Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
File: eFtJDXZvSxwhHX2t1u-ncPbrniU.mft (raw, json)
Hash identifier: XzcURGBV0RYKOZBAJBwvKbr6hyTuu4dAVtcgDg7GHGM=
Subject key identifier: A5:A3:08:CB:78:E4:57:96:E5:C8:C8:DD:68:E8:F3:D2:26:40:31:D4
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 01974E5752C25FEA3E3ED9C22894FCCC560E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
Manifest number: 158A
Signing time: Sun 08 Jun 2025 07:00:35 +0000
Manifest this update: Sun 08 Jun 2025 07:00:35 +0000
Manifest next update: Mon 09 Jun 2025 07:00:35 +0000
Files and hashes: 1: 9zIahErPKs5OI77jqtF3OFfSb84.roa (hash: LRBu381l6GjbbwghEnE2JO0YRx1RUI+gn5mW8OQMfKg=)
2: Sd9KABI9BM5Wi5AzQPJlcrl7nPs.roa (hash: lKvMF4u6rkezbu3Z5i73n84s97j8vHpTtirCLh73hlM=)
3: eFtJDXZvSxwhHX2t1u-ncPbrniU.crl (hash: o4wNybByOSgXnyI9jn+fJ/KhEcEI6aGfXpbinEd/x04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:52:c2:5f:ea:3e:3e:d9:c2:28:94:fc:cc:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Jun 8 07:00:35 2025 GMT
Not After : Jun 9 07:00:35 2025 GMT
Subject: CN=a5a308cb78e45796e5c8c8dd68e8f3d2264031d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:ad:26:f6:be:3c:03:3f:c5:56:83:cb:17:
59:df:e0:55:7f:8e:d4:c6:ea:17:7e:c6:26:cd:a6:
0f:78:7f:02:de:ed:ff:04:be:70:31:29:5a:04:93:
75:76:f5:ca:ab:d1:9d:f1:bf:99:87:aa:4b:b3:01:
44:74:7e:f7:df:da:94:42:4d:1f:fc:7b:53:e5:20:
de:83:fb:09:6c:4e:17:bc:88:2c:7f:81:b6:27:5d:
c1:24:d8:13:b7:be:a0:f0:88:c7:e5:90:d1:ed:04:
2c:7d:60:17:51:b3:b5:78:75:07:8a:c3:87:68:36:
cc:12:3b:98:28:1b:7b:19:79:62:2e:76:f9:84:b7:
20:cb:25:b8:58:d0:7c:6f:5f:8e:0c:23:93:86:2c:
ba:c7:23:fb:aa:11:1d:02:41:47:b1:79:de:4b:35:
ec:58:e1:1b:37:63:0d:c2:67:37:2d:8d:3a:8c:d4:
c2:a0:c5:fa:9e:5c:66:a3:84:68:9a:68:77:c8:12:
be:66:ad:fa:ee:d4:de:15:20:29:c6:ab:b0:7d:8e:
03:e3:a8:5e:86:05:9b:ee:f3:68:a3:67:db:17:ab:
64:aa:d9:0f:7c:20:66:9e:7b:ae:ef:ca:cb:d7:36:
05:b5:b3:a3:06:47:74:03:22:8c:d1:28:11:6c:e0:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:08:CB:78:E4:57:96:E5:C8:C8:DD:68:E8:F3:D2:26:40:31:D4
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ab:4c:39:0c:b4:e7:76:1d:28:3a:cf:2e:1d:14:e0:73:da:
3a:e2:f1:63:39:b7:8c:3d:61:be:36:41:ba:57:56:e5:70:b6:
f4:46:3d:c5:0d:06:69:83:70:e7:cb:49:64:34:e6:08:f4:51:
61:fc:b7:ff:9a:c6:86:fa:cc:9d:38:b4:ef:bf:a2:66:42:db:
b0:b9:6f:8a:dc:c2:5c:6d:9b:b4:57:19:49:0e:06:c9:5f:48:
fe:08:70:5e:7b:d2:25:86:36:e4:ae:f9:91:86:80:3d:94:16:
17:5c:a0:5f:9e:c1:10:75:a5:d3:20:e3:44:b5:93:3f:86:06:
60:23:fd:ac:78:81:7f:2d:fc:06:39:49:66:cc:fa:91:ea:f7:
be:b3:19:e5:49:1a:4e:55:8b:63:61:0d:bb:84:38:88:0a:64:
85:65:40:c8:29:5b:72:03:2d:9b:cb:b8:42:c1:78:2d:06:44:
53:99:f4:5a:6d:48:6a:60:0e:db:b3:da:d0:6f:47:62:66:16:
b2:c7:d9:e4:8e:10:fb:65:aa:8d:d3:32:57:78:63:a3:69:81:
3d:f8:9a:94:23:87:6c:e6:8c:16:ea:5f:2d:c8:23:29:60:4e:
a6:04:89:ea:33:98:e8:9c:70:e2:06:93:d8:62:98:4d:ea:9a:
58:b9:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:14:21 2025 by rpki-client