Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier: jBXttY3wmij4pSoWJamtP9Q79Uf+WQWOnU+5DSVUuSs=
Subject key identifier: FF:4F:0F:B1:F0:5D:2B:8B:09:CC:9B:97:48:95:A8:72:38:45:F7:03
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 01974CD6925A94E132DFA1D4B4CA41D4E27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 00:00:19 +0000
Manifest this update: Sun 08 Jun 2025 00:00:19 +0000
Manifest next update: Mon 09 Jun 2025 00:00:19 +0000
Files and hashes: 1: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: yZ+F0D6i1HNQiSifHevcRSVK2S8RslSnaFls6VWbXY4=)
2: id8eO-SAr4HmH_kU9gWG3wDOyMg.roa (hash: QVeP890/1IAEaEOIUM6FuUPhuYx18zEBeNk09Lb1+ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:92:5a:94:e1:32:df:a1:d4:b4:ca:41:d4:e2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: Jun 8 00:00:19 2025 GMT
Not After : Jun 9 00:00:19 2025 GMT
Subject: CN=ff4f0fb1f05d2b8b09cc9b974895a8723845f703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:10:57:6c:5a:c4:99:cb:38:64:d5:6a:8b:
78:08:ba:0b:c5:40:4a:72:cc:6a:44:9c:d9:ce:84:
73:74:de:73:ec:f4:84:ab:e6:41:be:97:1f:e8:27:
de:e8:48:b8:4d:29:9d:37:e9:cf:3a:dd:c2:c7:78:
22:d7:a1:af:c9:49:18:78:7d:f7:7a:ea:32:82:93:
8b:3f:89:cd:63:bd:aa:00:22:64:87:9b:52:53:6e:
74:ab:52:9b:58:f4:68:10:89:00:a5:9c:0e:3c:aa:
5f:0b:e5:2f:66:58:c8:e9:3e:e9:f4:b7:51:26:24:
1a:d6:e3:34:a0:c5:d7:ba:46:e3:a3:c3:12:e5:60:
86:8d:52:4b:ee:be:d1:43:51:fa:ce:4a:05:03:83:
fd:15:2a:20:b1:43:c9:0e:1a:83:66:ef:94:d9:2d:
64:af:a0:31:b5:dc:f2:9c:a2:0f:7e:41:aa:ab:83:
3e:da:3c:9c:5e:36:61:47:48:b7:47:49:9e:a3:ab:
0e:76:a4:3c:ba:91:fb:d5:57:8d:38:22:93:f8:04:
c8:54:f6:6f:89:2d:02:db:36:6c:24:4b:89:d4:4d:
18:cf:0f:73:e5:94:38:d1:9b:51:3a:9f:4d:20:9a:
bf:e1:9c:d8:89:7a:67:17:60:4d:08:41:b5:7e:56:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:0F:B1:F0:5D:2B:8B:09:CC:9B:97:48:95:A8:72:38:45:F7:03
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:5f:d0:87:c0:f6:11:3d:b2:ba:f0:c6:a6:d6:a7:de:56:
38:64:0d:d8:65:6a:8a:e6:e4:a0:d6:b9:dd:30:c7:7f:f3:77:
1f:38:6b:f2:94:ab:ad:39:85:54:44:99:34:77:ff:54:bf:ae:
4b:3d:ae:8c:98:8b:df:48:de:70:79:5e:37:3d:0d:98:33:75:
ce:d7:4e:58:e4:39:31:7d:14:4e:53:cd:79:4c:84:41:1e:a9:
bb:c1:43:6f:e4:de:69:c9:e2:37:aa:d5:6c:b7:f8:7e:6f:f3:
cc:a3:c0:e2:ca:d9:67:88:c8:56:57:14:f5:32:56:0e:06:27:
5c:e7:a5:48:b5:d8:04:0e:da:3b:26:45:a6:57:53:b1:57:51:
0b:30:2a:78:9e:34:11:3b:e1:a5:ea:89:b2:e2:ce:a9:f7:c0:
51:92:79:fb:42:d0:9f:f4:0d:db:ce:a1:ad:c4:af:de:02:ce:
14:80:72:d4:6f:e7:79:cc:fe:9b:92:de:7a:51:ee:75:c3:04:
ab:8b:ea:67:55:e2:33:ac:b9:14:06:1d:1f:0e:b5:d6:b3:eb:
22:a4:27:72:4d:31:01:97:e9:4d:bf:50:c9:5d:fc:36:07:38:
03:5e:e2:f9:79:65:fe:7e:e2:b8:62:b1:bd:5c:d1:1b:f2:eb:
e7:2b:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:27 2025 by rpki-client