Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: OL05jpAJb7JCtmDUk1ggXBiQwfiSFOsw0uIQkBMMSHY=
Subject key identifier: 73:FD:21:70:D4:66:A0:64:8D:57:7C:31:CC:6C:5A:2A:2E:A4:DE:7B
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 01977AF94882A81F38B735E53BA44274511D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 23:00:46 +0000
Manifest this update: Mon 16 Jun 2025 23:00:46 +0000
Manifest next update: Tue 17 Jun 2025 23:00:46 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: 9pH/FC8u3AxZ+nD+7Mwym+VaWijNNF8QbFWjlFBXR18=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:48:82:a8:1f:38:b7:35:e5:3b:a4:42:74:51:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jun 16 23:00:46 2025 GMT
Not After : Jun 17 23:00:46 2025 GMT
Subject: CN=73fd2170d466a0648d577c31cc6c5a2a2ea4de7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:2b:71:ba:b8:f8:4c:cc:5f:44:31:5f:e0:
e9:fa:bd:67:e9:c9:1d:0a:49:19:b9:56:a3:48:41:
ac:a1:c9:9e:27:96:4e:64:1a:05:7f:00:97:81:76:
53:10:6b:a7:34:16:05:c6:e5:ac:c1:4a:0f:17:2f:
b4:ba:c6:af:73:88:69:90:bb:49:2d:c5:b4:2d:d9:
8b:55:60:2a:23:9d:c4:30:90:cb:42:92:5d:51:32:
bc:1b:8e:1b:96:10:46:45:d6:49:4d:fb:c0:7a:1f:
be:7a:d9:33:c8:ae:f1:21:25:d6:96:aa:63:32:b0:
d3:3a:e4:22:ab:3a:23:63:8f:d9:1f:cf:f6:96:72:
a5:2e:6b:cb:7a:6a:9e:48:21:df:b3:84:78:3b:77:
d9:dc:8a:42:9f:44:02:d6:96:eb:16:8f:a0:d3:85:
67:f5:16:ba:28:14:f1:77:0c:cb:98:cd:dd:af:49:
4f:36:2e:11:ca:68:09:30:9f:ff:d6:c0:cc:48:bf:
18:76:86:4b:4d:9c:f0:28:e9:80:8d:0d:ae:45:ce:
0e:c0:b2:1b:f9:d2:08:c1:26:5b:f0:e2:30:0d:42:
be:b3:c3:69:39:a5:5b:7d:7e:86:48:b3:3f:36:0d:
4d:04:af:36:34:3f:38:3a:3f:c7:4b:44:bd:46:cf:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FD:21:70:D4:66:A0:64:8D:57:7C:31:CC:6C:5A:2A:2E:A4:DE:7B
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e2:e6:e9:7a:d9:10:09:22:b3:80:28:8c:b8:5f:3f:3b:74:
e5:2b:82:b3:7c:80:de:29:7f:f9:8b:be:14:fa:30:39:1d:85:
d0:11:90:dd:b0:26:72:e3:93:56:af:52:3d:23:21:9f:18:7a:
84:3e:79:31:ea:b9:bb:ea:0f:cc:44:fa:8a:37:17:8f:ef:d0:
54:46:33:69:9c:99:a1:57:67:84:81:21:43:a7:77:0a:9c:f4:
56:26:2e:3e:08:dc:33:4e:1a:0b:13:09:12:bf:71:a0:cc:ae:
f7:52:27:04:2d:26:5c:7d:4b:a8:f2:ed:a4:e3:fd:5b:9e:41:
af:fc:ed:7f:2c:da:03:01:f6:35:0c:af:10:e0:36:09:c6:e0:
c0:b0:94:b8:8d:05:00:ef:5b:83:13:10:8f:3f:0f:02:00:90:
5c:2b:53:31:45:e0:5b:8d:45:73:23:95:a4:24:83:e5:a1:67:
3d:9a:c5:a5:3e:9b:9e:c3:f2:55:58:31:0e:fb:fe:c8:28:7a:
1a:2d:42:dc:8e:9a:43:df:d3:26:cd:d0:75:6e:94:ab:66:9d:
36:ec:56:f0:e1:33:ef:21:7a:6c:3a:90:0e:fe:fa:a7:17:92:
ac:bd:a4:24:a8:d9:b7:26:4e:13:ac:0c:55:35:43:23:62:d5:
dc:12:e6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:21:39 2025 by rpki-client