Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: whKUZbk8JFzLTJC9tZlj01Evkhz8OwbsUXE+/x/tmN0=
Subject key identifier: 28:65:5B:50:0C:33:54:E6:BF:28:EC:88:73:67:C6:FA:2C:35:86:1A
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 019747797ABE94BA8BB4D541CE2C91463FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 109D
Signing time: Fri 06 Jun 2025 23:00:33 +0000
Manifest this update: Fri 06 Jun 2025 23:00:33 +0000
Manifest next update: Sat 07 Jun 2025 23:00:33 +0000
Files and hashes: 1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: TpoN0KfedD36OfeqlAfF1jlPmkH3XozUU/yP+Fty0b4=)
3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:7a:be:94:ba:8b:b4:d5:41:ce:2c:91:46:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Jun 6 23:00:33 2025 GMT
Not After : Jun 7 23:00:33 2025 GMT
Subject: CN=28655b500c3354e6bf28ec887367c6fa2c35861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:11:5a:80:b5:f4:9d:80:e1:db:f1:0e:40:
f4:a6:0c:ed:ad:4d:d3:39:8e:b3:75:01:5a:a1:60:
4e:d6:85:d9:2a:28:79:e2:5e:dd:ad:a4:d4:d0:9b:
f9:06:97:7d:1f:c6:56:4a:58:d2:f1:38:3e:02:32:
45:0e:7b:29:2d:ee:63:43:dd:ec:0f:40:53:e0:dd:
bf:3e:ca:ab:e3:9f:be:36:a9:73:3a:23:4e:c3:7b:
58:86:1b:25:e4:9e:ae:3b:3c:99:b1:8c:25:c7:6c:
12:1b:50:6a:3d:a8:c7:38:18:a3:f4:95:b2:df:fb:
70:fd:4b:d5:21:a9:43:b9:59:12:a7:58:58:5c:b8:
f3:f5:51:06:13:9c:0a:16:e2:8f:24:0a:84:88:27:
92:1b:2e:c0:53:ff:15:2e:3f:40:c9:14:2e:fe:17:
f0:46:a7:1e:95:ec:44:01:e4:a7:a4:21:a8:76:57:
66:fa:98:a9:5c:02:00:79:13:11:22:b3:b0:b1:dd:
a1:b1:a4:de:02:b7:1e:18:51:73:a2:f5:75:b5:de:
57:15:31:d5:98:47:b4:1e:92:0f:c1:4f:71:4b:57:
f4:43:da:73:eb:80:f6:e4:67:a2:ae:2d:cb:ef:fc:
22:05:8d:a0:6d:aa:62:25:7c:37:c7:1c:b3:df:89:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:5B:50:0C:33:54:E6:BF:28:EC:88:73:67:C6:FA:2C:35:86:1A
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ad:89:e5:41:46:7a:c1:a1:84:4d:7c:13:88:42:a8:c5:79:
2f:f6:46:76:5b:82:f1:91:0b:42:7d:e8:a1:38:8f:66:2b:9b:
db:ad:f4:5e:6b:76:74:02:a7:55:54:2e:4d:7b:ef:57:35:fc:
2a:02:3b:ef:f3:44:39:35:b7:c5:7a:62:d2:39:c0:dd:15:b9:
5c:cd:55:31:23:61:62:8b:d8:96:73:d5:6b:df:ea:94:5d:04:
61:dc:84:6d:13:0e:ec:6e:f3:28:75:57:36:48:92:70:0b:8b:
99:90:2c:2b:14:18:a4:a5:16:be:98:6c:9c:8f:e3:cc:92:02:
26:e0:d0:92:c5:c1:c3:39:34:b2:a1:67:54:b2:da:1c:5a:ed:
81:0a:37:24:4b:16:31:67:41:f9:68:13:1e:56:91:ae:0e:57:
25:3c:18:ac:0f:77:30:0a:d3:7d:55:c5:ed:1e:9f:47:c8:20:
ff:99:ae:29:f1:2e:21:47:59:b6:7b:47:a9:8b:90:15:bd:cd:
6e:8f:a0:a9:75:03:58:73:55:de:90:02:3d:dc:f9:5f:12:af:
b9:8f:d8:d0:09:eb:52:89:a4:c3:e5:ed:30:fa:c3:48:4b:0e:
72:9e:cf:8f:1a:05:3b:ad:3b:ad:e4:f6:ee:21:fe:f0:e0:19:
b1:ad:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:55:54 2025 by rpki-client