Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: nZMcdB3lp7vqJbaHGxq4egnfyV37CxwHuAIfa1Ojaik=
Subject key identifier: 64:73:68:B7:C0:9F:3F:36:1E:86:57:D8:21:3E:26:1F:73:83:38:9F
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 0197B77C1A60AC660430E9285CCF43F01FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 060D
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: U/BLBeadKdiaeGpY7XtkWbZYKrasyAyp0S3Zg4e4Kf8=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1a:60:ac:66:04:30:e9:28:5c:cf:43:f0:1f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=647368b7c09f3f361e8657d8213e261f7383389f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:c6:4f:15:e3:0a:07:46:f6:72:33:96:b8:
fe:f4:5e:a0:d6:0e:8f:60:62:9f:ac:3d:8a:e0:0d:
0e:ec:fc:55:25:b8:45:45:0f:0f:f1:fc:7d:9e:24:
72:0f:35:ab:ba:63:34:d0:6d:b6:83:32:d8:c7:7b:
0c:f5:45:22:a0:7a:41:66:60:6f:a8:cb:96:0f:4d:
43:5f:d9:40:07:60:81:44:11:45:8d:f4:6a:ad:8d:
0c:dd:1e:fc:6f:b8:fb:cf:91:38:b7:b9:8f:c8:93:
c9:76:58:fc:37:3e:9c:57:4b:ce:d6:9a:e7:7d:02:
0c:7d:94:aa:d8:ed:68:9a:0c:76:00:c7:11:e5:21:
8a:dc:64:39:97:9f:c4:7c:7a:9b:0a:74:28:ac:c4:
e0:13:87:60:0e:9f:cc:af:80:60:88:bc:94:ea:25:
fa:d4:6f:56:22:be:2c:9b:95:38:88:47:4a:1f:94:
1d:20:41:f9:e3:d5:7b:e3:27:74:64:33:92:a7:ba:
8a:90:78:34:4b:fe:ec:82:3f:40:69:25:dd:0c:a7:
f0:5e:13:cb:ee:a7:c5:6a:7f:f3:b7:fa:d3:a1:23:
ca:0e:d3:15:7b:cc:95:55:d3:6c:4b:44:55:c5:6c:
cc:f9:59:18:2c:af:3f:d2:d5:12:a1:f7:83:1f:d5:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:68:B7:C0:9F:3F:36:1E:86:57:D8:21:3E:26:1F:73:83:38:9F
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7e:07:92:15:16:02:ba:a3:9a:e1:f8:b5:55:72:32:3b:53:
f4:39:1e:b9:d1:07:65:f6:7d:96:42:6a:42:c4:c4:60:76:84:
76:00:64:64:50:f1:c7:18:b1:db:3b:16:e9:f0:49:77:f0:6a:
e1:e3:cf:d8:65:ba:b4:85:4b:15:13:f9:da:37:e4:05:f9:8e:
d1:05:a2:b9:6b:62:d1:39:8e:af:3b:5b:4a:4e:c2:89:84:0c:
4c:a0:60:de:66:a9:17:82:50:e5:6e:cf:fd:08:5a:1f:68:cf:
71:22:60:a6:da:6b:58:8d:26:50:cc:e9:12:c6:de:61:6b:bc:
4f:2e:2b:e8:87:2b:8c:0c:fe:8f:2a:d4:72:1a:5b:60:85:67:
da:15:9f:f1:98:27:32:81:c9:7f:c1:b4:ae:b9:e3:7e:38:be:
f9:7c:51:90:8f:ed:22:05:d0:82:33:f9:c1:79:70:4d:e8:01:
86:a5:0d:b7:c6:c2:0f:00:05:5a:d1:2a:c2:1c:88:a9:75:df:
10:3a:b9:02:4e:53:89:66:0a:b4:5f:2c:82:73:75:4d:89:75:
7b:28:7f:80:c0:af:b9:62:80:3f:26:3e:31:9f:ca:cc:fd:ae:
9e:63:a4:ed:a9:16:a5:a6:69:f7:4b:f8:ef:d1:c6:d3:70:3f:
10:c7:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:33 2025 by rpki-client