe:70:0b:4b:af:8a:ce:49:ad:c5:
e9:74:ce:fe:3c:dc:0f:cf:e5:f8:86:65:89:d8:09:90:af:86:
bf:e7:5a:b8:39:e5:e5:f6:5c:d2:b9:4f:36:9a:d6:59:50:79:
76:cd:db:53:ad:b7:5c:8e:d6:82:31:29:f4:a7:20:70:59:d7:
e0:d5:53:27:4f:06:5d:db:af:de:1a:3f:17:dc:f7:2f:27:05:
0b:ff:e4:9a:5b:23:9d:7b:3c:5a:34:52:a4:aa:5a:af:de:cc:
41:4b:19:80:95:5b:7b:ad:46:56:fa:67:8e:f6:5b:40:2f:9e:
ba:95:3f:1d:cf:1f:af:c8:6c:87:35:8b:bb:6b:d3:c9:0a:70:
b6:c7:75:06:29:e7:5b:26:dd:8c:c6:0c:49:0f:6d:77:cd:84:
c4:c3:ba:2a:ef:15:d7:82:82:b9:6c:55:5d:da:81:f0:7a:ef:
f9:84:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:57 2025 by rpki-client