Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
File: elmlzGH-vbkW1GJLvowQiXNTsME.mft (raw, json)
Hash identifier: f7tZsw8FEoFuTlKIDkMxe7fHLnQajiMnb114i8ScCJk=
Subject key identifier: 92:C3:0D:FC:42:72:21:FE:93:BC:A8:31:CB:79:CB:D2:C2:D5:BA:76
Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Certificate serial: 01976EF53BF29DDCB8A2D42DDA1B05865D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 15:00:54 +0000
Manifest this update: Sat 14 Jun 2025 15:00:54 +0000
Manifest next update: Sun 15 Jun 2025 15:00:54 +0000
Files and hashes: 1: DhgKv9EWttCPWimr0cMYdix-VFM.roa (hash: jt6Z6pHhL+jbqX5CBAxAInUF4d0Kgk2CfxAQbj8DhrM=)
2: elmlzGH-vbkW1GJLvowQiXNTsME.crl (hash: ZYjpBa7+uXCbdmHPsO5goeV1qHgI/DIxSqTA8CPksH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:3b:f2:9d:dc:b8:a2:d4:2d:da:1b:05:86:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Validity
Not Before: Jun 14 15:00:54 2025 GMT
Not After : Jun 15 15:00:54 2025 GMT
Subject: CN=92c30dfc427221fe93bca831cb79cbd2c2d5ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:0d:c6:9f:e2:62:d6:ac:2d:14:96:24:6c:
70:a7:ed:c8:92:d2:45:bc:ef:e3:44:73:a7:f0:b9:
fa:a7:00:0f:86:7a:44:76:32:0b:23:82:18:ba:3a:
61:c7:07:86:62:6c:01:6d:8e:fb:68:2c:4e:dd:49:
f7:ef:68:3d:29:be:23:1b:c7:23:72:95:21:ae:67:
82:69:db:75:9a:ac:09:ce:b7:d5:18:f2:0f:61:72:
ee:72:cc:9c:87:0a:32:8c:11:5d:d9:5f:a9:a4:3b:
04:06:c5:fa:df:c4:98:ee:be:6c:1e:c2:12:85:4b:
9a:6f:5a:22:ea:24:55:65:d3:e4:87:22:38:13:03:
9c:f2:58:59:96:30:41:24:2d:fb:fe:50:39:e6:c7:
56:5d:6d:77:aa:e5:70:4b:24:63:a5:0a:61:6e:3c:
09:90:1b:cd:5e:c1:04:3a:f3:4d:fe:46:a9:ea:f4:
db:ec:43:ab:89:fa:9a:ad:f9:a3:2f:6f:5e:43:9f:
5f:cb:72:f4:32:ab:ed:0b:13:61:53:8c:bf:e3:2e:
bd:d4:07:e1:9c:67:a7:b0:dd:78:b5:f9:5e:47:67:
30:64:7f:85:cc:40:2c:e6:bd:3a:49:9e:96:71:44:
79:5d:10:b3:ef:da:7b:d1:c0:d7:54:ba:3e:cd:b0:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:0D:FC:42:72:21:FE:93:BC:A8:31:CB:79:CB:D2:C2:D5:BA:76
X509v3 Authority Key Identifier:
keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7d:5a:db:34:d3:88:df:87:f1:07:ea:8d:51:11:fd:3e:31:
18:2e:9c:4c:05:da:bd:77:0b:fc:97:4d:04:32:9c:63:ed:5e:
98:4c:5c:7a:f6:ab:e5:97:c9:03:68:b7:02:86:2a:e7:81:d1:
e1:0b:3a:d7:a3:dc:bb:8b:9c:cb:b4:26:39:67:05:00:22:57:
70:d7:8c:e5:cb:4e:3f:7d:b2:14:bd:ca:01:e0:4b:6d:55:9b:
51:16:e5:58:59:81:40:12:ef:29:e3:eb:da:fc:1e:db:f9:84:
32:97:33:2d:a1:d9:13:4a:b4:a2:5c:02:d6:51:45:5c:0d:d4:
36:3c:20:ed:83:cf:51:63:93:91:20:9b:1f:40:bf:69:b7:25:
25:c6:e4:9d:f3:4c:5e:ca:65:bb:1e:75:c8:31:50:f7:a9:a7:
4a:f5:de:0e:a0:9b:6f:6c:f0:b7:32:dd:80:7e:8f:be:a6:f1:
28:f2:5d:0e:2a:95:ba:bd:8f:54:b9:b9:11:6f:e9:2e:de:a3:
61:0e:95:d9:64:2e:06:86:ba:79:f4:85:b6:ae:de:05:80:3b:
bd:09:7d:de:11:9b:86:64:fd:3b:7a:f2:f7:c7:d5:3c:15:2d:
30:60:f8:72:3b:f2:6b:ee:a1:59:8c:ad:7c:15:ef:67:de:2f:
e3:2f:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:54:36 2025 by rpki-client