Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier: Z8B3hVRmi+Iysjz719u2kiWy++xIPTAbJR0CClGW46Y=
Subject key identifier: 67:BE:26:12:24:0D:BD:15:D2:E7:41:EA:54:D3:1D:E6:AD:CD:33:00
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 01963C8A5ED4F64592EAA5C1C39E887CD8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number: 14EE
Signing time: Wed 16 Apr 2025 03:00:23 +0000
Manifest this update: Wed 16 Apr 2025 03:00:23 +0000
Manifest next update: Thu 17 Apr 2025 03:00:23 +0000
Files and hashes: 1: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: KZhvAkNEOGAHhf3iSFRcqkCK3VF3U6GHmJ3xROoFHuM=)
2: id8eO-SAr4HmH_kU9gWG3wDOyMg.roa (hash: QVeP890/1IAEaEOIUM6FuUPhuYx18zEBeNk09Lb1+ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8a:5e:d4:f6:45:92:ea:a5:c1:c3:9e:88:7c:d8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: Apr 16 03:00:23 2025 GMT
Not After : Apr 17 03:00:23 2025 GMT
Subject: CN=67be2612240dbd15d2e741ea54d31de6adcd3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:88:7a:3a:f6:41:e6:b2:d9:65:70:ae:a2:
86:78:f3:40:33:ff:0e:4d:a7:5f:de:37:bf:30:29:
93:08:e3:04:6c:81:9a:2d:7c:4a:fe:0b:f7:76:a3:
7c:38:a2:2d:0a:92:24:51:85:9e:03:0d:e3:83:ef:
12:f9:87:de:dc:bb:7a:e9:2a:52:5f:63:76:6f:50:
cd:ab:97:8c:89:47:67:26:8d:84:dc:a9:b2:70:71:
04:bb:97:4c:a2:ac:4f:69:a4:78:ce:1d:68:1b:1a:
0f:cc:ed:a6:60:bc:ef:38:eb:aa:fd:0b:66:f0:e9:
1e:ef:c5:30:84:b3:0d:da:0b:60:b3:b9:21:d4:06:
33:d6:fe:27:c4:e7:ee:3a:70:c9:a3:ec:01:6d:ee:
13:a3:db:26:ca:42:04:af:aa:0b:a4:a4:0d:2f:61:
97:b5:f2:9b:9e:c2:99:55:a6:97:24:46:31:8d:d7:
05:b7:a7:aa:df:ab:9d:2f:29:aa:95:b9:af:70:bd:
6b:a0:b8:5d:37:0b:75:b2:f9:74:0d:1a:70:c9:6b:
b6:38:88:67:04:15:64:a1:9f:43:e8:0f:86:9e:7f:
d6:48:8a:36:49:a9:54:5a:4f:16:e8:92:44:e6:de:
2f:8b:c2:c6:ab:06:4c:a0:2c:c8:64:d2:90:67:24:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BE:26:12:24:0D:BD:15:D2:E7:41:EA:54:D3:1D:E6:AD:CD:33:00
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:15:af:df:94:05:1c:c0:8a:83:c3:f5:bc:72:ae:32:4b:a2:
ac:ad:4d:a6:36:05:d6:84:32:24:29:7f:a3:80:a0:dc:68:cd:
e8:38:bf:e8:6c:6f:51:75:e0:0c:ba:07:7b:4b:29:32:89:b1:
37:dd:1c:25:ae:aa:37:3a:5a:fb:e4:05:66:f0:b0:60:c0:0c:
6e:65:43:c6:61:e0:cb:de:7b:4c:a0:9f:5f:59:8a:56:f4:cb:
cb:3a:92:ee:b0:12:8e:5d:13:72:00:01:02:85:93:54:4e:75:
f7:fa:24:9e:a0:84:03:09:a8:24:c4:b7:64:f5:36:e5:8a:ef:
bb:62:bc:88:78:d5:b3:b0:c7:22:1e:2c:98:ba:28:1d:5b:29:
6c:aa:fc:c1:e9:69:19:ee:09:4d:cf:9a:48:cf:d8:37:c3:e0:
da:aa:c1:7d:07:1b:35:f9:6b:95:3f:d8:4e:f1:0c:ae:f4:e3:
a7:b3:0d:c2:ba:10:6c:61:de:e7:bf:3f:8e:94:aa:f7:83:ab:
6d:06:44:ba:ba:b4:8e:11:06:e3:26:1a:78:45:bb:61:3d:da:
45:73:11:09:91:09:38:96:b0:20:95:45:73:18:bf:04:86:2a:
0c:e1:ee:56:08:dd:82:2b:54:21:14:8f:0b:9c:1c:f7:c5:84:
09:ba:2a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:22:37 2025 by rpki-client