Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: aN272ugIh6CwejEJjpKp044bc8e3bWjKTWLKqBU5HpE=
Subject key identifier: AF:99:56:59:CA:0F:39:42:45:FD:89:7C:CB:01:54:82:DE:67:C4:69
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 0197B8FCC94EBA39EF26F0994BAA4536FF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 15A4
Signing time: Sun 29 Jun 2025 00:01:03 +0000
Manifest this update: Sun 29 Jun 2025 00:01:03 +0000
Manifest next update: Mon 30 Jun 2025 00:01:03 +0000
Files and hashes: 1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: 3Y1UfMr/qqVUHVajNczMWvcqe33nYZ/Jn+3eX3oacoM=)
3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:c9:4e:ba:39:ef:26:f0:99:4b:aa:45:36:ff:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Jun 29 00:01:03 2025 GMT
Not After : Jun 30 00:01:03 2025 GMT
Subject: CN=af995659ca0f394245fd897ccb015482de67c469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:3d:c3:e8:36:97:a3:ef:c2:29:9a:a8:44:
d4:c8:3a:0d:7f:8d:a8:aa:12:1e:90:d1:dc:cd:c6:
7f:bc:84:96:a5:00:b3:b4:c3:e8:e5:dc:d3:37:d4:
1a:4b:7d:6b:b2:3e:8f:c0:a8:38:88:e3:f9:98:89:
ea:49:dd:12:6f:c1:2f:11:2d:7e:70:88:62:a6:0a:
d9:12:fa:ec:01:53:ed:c4:d1:41:23:6d:33:44:e6:
35:2d:19:3f:9f:19:b5:ea:31:3b:89:56:c7:c8:4c:
23:e7:36:08:b2:0f:bc:76:37:b8:78:3c:d2:49:3a:
36:aa:89:51:c0:b1:89:de:64:59:41:8e:fa:4f:c8:
0f:8a:54:00:a1:7a:80:19:ab:de:40:5d:a4:3d:e1:
85:c8:b4:4b:30:a9:d4:4b:61:bf:cf:97:a7:8f:2f:
cb:f7:fb:0b:64:b6:af:82:a9:6e:c3:c4:6a:14:ce:
82:9f:1c:0e:bc:f3:c5:fc:e8:52:34:3f:8e:4b:16:
bb:8d:de:37:69:19:15:1b:19:0f:b5:44:d4:68:8b:
5b:56:60:a2:fe:e5:a5:fb:82:47:bf:0f:bc:95:34:
64:9d:8c:67:c7:3e:45:83:67:4c:dd:b9:38:a1:ec:
52:a5:00:a3:99:e7:c0:f5:ab:af:89:0e:8e:c1:6f:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:56:59:CA:0F:39:42:45:FD:89:7C:CB:01:54:82:DE:67:C4:69
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b8:20:a3:25:2d:f4:c8:19:61:c0:ee:b6:fe:1c:86:4f:b2:
2e:13:1c:c7:8c:21:eb:db:20:15:51:d4:c9:6e:45:f0:bb:12:
d9:42:1f:b9:14:cd:5c:32:c1:be:fd:61:87:97:e9:6c:4a:43:
97:85:f4:99:d7:4f:e5:6f:26:e7:00:9e:27:4f:63:57:f3:b0:
d8:3a:34:54:e0:c6:aa:e8:66:56:4d:28:a9:38:d2:2e:db:46:
44:0c:cb:5b:bf:22:2e:57:27:af:c6:f5:3d:fe:15:83:a5:e2:
f0:43:ed:b6:95:ec:6d:ad:ac:fc:b1:a2:ad:fe:70:d5:d0:9b:
13:16:31:68:88:fa:b2:5a:f0:45:99:0b:3a:dc:f8:39:17:9e:
8e:70:a9:fc:64:40:00:ad:76:0a:44:71:51:b8:a0:0b:0b:e6:
3a:3c:b1:ce:0b:1e:c8:1c:c2:4e:62:27:d0:d1:d7:2d:5a:0b:
ca:62:6a:94:93:f3:69:d9:b8:f5:ed:e6:71:3b:86:1c:72:0f:
0a:bb:a7:5f:05:ae:4f:49:88:6d:22:69:2e:c6:ba:5d:62:44:
75:3d:24:4e:21:0c:ee:15:95:c1:1b:0f:90:66:59:66:0c:d0:
b9:54:8b:65:fa:6d:64:ef:5a:10:67:87:40:e4:e5:ea:e9:56:
2f:98:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:34 2025 by rpki-client