Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: MX9DL8OMDX2jXo/y7Rzw3q4wJ1V9/6v7KzLRNSELYeE=
Subject key identifier: DF:52:02:97:4D:72:83:D8:C1:71:00:EC:92:CD:83:C7:30:15:FB:C6
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019749685DD8C4A77F48DFF8FCC6D498BBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 11F4
Signing time: Sat 07 Jun 2025 08:01:05 +0000
Manifest this update: Sat 07 Jun 2025 08:01:05 +0000
Manifest next update: Sun 08 Jun 2025 08:01:05 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: fo4hwZ0ubZVcAaGjCmfftUlUy3wvHW75DorsBe1PUME=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:5d:d8:c4:a7:7f:48:df:f8:fc:c6:d4:98:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Jun 7 08:01:05 2025 GMT
Not After : Jun 8 08:01:05 2025 GMT
Subject: CN=df5202974d7283d8c17100ec92cd83c73015fbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:2a:e3:29:af:16:17:e7:d2:ad:3d:46:e0:
9d:d2:57:3b:47:fa:13:04:db:c5:2b:d3:03:ed:d6:
7f:82:a6:7e:cb:98:50:2f:16:44:01:51:4f:fd:82:
b8:be:a3:a2:5d:b8:74:a2:fe:cd:67:ca:ba:08:77:
78:52:2e:c8:8b:bc:2f:80:3c:f8:42:fc:ea:0b:c2:
8e:c4:6f:e6:69:31:90:87:24:a7:9b:f2:46:76:9a:
4d:d2:5e:5e:15:e8:47:30:69:fa:34:62:86:c6:77:
8e:36:45:10:99:85:36:90:0b:d9:37:2a:bc:a6:9a:
1d:a6:28:16:39:f9:a6:23:23:d7:b3:c5:b6:12:31:
85:93:ef:c4:59:67:96:7d:f9:ce:95:cc:31:d6:46:
8d:32:60:e9:67:be:39:5e:8e:a3:d0:63:74:4a:85:
41:df:79:05:05:7f:54:6d:b9:fa:c5:a2:f2:f1:35:
98:0f:58:93:74:9d:91:b1:75:d0:d8:9a:78:e5:0d:
89:ec:dd:4a:8a:8d:df:af:4b:4b:e0:27:82:2a:35:
5c:f9:3b:89:08:d7:11:0b:98:1d:d9:43:61:88:05:
80:e7:cd:30:f4:f8:62:ec:ba:f8:68:07:3a:b0:8a:
80:39:eb:c6:b3:8c:68:da:fc:4b:88:69:bb:31:59:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:02:97:4D:72:83:D8:C1:71:00:EC:92:CD:83:C7:30:15:FB:C6
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1f:40:fd:2e:7e:dd:08:8e:5e:13:3b:59:6b:c7:83:76:38:
31:28:41:79:e8:a6:b2:6b:fa:76:3b:c8:ab:dc:79:bb:d4:c4:
32:9f:30:f4:ad:bd:74:34:13:6b:16:5e:b2:c1:f3:df:0b:f3:
f7:6c:59:85:6e:4b:85:be:a4:ea:50:ef:21:78:05:b7:10:a3:
7e:79:cd:71:49:03:0c:35:a8:a0:ca:1a:9a:0b:91:40:e4:35:
12:85:ff:1a:b2:5f:43:5e:30:98:dc:43:e5:64:23:34:e5:5a:
bd:08:c5:0a:93:a1:61:80:77:44:fd:15:3b:3e:29:dc:65:8c:
3e:d8:27:77:7c:d6:26:85:a8:70:ed:00:6a:a4:6f:0e:1b:70:
0d:fa:18:c4:48:f7:3f:a5:cf:5f:a9:a8:0a:47:1e:c4:f4:c5:
c1:04:0a:bc:57:ac:24:a6:30:68:0e:44:48:82:2a:d0:96:bc:
e9:d3:20:48:28:57:aa:a4:54:07:25:c0:b6:10:51:26:07:74:
fc:68:69:3a:8e:a7:04:c4:02:68:f1:47:f9:db:e4:20:50:73:
6d:37:ad:4a:a7:13:db:2c:0a:08:33:70:39:90:bf:ba:aa:1e:
bf:f1:d7:38:28:b6:c8:d0:b7:3b:eb:51:09:a8:df:d5:2b:45:
f9:d7:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:25 2025 by rpki-client