Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: KlvtoqRjT0SW37OLbifhyLon3E0IErCZ3eEIYHCA71A=
Subject key identifier: 7D:27:EA:93:C0:08:13:E8:13:3A:5D:8F:DE:C8:C6:EE:F2:05:02:4E
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 0198D54E1B6BFEF91AD31D54DC65E882B319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 100B
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: GUKIbHcNTngz2xrpc2YROMj5fqlYCPka5639g7BOXw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1b:6b:fe:f9:1a:d3:1d:54:dc:65:e8:82:b3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=7d27ea93c00813e8133a5d8fdec8c6eef205024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:a5:89:09:a1:59:87:80:52:18:e8:0c:f6:
04:49:49:bc:d9:ae:e8:3c:8d:4e:59:79:0a:69:c5:
b4:7c:25:d3:f5:1e:cc:64:ad:f5:2b:22:e4:89:0c:
15:da:f5:ca:b3:b3:7f:ca:25:57:4e:89:38:e4:45:
a5:97:c1:ba:88:f1:ec:c2:4d:6e:46:6d:05:ca:38:
8e:00:46:e2:d1:25:fc:1b:dc:4c:4a:8c:cc:45:15:
94:05:02:60:b8:aa:83:98:83:11:d7:09:f1:83:bb:
19:c8:26:26:2f:fc:33:9a:1f:75:f2:81:8f:5a:cf:
91:9e:6a:b0:91:10:16:44:5c:d5:c6:04:14:c8:11:
34:41:ba:b1:89:df:a9:51:2e:41:46:da:13:fa:a2:
6b:a5:24:91:09:28:e3:b3:32:b2:be:99:9a:08:72:
f6:0a:cd:7d:7d:c4:86:76:55:f4:53:df:bb:ac:36:
34:4e:20:da:a0:2f:bb:e9:da:37:c9:de:ce:7a:33:
66:75:30:f7:ef:98:ff:55:fd:c9:95:3d:fe:5f:5b:
fb:e5:fa:9d:b8:b5:03:8e:3a:34:a5:5a:f7:ae:c9:
26:40:06:72:1d:87:53:5a:f6:dc:5a:08:e9:2e:20:
a5:80:11:e2:9a:ad:a2:77:de:c6:ab:9a:ba:1d:86:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:27:EA:93:C0:08:13:E8:13:3A:5D:8F:DE:C8:C6:EE:F2:05:02:4E
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:11:09:45:56:5b:e1:f9:e9:ec:48:1d:0b:44:b9:e7:b1:b3:
32:6c:64:ea:ae:43:9f:ce:c7:08:9b:50:c4:5f:d2:3d:92:73:
e1:34:81:6c:04:ab:74:f8:5a:c2:39:4e:95:e0:49:38:ac:40:
bb:4c:24:9b:08:80:bb:68:de:70:5e:6b:01:e4:15:b1:24:b8:
a5:10:27:1e:d8:82:c9:7f:2e:77:67:a7:d7:5e:ad:a5:b0:24:
66:7c:cc:e9:ee:33:19:c2:c1:32:ef:b4:a9:12:64:8d:77:14:
96:c1:9f:80:68:71:82:5c:7f:0a:43:a2:8f:46:b5:2e:9f:01:
6b:9c:f3:f2:c2:fc:d0:f7:85:10:02:45:fc:68:40:c4:59:1f:
24:01:58:7b:ef:a3:22:98:29:e0:c0:f5:dd:6c:2f:fd:25:1f:
28:2a:c3:23:d7:24:7f:70:93:4b:dc:c2:78:83:3d:fe:0b:73:
0d:f0:1c:e5:33:42:78:c9:c1:cb:82:44:41:f2:22:b4:e9:72:
fb:cc:63:ab:ad:9d:d7:c2:54:9d:28:1b:c4:ea:e8:6b:34:72:
a9:38:28:3a:9d:25:26:0b:0e:a1:b3:cb:fe:a1:0f:4f:51:9a:
0b:4a:96:a9:7a:c6:40:b3:85:ed:0a:5b:40:b3:60:41:1b:36:
71:4c:b3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:20 2025 by rpki-client