Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier: fGJ0JGAtVPgXWVNLUvFsd43OnQtsuT0OZ388NVq9+G8=
Subject key identifier: A5:2B:D4:E5:E9:34:B6:6E:C9:BE:5C:E5:82:FF:CA:48:80:D3:E9:41
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 01967C45BC46554A224B2D9C80DCF0501162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 12:01:07 +0000
Manifest this update: Mon 28 Apr 2025 12:01:07 +0000
Manifest next update: Tue 29 Apr 2025 12:01:07 +0000
Files and hashes: 1: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: Jtn091wOCKlBeuzS4laXcvYfceMXFYdlZzdQ1uosmKw=)
2: id8eO-SAr4HmH_kU9gWG3wDOyMg.roa (hash: QVeP890/1IAEaEOIUM6FuUPhuYx18zEBeNk09Lb1+ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:bc:46:55:4a:22:4b:2d:9c:80:dc:f0:50:11:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: Apr 28 12:01:07 2025 GMT
Not After : Apr 29 12:01:07 2025 GMT
Subject: CN=a52bd4e5e934b66ec9be5ce582ffca4880d3e941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cb:d4:ea:82:19:30:d6:e5:dc:e4:40:17:b2:
50:4f:24:3e:60:95:e7:57:12:b4:9c:ee:d4:90:be:
9d:65:8a:20:c9:0b:9b:0e:bb:3b:e7:b7:b2:64:35:
83:8e:e4:6f:a5:8c:c6:b3:9c:af:a1:6d:d6:2d:a8:
01:aa:1b:02:ae:26:3b:4d:64:86:61:70:58:b7:ba:
f9:a4:39:26:ef:08:94:42:3a:69:b8:16:35:84:27:
e2:58:4f:26:1e:b4:a8:dd:48:a8:04:ff:5e:1d:bf:
fc:e5:f4:24:b6:bd:97:97:71:a3:14:51:50:dd:f3:
99:07:d9:b7:41:7f:ad:dc:3f:56:db:10:52:27:36:
20:c1:e2:48:69:a2:cd:f0:ba:cb:27:34:c8:46:71:
bc:72:e1:11:06:d8:fd:62:d5:54:7b:a5:1f:ed:37:
02:a9:af:c5:52:4f:35:ef:f3:ed:72:12:02:15:ae:
a8:28:ff:13:85:e6:73:15:81:3c:20:af:35:e7:f0:
ed:ae:2d:ed:ad:b3:3d:79:aa:07:20:df:59:d1:0d:
95:f2:87:79:87:2d:a1:ea:06:90:7d:c7:2e:dd:06:
7c:3c:89:28:88:4e:cd:f1:93:bc:da:e7:97:e2:28:
20:6b:b3:3f:98:82:74:ab:ef:7f:76:c3:e9:c0:3b:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2B:D4:E5:E9:34:B6:6E:C9:BE:5C:E5:82:FF:CA:48:80:D3:E9:41
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ab:55:48:38:82:90:f8:b7:50:e0:5b:3d:cc:bf:9d:ad:bc:
f4:7d:04:99:48:0f:6a:64:42:c2:5a:b6:b3:f9:ef:ba:90:08:
d9:9e:85:88:15:3a:92:36:1d:98:e7:87:12:48:ef:b6:6b:4c:
ec:71:26:b2:65:ac:40:6d:7f:79:86:f3:81:c9:54:01:40:9f:
de:24:69:a2:f0:b1:83:f6:55:51:6e:3f:cb:db:60:7c:72:cd:
e3:49:5d:7d:8a:53:60:e3:35:52:50:53:57:3f:1b:68:02:7d:
ac:15:55:53:48:b4:46:20:a8:55:b9:b1:8f:cb:08:e9:44:47:
d4:8a:76:9d:28:0f:6a:cd:2b:ff:f5:85:24:25:5e:b6:10:ba:
45:98:7c:71:c1:4f:2e:4a:62:c4:68:73:a0:af:cc:4e:14:a8:
18:cd:7b:d3:51:e3:bf:9f:38:0c:8f:a3:d8:84:d2:0e:4a:2c:
83:c8:f1:15:95:11:3e:9c:c8:9d:bb:9e:6f:fd:de:a7:51:b9:
0b:44:f3:d4:7f:e6:3c:14:5e:8b:4c:79:d5:bb:35:44:dc:e2:
87:60:52:c3:11:ae:fa:8c:80:9c:5d:3e:c5:32:7b:0e:dc:ba:
fd:5f:e5:ed:79:d3:26:60:85:c8:57:2f:bf:8f:04:8e:3e:0b:
20:2f:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:32:23 2025 by rpki-client