Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: N+X9Gmigg+lzyHNVkDBKelsxKTAaCl+TkV4DQ69sVok=
Subject key identifier: 40:DE:27:90:DA:94:1E:BB:82:22:27:4B:34:0D:86:E1:A9:FE:5E:3C
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 01974B1F5F59D3EA27EA55790CB01DFF5FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 0777
Signing time: Sat 07 Jun 2025 16:00:36 +0000
Manifest this update: Sat 07 Jun 2025 16:00:36 +0000
Manifest next update: Sun 08 Jun 2025 16:00:36 +0000
Files and hashes: 1: 1-zD-VP--H8n0NROM6_MEnlnoArY.roa (hash: nJouFHvYIjsuEwuLWeuvNkKf+hqux6O1NRmsIOTPhUc=)
2: 1heB0YuNq-USGUveTj29qvEG1XU.roa (hash: 0NZHYUEHQ1C7qLoCH8KkLUBz6NfTEtAiQEDR0MzkAeo=)
3: CXfl0vZF1sbQq93reOXuNh2tfq0.roa (hash: ouJvYI4QUtdTBIQDtkd9tLF9CepiUn3okCMjYpiyZEI=)
4: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: DW+wkmAK1aeP5LRCfuD14XRwHn0tIjrEyPrhe+kGU6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:5f:59:d3:ea:27:ea:55:79:0c:b0:1d:ff:5f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Jun 7 16:00:36 2025 GMT
Not After : Jun 8 16:00:36 2025 GMT
Subject: CN=40de2790da941ebb8222274b340d86e1a9fe5e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:58:bc:69:e3:44:3b:e6:13:0e:0e:ce:86:
cc:7b:80:f7:32:72:21:69:af:01:f2:05:91:5c:bb:
27:45:b0:dd:5d:d4:d6:79:18:27:e0:d6:94:33:69:
ff:d4:1e:8c:60:cd:6d:07:36:03:21:25:9e:89:2a:
ba:1d:4d:b0:7f:ff:09:80:43:02:1b:d3:d9:8c:cd:
01:c3:8f:2b:70:e4:47:ca:bf:11:1b:4b:d8:b7:b3:
64:2f:e5:7c:8b:bb:23:26:40:5c:72:bd:b8:8a:bf:
2f:b4:d9:f5:eb:b5:84:52:ad:44:0a:33:b2:5d:8b:
23:cb:cb:85:04:b1:95:cc:cf:b5:c7:d2:f1:32:cc:
9d:d0:63:95:0d:00:90:d7:ad:28:7d:8e:ee:0c:f5:
a4:2a:75:2b:e2:b6:4a:f2:e4:a3:6c:a8:4e:23:a0:
15:d8:94:a5:0e:48:9c:b0:bc:db:14:11:b4:41:0a:
51:49:d1:14:b6:47:13:eb:ec:c7:ee:58:da:2c:15:
2b:0a:12:96:7a:ff:f8:97:6e:48:27:be:af:db:60:
8c:83:36:73:fd:38:38:2c:d1:18:d2:aa:c8:5a:37:
63:e3:3e:a9:b1:e1:de:ec:6d:b2:bf:32:3b:d9:72:
6a:ac:5f:6b:ac:d4:bb:a6:12:e3:47:ec:6b:f8:6e:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DE:27:90:DA:94:1E:BB:82:22:27:4B:34:0D:86:E1:A9:FE:5E:3C
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:29:43:cf:97:c2:a0:2b:a3:23:e2:ce:44:65:13:13:9e:12:
0a:18:3f:20:ca:62:71:a0:ec:65:a4:ce:c4:20:af:2e:fa:cc:
35:fe:44:7c:ef:83:4e:e0:80:54:68:10:4d:0b:ea:65:ee:9a:
e8:a6:d3:fa:1f:51:6d:d8:2e:a5:c3:ab:32:14:03:16:f7:ef:
62:9a:dc:94:24:a2:0a:24:e0:65:1d:24:e0:7d:23:ab:5d:d7:
d5:19:1f:24:d3:77:77:69:59:58:b1:82:11:b9:3e:7d:24:76:
ea:3f:10:3b:cf:55:92:d6:51:b0:80:c3:7e:02:a0:39:e7:a4:
84:38:de:da:99:d1:65:6b:ee:79:8a:c3:40:af:95:6d:83:89:
64:36:fc:90:7a:90:d7:d0:0b:ab:ad:d1:63:08:48:4c:88:e1:
c0:f3:40:64:d1:3d:99:0f:27:7f:44:67:59:bc:cb:1e:87:ad:
bb:d4:17:03:50:00:11:15:b0:bd:bd:e9:d1:78:4f:8a:2c:48:
60:06:a9:9c:ca:ee:1c:54:88:3d:41:6a:93:d7:4b:be:3c:38:
4f:21:d7:f3:24:a8:47:08:8a:42:f1:5c:9a:22:96:76:bf:1c:
32:e1:5f:44:b5:2b:5f:a0:4b:25:1f:81:86:49:9d:8a:78:89:
e5:39:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:26 2025 by rpki-client