Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier: zWuivSruInuQdtGbqzHPUVJt5UyHXgBCF3/Qo9lx9/4=
Subject key identifier: A2:93:65:C1:01:60:A3:BE:D1:89:1F:21:36:A3:76:45:F8:C1:A1:A7
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial: 019659B93E7CB6B64AC0E2DE43A8BE4DBABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number: 0A9F
Signing time: Mon 21 Apr 2025 19:00:34 +0000
Manifest this update: Mon 21 Apr 2025 19:00:34 +0000
Manifest next update: Tue 22 Apr 2025 19:00:34 +0000
Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: 40753NU+6LLlo99G07p/cMyHpK4h2nyEVZF26cFEgKg=)
2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:3e:7c:b6:b6:4a:c0:e2:de:43:a8:be:4d:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Validity
Not Before: Apr 21 19:00:34 2025 GMT
Not After : Apr 22 19:00:34 2025 GMT
Subject: CN=a29365c10160a3bed1891f2136a37645f8c1a1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:54:2d:f4:f0:3b:09:f6:3c:b8:85:0f:cc:
d1:f7:3b:5e:d4:91:a1:bc:4e:e6:73:9c:71:b3:cb:
b0:43:bb:d2:2c:ad:6b:a0:ac:7f:50:4e:c5:b3:c7:
1f:1a:d9:44:45:c3:2b:83:4e:56:f2:b1:35:ad:18:
8d:f7:0b:ad:2b:f8:77:d6:89:b8:fd:d7:0b:8c:9c:
4e:c3:c2:da:25:d1:f0:bf:48:62:0c:b4:ef:f7:aa:
1b:aa:15:de:ef:36:bb:bc:f6:39:40:17:43:09:e2:
b5:00:3e:2d:55:34:60:aa:81:92:78:3e:dd:7f:69:
9f:aa:0e:bb:c2:e5:2d:52:e2:3c:8a:cb:db:21:99:
89:e0:50:41:d3:30:85:53:f4:96:ce:e6:31:e3:48:
74:75:0d:df:82:82:3b:6b:e0:f3:01:1d:82:81:86:
31:15:33:1d:b3:07:0d:24:dc:cd:28:0f:e4:39:da:
1d:34:73:8c:12:b3:a3:37:ad:93:0b:0b:d3:b0:86:
47:f0:80:20:53:25:56:3f:5e:a4:2e:20:67:10:4e:
97:aa:17:15:65:de:d1:c8:98:e9:7b:6e:a6:0a:b5:
be:16:38:15:2a:c8:c6:9a:d1:86:58:3a:13:0e:b8:
c9:f1:d0:41:e8:30:85:bd:91:41:f8:c5:ae:fc:a0:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:65:C1:01:60:A3:BE:D1:89:1F:21:36:A3:76:45:F8:C1:A1:A7
X509v3 Authority Key Identifier:
keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cb:32:02:1d:36:9b:fc:e1:f9:d0:82:34:0c:15:29:84:0f:
e7:b0:6f:b3:f4:98:cf:c5:8f:b6:48:6e:8a:cb:89:6b:3c:fa:
83:11:16:23:43:62:b0:a3:d4:41:86:fe:61:e0:d8:9d:7e:fb:
57:d3:20:b5:a5:8d:16:cc:4e:97:fe:35:d8:4e:38:69:b5:b6:
89:1e:ed:45:ed:28:2d:8e:c2:f2:e9:8d:b1:e7:f5:ca:16:7c:
34:89:f4:f5:31:4d:b1:fd:36:fa:aa:16:83:44:4e:63:a3:d8:
a0:ef:bc:3f:8f:e2:a3:9d:35:14:e7:74:27:02:ce:a1:31:c2:
55:1c:2c:d6:78:18:78:f7:4b:f7:64:b0:3f:93:45:1f:b3:15:
3d:c6:4a:b2:c2:be:7b:75:4e:c2:40:c4:b0:1a:69:25:d8:4f:
51:14:c3:70:33:4c:d2:7f:27:e3:33:aa:4e:a4:6b:ab:6d:c5:
79:79:f7:01:d0:e3:ff:ea:41:6e:ec:b1:f1:83:94:02:85:77:
d1:6f:f6:c1:06:9e:ed:0f:2d:29:03:ec:e7:91:ce:aa:84:30:
f2:e6:72:15:6d:db:6a:98:3f:91:fe:91:2c:57:6f:67:b2:21:
07:a2:aa:60:e7:07:66:51:07:ad:32:f8:6c:e9:61:fc:65:af:
86:33:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:30:29 2025 by rpki-client