Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File: elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier: y0O6HYBdRdGa7ZROkRtahkxhHh4NC5+wpvZWASzYxdw=
Subject key identifier: 97:31:5C:1E:56:0C:B7:DF:44:44:85:01:F1:FA:B8:04:8F:BA:3E:E2
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer: /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial: 0197B77C4BC109387D0D7FBAF34F34D14BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number: 056E
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: PW2E3wToMe6TJENQCBoakDyNZ22v7PJHjn/burlqfsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4b:c1:09:38:7d:0d:7f:ba:f3:4f:34:d1:4b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=97315c1e560cb7df44448501f1fab8048fba3ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:63:be:1f:ca:82:8e:80:ce:02:2d:cc:36:
74:29:26:d9:f9:f4:0a:98:92:ca:94:88:f5:c5:4f:
d9:81:ee:42:ee:ad:09:52:f2:06:9d:0b:72:59:0e:
e8:29:c2:77:09:b7:64:a7:41:20:c2:20:92:d0:f7:
cf:19:b0:29:15:56:59:16:3e:5c:df:2d:5f:7b:0e:
91:29:a4:34:dc:a6:28:7f:7f:ca:57:75:ac:d1:6e:
cb:e9:9a:59:7b:cd:ec:2c:31:86:5c:9a:6b:7c:9c:
e4:38:30:ec:51:fe:9a:40:15:c5:4c:75:48:55:3d:
55:4d:fb:07:c4:17:63:bc:9f:8b:90:24:6d:e5:3f:
10:1f:72:1b:68:cf:a4:f3:1b:0a:c0:d6:e0:4e:87:
52:b1:83:99:f8:7f:ee:97:80:45:88:20:7e:e5:47:
90:c1:89:39:12:0f:44:ac:b0:49:12:91:7b:51:8f:
f5:17:c5:6c:68:3e:91:03:08:37:0b:d9:06:b7:9a:
3f:7b:76:05:1b:80:8f:00:44:fc:de:61:06:c6:21:
3c:33:e1:0f:42:f3:3b:f7:77:19:e5:f4:68:22:80:
bc:a9:27:4d:a1:90:c4:5b:dc:9e:25:7b:7b:db:23:
17:7d:29:6e:3d:da:bb:df:17:2d:d4:2d:6b:d9:10:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:31:5C:1E:56:0C:B7:DF:44:44:85:01:F1:FA:B8:04:8F:BA:3E:E2
X509v3 Authority Key Identifier:
keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4f:c9:12:0d:a3:e6:f9:02:e3:e4:fe:7c:9f:19:62:b9:90:
bc:5d:93:46:80:c6:c3:36:11:36:32:66:97:23:bd:1e:51:05:
18:c2:57:eb:21:4b:89:f0:8d:78:bd:98:00:65:3a:11:a8:20:
a0:a9:6a:a9:6a:2d:a8:cb:be:fc:3b:23:b9:15:d0:91:42:e8:
ff:9a:da:88:0f:a7:15:0a:cb:f6:df:b1:ad:75:c9:49:15:5c:
cd:22:69:be:6e:e4:d6:cc:99:2a:cd:c4:8e:9d:42:16:c0:9d:
07:63:d7:11:8a:48:ee:b1:e0:ae:61:d6:25:1a:59:f1:0e:db:
a7:36:75:74:de:f7:c4:70:aa:d6:8b:0c:f1:18:8b:e3:7b:85:
25:b1:ae:ee:22:26:be:00:06:19:25:47:fc:ba:d7:93:f4:d0:
89:bf:dc:c9:5f:03:5e:97:1b:dd:12:05:b6:cd:e8:50:c3:f5:
e0:ce:58:31:0f:d3:a5:b9:60:57:c0:f9:30:c2:9b:38:57:aa:
61:1a:ff:a8:84:d4:66:35:c2:42:2d:26:b9:b9:13:b0:da:22:
4c:08:1d:1e:2d:6e:43:30:bf:73:c0:26:49:97:a4:75:b6:a3:
b8:81:97:a6:b1:6c:2d:3a:2c:20:aa:ea:04:1b:75:58:83:1a:
23:9d:aa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:21 2025 by rpki-client