Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: CNuDHOJBmiQ5JIlDioMOSPNSeOg5gFNDorpzdUQGAbI=
Subject key identifier: CC:50:88:D3:14:96:24:8E:9F:25:A4:A1:2C:BB:ED:57:AB:93:3C:87
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 01963EE6F4DBAE8141CEDF564739B5389356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 116A
Signing time: Wed 16 Apr 2025 14:00:45 +0000
Manifest this update: Wed 16 Apr 2025 14:00:45 +0000
Manifest next update: Thu 17 Apr 2025 14:00:45 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: HHHOwGFLAHMxaUJX08HP7tPTJ8qZfOI60Exwz4h/SSk=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:f4:db:ae:81:41:ce:df:56:47:39:b5:38:93:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Apr 16 14:00:45 2025 GMT
Not After : Apr 17 14:00:45 2025 GMT
Subject: CN=cc5088d31496248e9f25a4a12cbbed57ab933c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:54:13:d9:04:9b:c7:a6:4e:0f:ba:f9:43:
db:a2:85:ff:dd:83:4a:0f:b2:57:2e:fb:33:3a:f6:
f1:0a:42:0b:f6:36:58:b1:32:a4:8c:3a:53:ab:1b:
41:13:ec:97:d6:ac:38:27:0f:c9:04:1f:50:9a:c9:
0e:14:1a:81:8d:a8:b5:fc:a5:f7:0e:2a:f5:bb:77:
e6:36:7f:24:cf:bd:bd:e8:aa:15:7b:9e:fc:57:36:
9a:65:09:d1:38:8d:eb:c1:e7:e1:db:eb:f8:71:6f:
09:62:3e:79:35:4d:6c:17:fd:07:de:3d:21:b2:f8:
51:ad:bf:15:53:6a:3c:88:7b:ce:0a:59:1e:4b:2c:
40:f5:00:38:1c:ff:83:24:07:51:85:8e:e1:44:f3:
fc:b7:f2:ea:0b:72:20:c3:f2:e1:6a:10:aa:fe:79:
b0:c8:4a:0e:44:0e:36:e7:43:4a:bc:5f:c5:1f:08:
9a:5f:2b:20:ec:a0:98:b9:e8:cd:c7:8a:37:ce:a5:
da:61:55:dd:36:14:5a:d8:d2:9b:a9:bf:d1:dc:cf:
b4:e2:c0:10:0f:59:44:d9:c1:df:40:1c:af:9e:3d:
5e:ae:ae:08:ff:c6:93:91:20:79:f1:40:75:a5:d4:
e4:b2:4e:dd:fd:73:0f:87:67:6c:c9:bc:e7:bb:a8:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:50:88:D3:14:96:24:8E:9F:25:A4:A1:2C:BB:ED:57:AB:93:3C:87
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:36:da:67:84:c7:f2:92:01:d5:b3:28:8f:f4:69:ad:85:df:
7b:28:d5:c8:ff:79:e7:d6:3c:7f:7a:04:69:53:11:0d:77:68:
08:ca:83:ec:f8:c9:5a:b8:51:0f:7d:b5:ea:2b:61:86:29:38:
21:a5:7b:36:9a:83:d8:b3:c3:40:4f:35:50:13:24:6f:b9:c1:
fe:3b:9b:96:ce:7b:24:77:10:ca:3f:7e:23:2c:a7:4b:34:54:
08:92:61:f2:7b:88:ac:e5:c1:dd:a8:2b:14:a2:60:01:f4:2a:
19:c4:14:84:71:f0:2d:fd:e6:db:b0:95:ff:86:62:90:9b:ec:
94:c9:c8:62:87:1a:90:37:6d:b5:55:c7:b3:96:c9:75:b0:ed:
29:42:0b:ef:d0:db:b6:7a:8f:62:28:01:e8:f4:2b:3f:37:69:
f2:0e:fa:bf:e4:12:09:55:47:3d:3f:56:a6:6a:78:41:8e:46:
2c:d7:a8:46:40:1a:fe:50:d4:a4:2b:90:0a:3e:52:55:85:b9:
19:91:2f:e2:2f:30:59:ef:77:ed:17:67:b6:61:31:4f:b5:2a:
1b:37:e6:61:aa:9b:79:8d:66:2f:03:09:c3:bb:47:28:f3:b0:
03:e7:c2:83:03:d4:bb:c6:06:f8:90:d5:c0:6f:73:ad:e7:8a:
c0:c0:5f:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5vTbroFBzt9WRzm1OJNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFiMzQxNTNkYTBkNWQxMjFjZmY0MzI1OWZjZDllM2Ri
ZmM3ZDQwHhcNMjUwNDE2MTQwMDQ1WhcNMjUwNDE3MTQwMDQ1WjAzMTEwLwYDVQQD
EyhjYzUwODhkMzE0OTYyNDhlOWYyNWE0YTEyY2JiZWQ1N2FiOTMzYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dFUE9kEm8emTg+6+UPbooX/3YNK
D7JXLvszOvbxCkIL9jZYsTKkjDpTqxtBE+yX1qw4Jw/JBB9QmskOFBqBjai1/KX3
Dir1u3fmNn8kz7296KoVe578VzaaZQnROI3rwefh2+v4cW8JYj55NU1sF/0H3j0h
svhRrb8VU2o8iHvOClkeSyxA9QA4HP+DJAdRhY7hRPP8t/LqC3Igw/LhahCq/nmw
yEoORA4250NKvF/FHwiaXysg7KCYuejNx4o3zqXaYVXdNhRa2NKbqb/R3M+04sAQ
D1lE2cHfQByvnj1erq4I/8aTkSB58UB1pdTksk7d/XMPh2dsybznu6iyxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxQiNMUliSOnyWkoSy77VerkzyHMB8GA1UdIwQY
MBaAFHqRs0FT2g1dEhz/QyWfzZ49v8fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTkt
NGRjYjIzZmRiMDZhLzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTktNGRjYjIzZmRiMDZh
LzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjbaZ4TH
8pIB1bMoj/RprYXfeyjVyP9559Y8f3oEaVMRDXdoCMqD7PjJWrhRD3216ithhik4
IaV7NpqD2LPDQE81UBMkb7nB/jubls57JHcQyj9+IyynSzRUCJJh8nuIrOXB3agr
FKJgAfQqGcQUhHHwLf3m27CV/4ZikJvslMnIYocakDdttVXHs5bJdbDtKUIL79Db
tnqPYigB6PQrPzdp8g76v+QSCVVHPT9Wpmp4QY5GLNeoRkAa/lDUpCuQCj5SVYW5
GZEv4i8wWe937RdntmExT7UqGzfmYaqbeY1mLwMJw7tHKPOwA+fCgwPUu8YG+JDV
wG9zreeKwMBfsg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:23:41 2025 by rpki-client