Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
File: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft (raw, json)
Hash identifier: ivU3Z6yO6vf7PpIxHG/OAN3l24JaMPTOD0+SVh+a+qk=
Subject key identifier: 76:EA:FB:67:E3:D3:60:A5:BA:11:26:0C:2A:64:25:79:53:70:60:19
Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
Certificate issuer: /CN=b043e621fe1009701f6366843c0abc41e180c144
Certificate serial: 0196C34B4EB80C2F65705FAB997C9BFA6865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
Manifest number: 0C1E
Signing time: Mon 12 May 2025 07:00:14 +0000
Manifest this update: Mon 12 May 2025 07:00:14 +0000
Manifest next update: Tue 13 May 2025 07:00:14 +0000
Files and hashes: 1: HyPwmwNvj6CdMpZdefHGIg4yDzE.roa (hash: OXYxYv21hsNNqtBtEPFKc2/1/qoxMz48zojYmP3J5L8=)
2: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl (hash: 4SHr7XRUoH4QkPOkOZp6jyzo0N7m7tvasiW+b+H6GkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:4e:b8:0c:2f:65:70:5f:ab:99:7c:9b:fa:68:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144
Validity
Not Before: May 12 07:00:14 2025 GMT
Not After : May 13 07:00:14 2025 GMT
Subject: CN=76eafb67e3d360a5ba11260c2a64257953706019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:38:e2:b9:fe:13:76:aa:44:16:1c:93:5d:
0f:cc:59:af:ab:b7:ad:b6:f3:33:07:14:84:24:31:
ed:16:dc:55:27:f2:d4:0a:38:2c:1a:dc:2b:4d:16:
80:25:e6:cd:e7:1b:ba:dd:b4:d8:bb:8e:cf:d9:a0:
bc:8c:4b:7a:fb:21:a7:67:d0:7b:53:7e:83:4b:de:
85:79:03:5c:fc:72:68:ea:91:31:28:17:3f:4c:40:
2c:5a:20:b6:6b:c9:8b:d6:d9:86:3d:be:cb:a5:03:
f2:05:6e:25:5b:9b:81:df:14:62:7e:6c:14:a6:46:
09:e4:92:3c:b4:2d:bd:29:35:27:db:8f:c4:2e:26:
99:56:a4:18:d8:1d:5e:5c:88:2d:57:0d:05:74:39:
6e:d4:27:51:c0:89:a1:71:de:08:96:7f:7e:f6:b7:
bf:0c:a0:a7:e0:b0:a8:7c:21:8d:c8:8c:92:0a:45:
1f:3d:95:21:10:c7:97:e0:7b:a7:1a:9d:86:52:47:
00:4b:3c:2f:58:d9:97:d3:2f:5b:4b:6e:55:5d:63:
ad:d9:56:10:a5:07:a1:77:c2:e5:b1:ff:80:15:eb:
dc:04:4c:82:d6:22:25:dc:07:9f:b5:7c:5e:b4:12:
fb:be:de:92:03:72:95:99:0f:da:7b:1d:5c:af:09:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EA:FB:67:E3:D3:60:A5:BA:11:26:0C:2A:64:25:79:53:70:60:19
X509v3 Authority Key Identifier:
keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a0:19:8a:79:6e:18:e3:ea:9d:e2:e8:81:51:91:99:07:7e:
22:a5:4f:9c:40:12:8b:dc:48:b8:4e:95:4a:58:45:4c:e6:47:
43:70:ae:33:de:5a:88:88:d5:c8:cd:ee:1d:2e:86:5e:df:52:
3c:a0:21:f6:56:02:22:38:cb:65:3f:f0:c2:04:dc:2f:40:28:
7b:00:9f:a0:f9:41:2a:1b:b5:8e:34:37:07:c5:92:af:e9:f0:
72:a6:cb:d6:be:5b:f0:6f:ef:52:d7:46:8e:22:76:d8:45:b3:
fc:9e:71:84:9e:89:1f:4d:9a:ce:1f:7f:70:79:d4:2a:f0:c4:
e2:7d:59:1f:6b:3a:7a:7a:b2:6b:2e:19:30:ee:d8:74:68:0c:
b4:d9:d6:17:d4:a5:ed:2e:e7:f5:b3:10:4c:97:76:0f:18:df:
86:ae:6b:20:af:d8:28:f6:34:d2:2a:dc:02:4c:08:d0:11:cb:
bc:02:17:b1:84:0a:f7:20:38:a6:e3:7b:e7:3e:3c:8d:49:fb:
4e:0a:48:91:72:b6:08:9c:79:d4:fb:38:a0:a8:61:02:3a:37:
88:f7:3a:0d:92:bd:92:7f:e1:2a:00:83:5c:79:5d:67:6a:e2:
9b:58:ac:0e:92:37:67:a1:85:80:ef:13:f1:75:91:30:04:3a:
9a:54:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:28:51 2025 by rpki-client