Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: i9J4eHQDT7uKvZpXOKeG+xhJpnbvakx/Zc02vYZ4fWo=
Subject key identifier: 5F:E4:0D:36:79:2C:0C:01:28:7C:29:07:3E:E8:B6:F8:C1:89:CD:4C
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 0197684DCBD1CC9898727E6ECB03907E8F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 1204
Signing time: Fri 13 Jun 2025 08:00:18 +0000
Manifest this update: Fri 13 Jun 2025 08:00:18 +0000
Manifest next update: Sat 14 Jun 2025 08:00:18 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: TWH9gnjAElBUinKOjwHd65Ks45hvcVlb24mkoRnZj0o=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:cb:d1:cc:98:98:72:7e:6e:cb:03:90:7e:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Jun 13 08:00:18 2025 GMT
Not After : Jun 14 08:00:18 2025 GMT
Subject: CN=5fe40d36792c0c01287c29073ee8b6f8c189cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:32:d4:e2:f4:45:48:b0:95:dd:58:78:df:
da:cd:1b:7c:29:08:42:fe:83:f2:b6:c4:04:eb:bb:
4d:3e:6e:8a:19:59:6f:df:b6:68:03:ab:67:ac:73:
61:1e:09:8e:83:67:aa:90:ba:ba:3b:db:b5:9b:71:
95:16:c3:6a:4c:f2:79:55:e7:7e:3e:ac:0a:e1:6c:
93:a0:09:f0:42:b0:06:f7:24:f3:24:9a:17:4c:f7:
f7:2c:51:46:80:ab:a9:fa:e0:2d:8f:e4:5e:2c:23:
31:a2:bd:78:bf:11:e6:4b:72:42:92:3c:79:cc:c9:
bc:31:2c:51:d9:b4:3f:44:43:6e:8b:11:21:21:3e:
e7:1b:42:8e:00:d8:74:66:cf:c8:b7:52:b7:54:44:
c9:50:0b:af:14:8c:19:9a:4e:24:c2:da:b2:d0:3c:
36:b2:15:85:de:fe:16:7c:fb:61:c9:b0:0a:7f:e3:
e2:05:24:c4:ef:ac:0d:eb:bb:4d:1d:20:38:a1:bb:
a6:09:d4:0f:46:1e:78:7c:47:22:67:e6:b5:f3:a9:
1d:69:fb:4f:7f:a0:89:2d:ef:ce:e2:cf:f7:08:ec:
10:4d:e1:92:11:09:df:7a:14:2d:7f:2b:c3:f2:dc:
a7:9d:2c:d4:7e:eb:fe:59:70:81:cb:fa:91:c0:77:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:0D:36:79:2C:0C:01:28:7C:29:07:3E:E8:B6:F8:C1:89:CD:4C
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:88:d9:67:91:44:fa:25:73:09:8d:13:8e:b6:14:a8:ef:88:
5f:92:48:a4:3f:f7:7f:c9:9f:f1:2c:b0:54:7e:f2:da:cd:db:
9c:ce:4f:96:0e:57:f9:12:a3:06:d1:f8:54:c4:33:db:bd:f7:
cf:22:05:85:d0:26:aa:67:9f:5d:7f:d7:86:63:81:8e:38:ec:
58:e4:bb:3a:fb:d3:a4:b6:6c:54:99:f8:53:f8:c9:38:4d:db:
a6:da:e9:18:fd:09:01:72:c4:cc:05:c0:4f:50:59:de:13:7e:
67:4b:44:31:8d:94:c1:4e:a7:62:44:f5:f3:c7:8f:05:86:e2:
45:a9:8f:39:d6:75:77:2a:b4:25:16:37:5f:f2:2f:b7:d3:93:
1f:1e:da:c3:64:be:e6:dc:5a:ae:79:42:3f:df:5a:c2:44:67:
e3:09:f0:4f:43:37:0d:96:1c:ce:ef:0e:5a:e3:d1:6a:11:50:
d9:69:17:7a:ed:6a:0e:00:15:5f:3b:19:d3:0d:a5:90:53:28:
7c:40:32:b3:39:a0:ed:31:51:29:7d:46:a1:b6:31:c3:da:c1:
66:c1:20:13:78:59:e0:35:76:b0:1a:d5:c6:a5:9d:63:31:4e:
40:73:55:a8:a7:0a:60:70:48:79:3a:78:46:85:fc:fe:55:c3:
82:fe:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:43 2025 by rpki-client