Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: n0ANsXE2dJFxAlRZRf+WvH1jYwd1iWWazafZ98u7DPE=
Subject key identifier: 21:09:2B:86:BB:1E:93:8E:E7:79:77:89:CF:85:CC:FD:93:39:AF:83
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019776AE740DD7F37A7865F6B73D635C7A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 03:00:33 +0000
Manifest this update: Mon 16 Jun 2025 03:00:33 +0000
Manifest next update: Tue 17 Jun 2025 03:00:33 +0000
Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: D7DilLudL+2xI8IHEi/ZBN5MEtCPQrA6l5ESU99Y2Xo=)
5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:74:0d:d7:f3:7a:78:65:f6:b7:3d:63:5c:7a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Jun 16 03:00:33 2025 GMT
Not After : Jun 17 03:00:33 2025 GMT
Subject: CN=21092b86bb1e938ee7797789cf85ccfd9339af83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:c6:f6:d0:39:5b:67:16:2e:08:e5:2c:32:
0e:95:4b:99:d2:83:b7:bd:b1:05:70:a1:ea:7d:6f:
fb:9b:0c:11:41:18:fa:23:00:3b:f1:23:8a:51:6d:
d9:c4:ff:a6:07:8e:b4:26:91:75:13:b8:57:bf:15:
f6:04:e8:37:b3:a4:27:ce:76:6e:d5:54:e9:af:05:
27:b5:0d:30:cb:7c:fa:15:49:ba:87:63:db:dd:3b:
e8:b6:28:cf:14:f7:8d:81:ce:d4:81:7a:74:4a:3a:
91:2c:30:e1:91:61:82:21:c2:f1:8b:f1:46:61:87:
82:85:1c:07:bd:34:c6:31:e9:79:df:47:b3:2b:27:
92:6c:57:22:f4:fe:57:6b:57:1a:7b:1a:08:da:28:
25:c7:c8:54:1b:a1:d3:b2:29:0a:72:f1:cd:5d:59:
d5:85:18:78:2c:fb:a7:48:85:99:35:a7:0f:6c:6f:
7e:09:9e:1f:6c:aa:21:6f:d7:50:fe:76:40:d6:9c:
fa:ba:f2:58:a3:c1:60:f3:5d:fd:03:0c:ef:d7:96:
c9:78:51:bb:ef:5c:1a:bb:90:e2:18:80:71:82:83:
05:e2:6e:af:6d:3e:6a:d4:e6:09:b1:51:81:75:9f:
e2:6d:80:a0:c0:77:fd:d0:98:0d:19:77:8d:2a:fe:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:2B:86:BB:1E:93:8E:E7:79:77:89:CF:85:CC:FD:93:39:AF:83
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:b8:76:f9:86:76:cc:58:e4:09:ad:e1:8c:f5:9c:12:29:
0a:a8:ba:1d:b7:71:1b:87:ca:66:e1:f2:81:53:71:5a:05:e6:
92:c6:4e:51:ca:26:aa:38:bb:b7:6e:fd:df:7b:6b:50:38:15:
cd:f9:95:55:86:65:0d:31:12:ed:59:df:74:46:b1:53:d5:dc:
37:c4:a3:1b:0a:22:d1:94:77:d4:b1:49:49:e4:d3:2e:be:4d:
9e:6d:48:69:00:1a:a4:2c:d7:b9:b3:51:1a:54:0d:2d:0c:a1:
78:df:7d:a4:9c:47:79:3f:e5:ae:8c:89:ad:2c:06:21:06:c7:
16:ea:55:32:3b:94:94:2b:21:a7:75:49:28:dd:ba:fc:ae:8a:
3c:66:17:52:8a:0a:44:08:f1:a3:b8:85:19:a2:e3:7a:33:43:
b4:dc:46:64:22:a2:aa:7b:31:37:0e:a6:1b:e5:40:da:db:ed:
af:fb:50:ce:fa:0c:58:c7:c0:f4:ca:25:84:01:19:0d:32:f2:
cf:52:21:eb:39:0d:21:7a:32:79:23:81:e5:ee:6f:7d:12:2d:
03:c7:10:94:2f:08:57:af:78:7f:61:4d:18:73:a3:4d:c5:24:
4b:32:f6:d5:4d:9a:07:84:de:a4:a2:0f:1f:02:c8:59:07:27:
0a:7c:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:21:55 2025 by rpki-client