
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: 9BMIiXY+uTsjKRl7Gs+K03d8Hak7jZkrpo4kd0gi55Q=
Subject key identifier: 65:42:65:A8:49:E5:75:9D:3A:4C:4B:84:8E:41:B7:05:77:67:2F:3A
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019874BD8D1E4790D9BD9286E443E078D55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 128F
Signing time: Mon 04 Aug 2025 11:00:36 +0000
Manifest this update: Mon 04 Aug 2025 11:00:36 +0000
Manifest next update: Tue 05 Aug 2025 11:00:36 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: N8ne2AZQvx+5K72/Fu67q1gjcj7MNiZSo6ooKCKuxQw=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:8d:1e:47:90:d9:bd:92:86:e4:43:e0:78:d5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Aug 4 11:00:36 2025 GMT
Not After : Aug 5 11:00:36 2025 GMT
Subject: CN=654265a849e5759d3a4c4b848e41b70577672f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:44:3a:89:6c:82:8e:18:01:00:5b:ac:97:
b4:ff:d4:d2:a4:79:b5:54:c9:29:0c:c8:df:29:0f:
16:dd:40:d9:4a:3f:9c:f2:bc:3b:3c:a9:98:46:d1:
15:38:0d:3e:0c:eb:a4:8e:30:21:ba:9d:a1:2c:6f:
ed:1b:7e:83:6f:92:ea:af:a4:76:48:fa:26:8d:d5:
9e:ab:66:d3:88:b7:62:9d:ea:6b:b1:76:20:f8:6d:
79:3d:04:cd:9b:bc:36:0a:f3:89:99:80:05:a7:80:
bc:06:13:81:17:17:7e:c0:cf:26:4e:2b:dd:17:9c:
93:90:ef:57:94:4b:bd:c9:63:a8:c8:9a:ea:e4:a9:
10:e7:6b:1c:c9:53:7d:2f:e3:7d:f6:66:e2:14:da:
1a:9b:40:a1:76:d2:22:0f:59:da:0d:57:c0:88:48:
80:f9:bd:3c:f2:b0:62:0f:49:35:10:50:7c:30:e7:
a5:6f:b8:bf:dd:23:68:3e:1e:b4:73:1a:61:90:e2:
e1:22:cf:27:f3:65:2b:c0:5b:58:50:5b:d1:52:ea:
3e:1c:a1:1d:dc:42:ff:9b:92:01:51:87:c0:f8:70:
72:32:d5:2c:8f:9a:d0:6f:78:ea:b2:f0:59:5b:a6:
c1:88:af:d5:d2:97:0e:bf:17:83:af:28:a2:93:c2:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:65:A8:49:E5:75:9D:3A:4C:4B:84:8E:41:B7:05:77:67:2F:3A
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:59:5f:b1:a9:ee:a6:54:b9:d7:4c:3a:ac:00:f6:7d:40:cd:
76:e2:85:6d:db:3f:0b:30:21:2a:53:5f:ad:f6:64:4e:41:a8:
cc:93:2a:07:54:73:b7:47:9d:f8:6c:81:0e:25:43:f3:a0:06:
fa:f2:30:bc:da:08:ee:30:dd:6d:6d:99:c6:33:ec:51:4f:62:
1b:b6:e0:14:4b:d4:01:d7:a7:8c:60:6f:e4:67:14:6a:2c:f8:
11:1f:82:f6:35:61:45:ba:37:39:a6:3c:d2:dd:4e:14:21:88:
7a:bf:87:43:05:e0:cc:20:59:ff:52:0f:cd:f2:10:d1:b9:d9:
27:26:1b:05:99:a1:4c:11:38:ad:c4:42:be:c8:f2:ba:88:1c:
d2:dc:36:4e:7d:05:6d:b2:92:06:44:6b:1b:da:3c:86:af:68:
a9:ef:a4:9c:d3:53:23:cb:3f:10:22:7c:f1:fe:00:5f:85:e4:
c7:3c:f3:d9:f4:70:16:25:c5:c6:dc:9b:1e:56:9d:38:76:75:
ca:b0:3a:86:f0:58:43:af:86:2c:18:0e:2f:03:25:9a:ad:be:
48:93:6f:e9:6e:45:ab:15:df:00:ff:e9:63:c8:07:4e:3d:3a:
3a:f3:b2:24:ad:f8:b9:2f:08:1b:c9:c4:8c:fb:d1:1b:2b:54:
87:34:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:52 2025 by rpki-client