Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier: pyWn7ZQB189uOQ+bXUH8eSPg/4oqbdHx5N2Lk4lsQuw=
Subject key identifier: 53:EE:00:F1:14:17:FF:16:97:CF:DD:45:41:53:A7:50:0A:50:6C:6C
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 01964C6B7F5811D675C6F896E21E3A397550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 05:00:35 +0000
Manifest this update: Sat 19 Apr 2025 05:00:35 +0000
Manifest next update: Sun 20 Apr 2025 05:00:35 +0000
Files and hashes: 1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=)
2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=)
3: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: XZkd85/Wbd4Y5rIWpKLo8iHiqmmac6vUy+N36BfrPYk=)
4: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=)
5: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:7f:58:11:d6:75:c6:f8:96:e2:1e:3a:39:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Apr 19 05:00:35 2025 GMT
Not After : Apr 20 05:00:35 2025 GMT
Subject: CN=53ee00f11417ff1697cfdd454153a7500a506c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:8f:be:37:44:46:48:ef:79:08:06:c6:6a:
68:75:69:a3:b0:88:f2:d4:41:d8:0a:e9:33:0e:9d:
a0:e3:e2:ba:c5:06:34:18:fa:04:b5:48:8f:aa:e5:
25:b3:6f:c4:59:1e:ee:af:79:b5:b7:12:65:a2:42:
fa:06:de:3b:bb:9e:34:ff:46:f4:e7:81:4f:69:81:
0d:99:ea:b2:f3:8f:fb:4a:82:db:b1:ed:dd:58:cb:
6b:da:10:0a:21:fe:51:f1:61:52:11:f3:0f:4c:a4:
36:d1:af:14:3c:65:65:5a:01:73:54:f5:4a:18:14:
0a:12:83:2c:9a:e3:22:21:e4:2f:33:89:d1:99:b9:
0a:17:4b:e7:31:d8:16:bf:26:8b:93:91:a5:26:a3:
10:d4:c8:b4:07:01:af:11:ef:7f:62:b3:d3:39:2e:
85:d7:09:c4:30:5f:c4:23:19:21:21:4f:50:34:9a:
68:a8:c9:b7:77:e3:3c:08:b8:1b:13:42:6e:2f:2c:
ad:8c:f5:28:5f:6d:ca:60:00:2c:78:1e:28:4b:20:
b0:a2:a3:89:16:f2:4e:11:2f:5a:b7:36:30:35:ae:
95:d8:da:e0:3c:22:52:43:29:bd:e3:f6:c7:d5:50:
f9:cd:e7:74:8d:85:41:4a:49:94:a2:db:82:36:79:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:00:F1:14:17:FF:16:97:CF:DD:45:41:53:A7:50:0A:50:6C:6C
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:74:d2:50:53:1d:4a:b8:39:4a:5e:68:8c:af:75:84:73:a5:
db:a3:6a:b7:b3:cf:d8:94:af:47:01:91:bc:0c:78:a3:ea:02:
41:69:44:ca:ac:6e:57:50:4a:2a:11:cc:c1:37:2b:48:5f:93:
0c:2b:83:17:75:83:dc:35:40:1f:f6:88:00:19:d2:af:b1:a4:
86:3e:63:3b:27:fa:64:fa:c3:0b:e2:ae:63:d1:a2:38:24:4e:
1e:b3:cc:37:73:84:88:b5:f1:b3:7a:d2:c9:b3:05:ca:4d:e9:
cc:96:b6:ea:b8:9f:ac:9d:fe:a6:f5:63:c7:f8:96:f7:de:85:
fc:95:31:dd:a5:67:c4:5c:04:86:47:63:cd:db:aa:dd:76:88:
ac:95:0d:13:39:f8:85:3a:47:c6:bc:32:ae:00:f6:4f:23:5b:
ca:e6:89:58:0e:ad:74:14:7b:54:60:61:1a:e3:cb:6f:50:27:
48:4f:1f:c7:31:04:ae:2f:08:5f:13:fb:f9:df:b1:ca:e9:c8:
6b:3f:47:35:ce:ee:b1:45:26:6f:4b:0b:a7:87:15:f0:5e:0f:
bd:65:34:39:c2:58:03:67:0e:d0:91:df:75:30:2a:72:53:de:
9f:37:e1:55:8d:24:5a:4f:ea:5f:91:ce:a6:0e:78:a3:0f:f8:
e4:c3:36:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:31 2025 by rpki-client