Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: DkD9y4/oPrK5KKrf1bWhLkuusQsAMNcVmKdgX5P1ybU=
Subject key identifier: E7:4A:CA:AE:32:6A:E2:C5:52:42:AB:A6:FE:CE:4E:14:95:C2:0B:45
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019671F8901BB61360FE16AA2E2B567F2CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 12:00:37 +0000
Manifest this update: Sat 26 Apr 2025 12:00:37 +0000
Manifest next update: Sun 27 Apr 2025 12:00:37 +0000
Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: ZdHhk/yliXKOLY+fmCu4db2ox5kPjk/VTNhpOLmll9w=)
5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:90:1b:b6:13:60:fe:16:aa:2e:2b:56:7f:2c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Apr 26 12:00:37 2025 GMT
Not After : Apr 27 12:00:37 2025 GMT
Subject: CN=e74acaae326ae2c55242aba6fece4e1495c20b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a4:44:c4:70:02:68:ed:1b:93:ae:9e:ba:8c:
75:92:6e:f3:35:83:49:15:c6:f1:58:65:ef:5c:3c:
10:73:2a:83:81:9b:26:da:82:29:ec:2b:26:1d:68:
87:8e:1b:18:b8:3e:cd:d4:96:83:ca:0a:42:b6:ca:
b8:9a:1c:61:af:25:01:1d:6c:08:d5:f3:ce:26:5e:
8e:dc:99:cc:f4:4e:59:f9:c2:a7:2c:10:50:e8:e3:
cd:39:19:0f:91:2c:e2:1f:08:81:b6:f2:76:a9:ab:
34:5e:26:c6:79:ad:09:2f:f6:8a:2a:f3:8d:e8:f0:
18:70:1e:51:d9:a4:1e:02:c8:0c:52:23:45:0a:f3:
28:c0:ee:f6:a6:e9:21:7c:54:f5:26:54:bf:ec:93:
d4:90:06:d7:7f:ad:a3:51:67:78:cf:b7:01:d0:ef:
8d:f5:84:ba:09:23:ba:c4:a7:f4:92:93:c8:d2:9c:
9f:7e:68:a4:9a:d7:27:f3:d5:7b:06:fe:b9:a5:bf:
3d:20:43:c9:ed:da:35:4f:b4:b5:c8:21:54:bf:44:
5e:fd:b6:ee:b1:4c:78:bd:4c:fd:cf:d7:67:83:ca:
64:33:90:01:f9:24:27:e5:4b:91:a3:87:e5:2c:aa:
a7:31:78:d9:e1:67:50:f5:ff:2c:1a:3f:68:bf:97:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4A:CA:AE:32:6A:E2:C5:52:42:AB:A6:FE:CE:4E:14:95:C2:0B:45
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b8:fb:78:0c:82:99:94:0b:c9:9f:fe:79:2e:f0:fa:7a:48:
00:ab:c7:14:57:0c:84:5c:b3:7b:ce:8f:fd:50:0e:a2:68:5d:
1a:39:66:f4:d7:41:08:86:f9:ad:43:ac:cb:da:b0:de:ce:7c:
8d:c5:48:e8:84:f9:55:8c:bf:20:f9:ff:b4:25:57:63:c4:72:
41:51:f3:fe:5b:5f:ae:63:22:f3:fe:8c:67:93:11:29:ca:11:
bd:c9:bb:e5:8a:06:f6:b4:8f:bd:67:2b:67:8b:b5:77:0f:cb:
53:1a:5f:00:55:ed:3c:b8:03:da:42:f0:86:31:d5:b4:dd:22:
6a:a1:b9:b3:3e:01:98:2e:dc:f4:38:34:7e:bf:d4:b6:c1:17:
e0:a2:7b:8f:e6:36:e0:e5:d9:47:ff:f9:3a:72:f3:d3:47:37:
2c:80:7f:08:a0:32:b0:51:20:46:d4:d7:cc:1b:0a:96:f9:1a:
1b:33:05:fc:d1:35:ed:4e:db:c1:a8:d4:dd:ee:b4:8f:87:e8:
4a:b8:8a:6c:69:fc:84:fd:84:be:78:19:3f:d7:bf:f2:4e:ca:
aa:d1:7b:f6:f0:76:50:b4:5a:ad:61:f7:29:92:7f:e6:2a:a9:
e8:99:43:24:fa:e5:98:d2:ea:46:1c:9a:91:6f:aa:77:6c:c4:
0e:8c:14:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:12:06 2025 by rpki-client