Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: qRT/SVg3hT0Z31/d6VztGfV0grtdWLwEzY+48R1i15s=
Subject key identifier: 27:67:D4:EB:01:3F:1F:D1:30:9B:FD:FD:24:30:22:FB:02:06:80:79
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 0197B77CE79E30B5DA4A980A16720C918225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 0F77
Signing time: Sat 28 Jun 2025 17:01:45 +0000
Manifest this update: Sat 28 Jun 2025 17:01:45 +0000
Manifest next update: Sun 29 Jun 2025 17:01:45 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: oJs70M2ZWWzdSWz+bZB00AF0HBCCEIutv7wkILAEOKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e7:9e:30:b5:da:4a:98:0a:16:72:0c:91:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Jun 28 17:01:45 2025 GMT
Not After : Jun 29 17:01:45 2025 GMT
Subject: CN=2767d4eb013f1fd1309bfdfd243022fb02068079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:04:4e:ea:7b:a7:12:aa:89:cd:5a:98:5f:
4a:62:75:01:19:d1:63:0e:1e:48:a1:05:d6:e7:40:
4d:4f:ba:14:19:33:3d:c6:f8:2b:bb:6c:f2:92:df:
22:95:21:9c:4d:29:b2:99:f1:26:90:52:2c:f8:35:
b4:f2:fe:b9:b2:80:6b:07:91:c5:7e:0a:78:87:5c:
a8:90:a3:04:e1:97:b7:3c:e4:01:08:35:d0:2d:5f:
7a:db:28:da:3e:9a:a5:c1:3e:e8:af:b1:7e:a3:74:
35:f4:47:68:ff:d6:2d:62:2d:7e:9d:d8:e8:d7:25:
25:98:63:42:f6:75:5a:f0:25:ca:35:7d:7e:e4:0e:
2d:df:a5:db:a8:9f:a4:7c:4b:20:ce:65:be:f6:5e:
19:fa:22:fa:87:28:10:3c:8e:70:96:34:78:3c:fd:
6d:11:83:66:c3:4e:21:d5:01:94:b9:45:85:8e:d6:
72:b3:ec:cf:e2:40:9c:aa:09:73:df:9a:d1:b9:de:
5b:cc:d8:db:c6:27:36:51:f8:1e:00:24:8a:96:ce:
12:fe:39:59:c6:7e:fc:87:fa:2d:4d:14:f1:b9:a9:
be:c0:96:02:a3:ae:c7:6f:e4:40:76:f7:54:2f:78:
7b:5d:2a:69:08:92:c0:3a:f6:43:85:ce:cf:60:1d:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:D4:EB:01:3F:1F:D1:30:9B:FD:FD:24:30:22:FB:02:06:80:79
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:02:fa:fb:84:78:37:1c:97:b1:76:3a:95:f1:65:f4:77:ce:
cb:77:17:f2:96:b8:1e:d1:64:74:b7:a9:df:8d:96:30:6f:75:
cf:b7:74:7f:59:a3:e5:7c:a9:ad:8e:9c:55:d0:9d:a4:75:b5:
08:b3:e5:1a:e4:ef:e3:89:25:da:4f:5f:c7:c2:8a:bf:b7:b1:
b5:b7:65:04:ab:e8:81:41:e7:09:a2:f5:b5:26:c8:01:64:10:
74:e1:45:34:2f:5d:6d:9c:e7:6e:93:37:45:2e:dd:04:f0:e9:
dc:68:c5:84:aa:45:ae:12:4e:d0:15:0d:b9:ca:7f:78:72:1f:
e3:de:17:2a:ea:75:d0:f4:83:cc:02:13:ad:de:da:24:3c:cb:
b6:f3:55:b6:32:8f:34:30:b3:30:c6:c5:43:a6:1f:3a:8e:f3:
a6:d9:e9:51:65:a1:92:bd:c8:7c:6e:7a:24:e4:a1:21:e9:dd:
4a:44:e4:5a:5d:ac:43:f6:d5:93:40:a9:dc:08:88:3a:b3:9e:
ac:de:b0:d6:e8:fb:a0:99:74:09:d2:5e:86:5d:e1:7e:8c:27:
82:dd:56:08:97:f1:c2:c9:01:69:1b:ac:c5:95:30:b1:da:e1:
e9:2a:68:d5:c3:a1:a4:c7:9c:c5:35:0a:8b:37:5f:87:51:de:
23:85:b9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:27 2025 by rpki-client