Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File: eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier: 3OwVoceHIj9gMdBrSorkqGnkXO+7Kjo2r9kNagmgX4E=
Subject key identifier: B0:33:82:CD:2B:BF:22:DB:90:77:46:4D:5E:34:08:BE:4B:36:55:EC
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer: /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial: 0197B70EC2E09D902B3C49B109DB76219C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: Cjmxj5D9IdRISpiGMmUVXC65vA6uHzHUTbrs1i2vwkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c2:e0:9d:90:2b:3c:49:b1:09:db:76:21:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=b03382cd2bbf22db9077464d5e3408be4b3655ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e2:d8:c1:f3:c8:bb:53:a3:cb:6d:d9:6c:41:
aa:bb:86:dd:81:85:2b:7d:f9:6f:99:3b:0f:f4:02:
53:96:06:31:05:14:a6:51:e4:33:bf:f8:84:b7:10:
ff:3b:a7:68:d1:c7:97:9d:bd:e5:8b:c5:78:db:97:
6d:1f:a6:f1:07:5f:e9:f1:16:e4:71:28:81:b2:a5:
09:50:9e:b5:ce:73:12:bd:7e:22:52:a7:7f:6f:46:
07:51:96:49:ff:d6:10:4f:67:29:c6:e9:ae:e0:4c:
77:11:14:33:aa:d6:4d:3f:b4:ee:93:17:42:0d:b6:
1e:6d:79:ed:0a:cb:9f:a5:14:14:64:8c:6f:e6:1a:
90:3b:74:f7:02:43:14:e4:8d:9b:67:a3:8a:23:a9:
6c:ca:76:90:17:6e:2d:51:8e:d5:4d:e5:7b:59:b6:
60:6c:ba:bd:8f:51:d7:f3:8f:9c:98:d5:6c:af:f2:
09:fd:d8:55:a8:da:95:56:37:ba:66:7c:73:06:6e:
37:a3:c5:dc:b1:dd:53:60:9f:ce:47:91:b0:ec:12:
02:c1:df:0e:f8:7d:c8:04:e3:7c:7c:ab:3c:2a:a4:
87:5c:c3:8d:2d:37:33:c5:bd:fc:55:3e:3a:27:87:
cf:74:85:92:38:b8:a9:f6:9c:20:0e:0a:28:ab:99:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:33:82:CD:2B:BF:22:DB:90:77:46:4D:5E:34:08:BE:4B:36:55:EC
X509v3 Authority Key Identifier:
keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:45:37:2a:67:3c:ac:a7:2f:52:b4:a2:46:5d:e5:67:c1:a7:
91:0e:74:46:57:ae:aa:23:bc:11:2f:fb:cc:40:a5:6a:9f:5f:
32:c0:70:67:70:ba:dd:83:4d:79:83:b8:73:01:bb:da:9f:77:
92:ec:1a:26:5f:ab:07:94:74:36:f7:04:8d:77:3a:c1:13:fa:
36:be:de:49:57:0f:79:04:d4:85:22:cf:93:65:46:17:c4:cc:
d2:e3:05:44:ce:44:78:6a:47:7c:e9:ca:2e:12:bc:b0:58:74:
25:fb:b9:69:9e:e5:8e:55:d0:93:3d:73:73:78:c4:68:63:fd:
0b:e8:f2:da:0d:c5:65:0c:db:58:8b:57:cf:e9:18:a9:f9:30:
b0:fa:51:f2:a4:1a:d7:f5:72:5f:d4:4c:eb:d1:61:fe:96:43:
96:1c:99:90:89:f2:bb:f7:5e:4e:31:05:d7:de:96:ca:2d:38:
9a:23:b9:66:f2:1f:92:06:c7:fa:e7:13:25:fb:33:28:d1:db:
7d:19:7f:7f:ef:67:63:b3:26:fe:df:a6:5e:27:27:b9:85:3f:
87:b6:3d:80:e6:7f:4a:ba:c8:ad:3e:3c:c0:66:d8:95:08:de:
5b:ae:ed:31:86:09:ef:85:d3:ed:0f:90:6a:d6:ac:3f:fe:8f:
e7:a7:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:58 2025 by rpki-client