
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: u5VjJDgiCY/OSf8t9KFBb6IK2jf1AVwm1shtxyDFMUU=
Subject key identifier: E9:F6:BB:8D:A7:D7:F7:D1:23:02:1F:36:57:AE:67:16:A4:E3:4D:87
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 0197B5FC6D4B615C752B62D3F6EE575EB4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 1533
Signing time: Sat 28 Jun 2025 10:01:48 +0000
Manifest this update: Sat 28 Jun 2025 10:01:48 +0000
Manifest next update: Sun 29 Jun 2025 10:01:48 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: cNgytCRrIOVMXblaqzzScbluW98mC50GFaXEfvtckCQ=)
2: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (hash: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:6d:4b:61:5c:75:2b:62:d3:f6:ee:57:5e:b4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Jun 28 10:01:48 2025 GMT
Not After : Jun 29 10:01:48 2025 GMT
Subject: CN=e9f6bb8da7d7f7d123021f3657ae6716a4e34d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:15:3a:35:fe:3c:0a:8b:e4:7b:c0:9e:53:
e7:41:d0:b6:4c:6d:9c:cb:e9:66:5d:b3:15:67:ad:
61:92:be:27:0e:79:27:3a:76:2b:cb:e6:b2:c6:bf:
71:ed:79:be:34:11:2b:22:92:c0:8d:a9:fc:98:93:
0d:6f:e7:06:25:03:54:7a:9e:ba:67:a9:10:68:48:
26:15:bd:79:95:31:ac:bd:54:e8:64:48:22:a2:bf:
fd:8c:10:a6:23:b8:03:ed:8a:69:4a:4f:33:41:0d:
92:be:d5:93:19:6b:49:7c:e0:15:b3:9d:89:f8:6a:
53:9c:98:78:37:d2:a6:01:4d:45:74:a9:4f:ee:da:
8c:8f:68:65:75:39:42:f5:14:37:b3:f3:4d:78:5c:
c8:d4:1d:4f:bd:95:b8:06:7a:21:c6:c6:6d:32:5d:
80:cb:4d:25:27:9c:cb:92:c9:c4:9f:f1:05:80:99:
59:3c:c6:d9:8c:3f:11:d5:96:12:f2:fa:55:cf:64:
65:1d:b6:46:ac:8b:66:46:24:ab:b6:39:a3:3b:c0:
09:85:46:e5:2a:4c:cf:65:45:df:74:c1:b0:32:84:
aa:cf:b0:16:b7:55:a7:b0:00:0e:5c:d9:90:91:f9:
4f:02:b8:d8:87:87:34:08:70:00:88:3e:67:0a:ce:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F6:BB:8D:A7:D7:F7:D1:23:02:1F:36:57:AE:67:16:A4:E3:4D:87
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:09:b4:ff:9a:ce:8c:43:29:da:2b:7b:23:5c:23:34:a2:7d:
ab:68:e7:10:00:9c:ec:db:83:09:5a:42:31:e2:e8:e6:ea:8f:
97:f0:3c:7d:74:e1:3e:e8:7f:c0:23:d0:9f:e7:5c:87:03:25:
c3:73:69:3c:a5:12:1b:a7:2e:36:3e:f0:0b:21:06:a2:05:bc:
6e:01:d5:18:d6:51:29:67:08:38:aa:75:95:39:f5:4c:0c:80:
34:83:bd:e6:dc:c3:ce:ca:5a:52:6f:81:c2:92:b5:d7:76:73:
ca:95:af:6c:4d:61:ff:ad:99:16:13:4d:6d:19:a4:56:92:9c:
94:cd:bf:67:2a:6d:29:d6:a3:c3:b7:33:77:45:c4:69:44:a0:
03:5a:16:f8:c6:aa:1e:07:e8:63:d0:b4:0f:f5:7c:44:4e:c0:
fe:fa:02:0f:70:8f:27:27:b0:89:cf:16:6d:b0:61:54:3e:c3:
75:77:e6:fb:d3:f3:36:12:ba:af:59:59:1b:9a:49:55:57:3e:
1e:81:eb:9c:08:fb:46:f5:af:b9:42:7b:1b:f5:6a:45:d6:a2:
4b:1e:aa:ca:b2:2a:86:ea:55:86:6a:e0:b5:24:65:92:af:6e:
17:44:43:5d:8a:b3:55:c4:2b:d1:3c:ca:c7:98:61:28:14:d7:
33:10:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:47 2025 by rpki-client