Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: IHIdMaUEoXZbp1v+AU3KbTxxq6Tv/cPD7KH/6wpzeAo=
Subject key identifier: 92:01:93:E0:7E:E6:5E:69:14:21:9C:4D:5E:83:E2:A8:19:D5:CD:E9
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 01974AB1D532AAD9FC9D893D743CAE7BE237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 14:00:57 +0000
Manifest this update: Sat 07 Jun 2025 14:00:57 +0000
Manifest next update: Sun 08 Jun 2025 14:00:57 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: j4j5HhjiZMZhTaPVvGbbaNghL94xGYRGZbJlRd0DrJk=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:d5:32:aa:d9:fc:9d:89:3d:74:3c:ae:7b:e2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jun 7 14:00:57 2025 GMT
Not After : Jun 8 14:00:57 2025 GMT
Subject: CN=920193e07ee65e6914219c4d5e83e2a819d5cde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:8c:79:c5:51:e6:ea:7e:a0:55:59:29:e8:
7f:f4:14:7a:e5:22:4e:6a:96:3a:61:13:32:1a:d7:
b4:91:74:7b:36:a6:70:af:4c:ab:b5:41:09:98:07:
85:6c:80:77:3a:08:3a:57:ee:10:1a:d3:b1:0e:d1:
3c:88:19:c3:82:24:3e:f3:39:c8:07:10:b7:e8:4f:
41:b9:08:dd:9e:d3:90:31:fb:84:c3:e8:b2:94:67:
cd:33:f8:90:44:5b:c3:9e:27:10:1f:7d:41:d5:b6:
a1:c9:cd:6c:86:32:bb:38:83:58:58:20:78:b9:ea:
9f:66:c1:97:5b:60:35:85:92:ad:ef:ef:f5:3d:7c:
fe:ab:01:8b:c4:9a:5f:79:96:3c:95:b8:b5:5e:ab:
12:c0:fb:83:dc:a9:6a:55:72:21:1b:db:74:e6:f4:
6b:b6:ab:e2:62:75:22:67:e9:78:56:9e:7a:81:50:
15:f2:a9:b5:c8:bf:b7:94:5a:80:ce:ab:37:6d:da:
68:c4:70:40:0b:95:0a:ab:99:2d:43:de:92:ad:4e:
2b:0b:5f:3d:66:ba:f4:fd:4c:59:c5:9e:3a:c9:23:
e0:20:15:bb:59:5c:34:0b:72:14:d9:4e:bb:2a:fb:
49:a8:17:88:d9:d1:76:c5:fd:07:eb:2b:80:97:4e:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:93:E0:7E:E6:5E:69:14:21:9C:4D:5E:83:E2:A8:19:D5:CD:E9
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ef:3e:95:8b:94:40:65:b7:be:d5:7e:81:f1:bf:3b:45:7a:
97:98:d1:05:fa:eb:aa:7c:2b:17:7e:93:e3:a2:b7:30:02:c2:
e0:dc:b4:be:02:46:02:e0:83:1b:17:26:3c:6c:95:1b:77:f5:
f9:21:06:91:c7:fc:b5:91:c5:0a:6b:9b:96:4f:f0:0f:c6:19:
76:d5:17:08:03:5b:ac:af:96:67:0b:8a:d3:bc:d4:a0:1c:7b:
b0:c2:db:e3:a4:e8:08:80:31:d2:10:69:c0:bc:60:62:d0:cc:
57:70:dc:ea:44:03:af:f6:0e:03:e0:a1:06:fa:26:3f:a7:c0:
56:f0:06:22:cd:d7:1f:70:3c:b6:cd:d2:54:40:49:65:f3:0a:
be:a2:2a:09:ed:98:0e:23:74:84:ff:12:47:bc:1a:2d:eb:1f:
d7:0f:52:8d:2a:fa:e4:4b:7f:42:24:75:d2:f2:70:d9:f2:c5:
9a:a9:4d:90:4c:9e:46:1c:a8:be:4a:60:dd:84:46:f2:5f:a2:
a8:0e:30:88:df:5a:5f:cd:07:fe:0a:3b:f0:c4:c6:74:37:76:
02:f0:03:03:e8:8c:0d:88:2a:86:1d:9e:d6:ec:89:e0:dd:e4:
31:54:94:72:2d:a1:86:7c:48:e2:43:f9:7c:81:19:07:a1:99:
2e:83:79:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:02 2025 by rpki-client