Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File: elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier: CnIUWakkRzgwYb7eNk/hWNLxN7IahkzuJUsaUwMVafM=
Subject key identifier: A3:1E:3D:8C:02:D5:4A:C3:35:EA:82:B6:3E:08:F3:94:EB:D4:16:E7
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer: /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial: 019773E42E7F5411BBE512C045A3E99448ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number: 054B
Signing time: Sun 15 Jun 2025 14:00:23 +0000
Manifest this update: Sun 15 Jun 2025 14:00:23 +0000
Manifest next update: Mon 16 Jun 2025 14:00:23 +0000
Files and hashes: 1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: hXPbidlTPXQ0ZHk2tyZDgklZqqyeZ8rh5ly66vsBjWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:2e:7f:54:11:bb:e5:12:c0:45:a3:e9:94:48:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Validity
Not Before: Jun 15 14:00:23 2025 GMT
Not After : Jun 16 14:00:23 2025 GMT
Subject: CN=a31e3d8c02d54ac335ea82b63e08f394ebd416e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:20:d0:99:f4:73:5b:76:30:d8:ae:98:34:
ee:36:0e:7d:24:1c:6d:7f:e8:5a:a1:7d:42:07:7b:
be:cd:b8:e2:cc:ba:d9:89:51:17:47:52:06:ff:17:
b3:db:27:83:b4:50:7b:bd:52:08:41:d1:9f:9f:cd:
44:ac:b8:cb:c6:6c:d0:18:54:63:f2:11:6d:b1:9b:
f7:ef:1e:f3:d8:7b:0b:67:a2:9c:3b:10:5e:e5:b1:
6a:23:94:dd:48:c9:0d:3b:49:40:57:cf:75:16:c0:
7e:ab:0c:52:fe:dc:62:f5:d2:ed:d8:c9:63:0d:b7:
c2:63:2c:92:ce:f1:12:0b:91:0c:06:20:95:31:3e:
e7:1e:17:ef:8d:4d:b3:07:fd:8f:29:df:c0:bb:e6:
a1:71:cb:a5:8f:4d:28:d1:5a:ae:c6:d4:2f:c4:4d:
1a:bf:b9:3d:00:aa:01:e7:ed:4d:48:b6:ba:0c:5c:
dd:b2:fd:ff:ab:6f:68:46:a8:e4:fd:d8:fa:ff:98:
2b:4c:02:08:19:23:f2:91:6e:4b:2b:b5:f9:a6:ee:
c2:7c:3f:fb:d2:9f:e9:b9:a5:9b:0e:62:30:02:20:
65:c5:43:3c:97:62:2d:69:1f:fc:c4:49:6e:5d:fe:
0d:fa:15:42:a4:de:0c:a2:65:09:eb:27:ce:29:71:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:3D:8C:02:D5:4A:C3:35:EA:82:B6:3E:08:F3:94:EB:D4:16:E7
X509v3 Authority Key Identifier:
keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c6:4f:52:87:59:cd:1a:2a:18:53:60:4f:23:00:ec:1d:79:
8d:d5:8a:e2:14:d8:77:42:c4:0a:f3:45:d2:dc:11:a3:2d:38:
30:af:90:c8:fe:83:10:95:58:1b:0a:20:62:8b:ec:03:43:ee:
22:6a:3f:8e:a7:56:8c:3f:c4:e0:70:3f:7f:a1:42:62:ab:e5:
65:a2:46:b3:ef:74:44:82:ee:f8:42:06:49:d3:f1:40:c0:08:
1d:5b:c2:26:6a:95:c8:6a:26:4c:78:1b:72:aa:95:80:77:ee:
6f:42:a3:2b:da:e2:37:3f:3e:4b:a5:37:07:85:46:8a:73:13:
39:6a:bd:52:cc:98:be:19:3f:98:77:02:27:c6:5f:d9:59:2c:
a5:05:6d:a8:a5:c0:a0:42:8f:ab:eb:66:c2:ed:59:c9:2f:6d:
0f:27:f3:e3:d1:b2:fc:e0:b1:c6:c3:f2:e2:b2:5a:7a:2a:73:
0a:ce:08:ce:1e:ea:48:30:b0:74:89:8a:6a:7f:af:4f:6e:da:
b6:34:36:fb:2c:c7:70:4f:fb:7f:9a:3e:a6:a9:6a:e8:fd:cb:
0c:e1:cd:76:41:2d:ae:cf:a0:59:28:2c:37:1d:44:d6:c5:3a:
fd:08:41:d0:8b:55:cd:f9:76:8a:59:63:94:2f:18:84:0a:6d:
01:94:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:04:48 2025 by rpki-client