Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: fEnTTmoRKsIvdQ0KzkD3OXaHP9FbKqgHvgYQ1TDGzJc=
Subject key identifier: F6:DB:75:15:B2:A9:93:53:FC:24:0B:BF:40:BB:76:78:5C:92:38:50
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 0197BB58FCE43373FB6B3B9F55E4D604F6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 0897
Signing time: Sun 29 Jun 2025 11:01:00 +0000
Manifest this update: Sun 29 Jun 2025 11:01:00 +0000
Manifest next update: Mon 30 Jun 2025 11:01:00 +0000
Files and hashes: 1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: tzczimEuMAE6yUCImA00F7/1U3eUecZZ6wJDdXLGkD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:fc:e4:33:73:fb:6b:3b:9f:55:e4:d6:04:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Jun 29 11:01:00 2025 GMT
Not After : Jun 30 11:01:00 2025 GMT
Subject: CN=f6db7515b2a99353fc240bbf40bb76785c923850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:c8:8b:f0:c3:8a:13:ec:63:57:d6:2c:31:
04:7c:ef:19:cf:2f:76:8f:a0:93:91:a9:b7:ae:5b:
41:ff:50:6d:98:b1:2f:09:10:55:bb:6a:f9:41:2c:
95:d9:48:da:f4:de:ae:be:d8:7f:4b:a9:a4:bf:1c:
32:d0:b8:a5:49:0f:c2:5b:14:5d:f1:cd:31:29:39:
39:35:1b:2b:dc:22:8f:27:21:21:fb:88:fa:6c:ba:
c9:2a:bd:a8:58:ac:82:85:86:2c:f0:ce:1c:32:22:
07:df:8c:4a:b4:42:3e:95:ad:9e:28:ee:f7:6d:7d:
e5:dd:bb:30:34:37:46:c4:6b:ea:2d:66:37:b8:72:
ee:29:03:46:20:9c:cf:a0:ee:f9:4c:bc:ab:c1:62:
36:32:b5:a1:0c:ef:63:0a:6f:39:0d:42:67:85:83:
cc:e5:c8:47:71:bc:d0:2a:34:4e:a6:0c:80:cf:4e:
52:14:7d:70:4a:31:e6:94:ba:bd:4c:02:e4:6b:a4:
b9:e3:17:eb:ff:84:e5:ec:c8:72:b0:d9:0c:31:63:
bd:ef:63:b5:93:bc:53:f8:f3:af:c0:3c:46:d6:5f:
ec:34:76:9a:e1:37:98:ca:fb:c0:61:73:13:82:11:
cb:4a:40:d1:40:5a:c3:1e:b9:f8:ef:86:50:59:32:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:75:15:B2:A9:93:53:FC:24:0B:BF:40:BB:76:78:5C:92:38:50
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:79:0f:fb:84:d5:8c:04:6c:c9:19:a3:a8:18:2d:c9:6b:b8:
ce:b3:b2:2c:ef:36:5c:ee:8e:5d:5a:16:b0:1e:74:ed:a9:f5:
b0:58:08:24:1c:46:a8:96:1f:a4:9a:9f:da:5c:84:d0:47:c0:
e2:53:da:84:22:53:4c:59:95:42:39:59:87:6e:0c:2a:65:84:
34:27:3b:5b:18:e2:ff:10:d7:c4:21:1e:5c:25:71:f9:6e:91:
d4:af:4b:6a:d2:fe:92:6d:0e:2e:61:c7:c8:8c:8c:04:1d:39:
ec:7c:1b:ee:51:73:f2:ea:fd:72:f9:12:d3:a6:e0:df:7a:78:
cf:dc:50:ae:80:bb:ff:63:fe:50:91:22:5d:01:d1:25:13:1f:
9c:b6:4c:99:84:e4:d7:21:5d:ef:dc:00:22:20:60:0e:e2:8c:
90:d1:74:57:4f:b6:53:ae:0c:a0:2f:d3:bf:d8:55:2d:87:61:
2a:b6:93:7e:3d:1e:aa:33:d5:2e:73:2e:b5:17:97:2b:79:ed:
2f:b3:4c:ee:ea:c7:cf:df:74:1d:bb:23:54:a6:6a:ea:87:b7:
25:22:21:7e:c2:d2:27:11:7b:1c:3d:02:41:6d:24:02:63:aa:
e0:d8:88:ec:53:3d:5d:92:9a:1f:2a:3e:80:35:01:5f:43:a6:
2c:0c:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:29 2025 by rpki-client