Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: s0wqrz2VqSaI9h6peG0A2Hmjhe9y+G5Bz1NRrbf2bIc=
Subject key identifier: 7E:F7:04:FF:FC:3D:60:55:CF:D7:C1:7C:EA:B0:82:3F:92:C1:C3:5A
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 0198D54E7BE20D92910C1D4121D8478D42F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 06A1
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: nStHB84BKIxTMRr6oVtdVNkZT6c87AETZJaDyLVTMy0=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7b:e2:0d:92:91:0c:1d:41:21:d8:47:8d:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=7ef704fffc3d6055cfd7c17ceab0823f92c1c35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:43:f2:83:79:d3:27:a4:1e:16:51:9c:26:
4f:11:66:54:84:84:1e:d2:95:2a:8b:cc:11:fd:87:
f6:58:d7:53:32:47:ff:51:1e:ce:21:91:89:c7:bb:
89:3a:85:f0:64:72:a3:b9:7d:ca:90:75:f6:37:96:
08:6c:44:16:6a:66:c9:b1:90:bd:ef:8b:cf:3f:bf:
80:61:b8:9d:77:1d:35:d5:61:d9:29:96:a1:b8:ea:
cc:71:06:cc:21:b8:c8:68:b9:88:88:42:aa:74:50:
45:df:d7:fc:c5:6a:56:53:d7:9f:ad:06:e8:7a:35:
37:29:3a:80:89:32:ab:c5:76:8e:3e:e3:a7:89:f8:
4c:2e:03:1d:0b:2b:60:19:43:3d:97:7e:7c:ef:ec:
55:ef:75:1c:2b:3d:fa:17:31:20:15:11:9d:de:49:
5f:22:48:c0:56:c8:ed:70:38:c8:2d:0c:a3:a5:43:
45:2a:ae:30:08:54:34:65:a4:b4:7e:a3:ef:eb:27:
74:c4:b4:50:6c:94:ce:c1:2e:fb:ab:0d:79:d3:22:
c9:23:7d:81:de:8e:86:65:7c:7f:15:44:ae:8f:33:
33:99:d2:9b:1e:20:b9:2c:56:ef:69:f7:a1:1b:67:
dd:40:21:f3:6b:1a:51:76:8c:9a:c8:44:c8:3f:f7:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F7:04:FF:FC:3D:60:55:CF:D7:C1:7C:EA:B0:82:3F:92:C1:C3:5A
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e4:12:b1:c9:62:e3:67:1b:e8:74:7d:75:3b:a9:1e:b2:81:
b6:0c:01:26:b3:e6:9f:54:22:59:bb:5c:80:71:2d:03:49:f7:
42:c2:7f:73:7f:6b:33:95:c7:e7:79:52:d1:8c:a8:a3:6c:f9:
1c:74:86:3f:81:67:35:d1:59:55:91:ad:e5:c9:f0:c9:97:0c:
54:eb:7f:d2:a2:c7:13:8c:0f:89:9e:29:98:af:f8:42:45:c8:
4c:b4:30:ca:7c:28:68:0b:f7:2e:b6:e4:63:5d:ac:c3:48:a2:
30:63:75:d0:6e:be:a5:59:43:0c:f9:b9:a5:54:98:80:09:50:
14:c7:63:f4:c1:f9:cf:e2:96:19:1b:62:74:d4:e9:4f:7c:c5:
05:b6:d0:56:67:51:67:4d:2a:65:5c:2e:8c:62:4a:90:e0:9d:
96:b7:21:c8:13:42:b3:e1:28:ca:42:2f:ba:cb:50:3c:d9:19:
93:23:22:bf:0f:15:56:c9:45:51:09:1e:47:a8:d7:b2:21:ca:
f5:e1:75:94:d0:ad:0c:04:16:ff:33:ed:08:88:ba:fe:01:08:
3c:73:40:ac:63:f1:33:92:5b:9a:60:f2:59:f3:c0:97:15:99:
07:03:41:5e:0a:bd:c5:2b:8e:12:42:3e:1c:82:50:93:ee:fb:
8b:24:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:16 2025 by rpki-client