Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier: omsavm4F2jk7rgu4TzjQ4eOLfIEkyxEZXkhRBSppOZc=
Subject key identifier: 46:5E:5D:B0:D8:CD:D0:98:9D:81:9F:D3:E7:8E:EC:0A:A1:42:D4:C9
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial: 0197B70E68DDDB525909C02CBEF17015678B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number: 07F3
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: Lmu2U5nfrTRQRbi+W502Tuy0aLiZ5ydMOsuP38HVqZQ=)
2: Rm4G8KwJAms34HdBJGkkvyGyVeo.roa (hash: /H/EXJlnlnkPcjJyZSTq8hc9wXqmJ/nwbv9HzKcNsm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:68:dd:db:52:59:09:c0:2c:be:f1:70:15:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=465e5db0d8cdd0989d819fd3e78eec0aa142d4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:3f:2f:12:f5:37:09:2c:2a:01:01:a9:74:
a6:18:15:c6:fd:56:4f:f0:14:40:29:c7:75:42:13:
bd:78:d0:1c:d2:43:c9:c6:32:76:9e:30:9b:29:53:
b7:89:e9:64:63:24:cc:65:af:0e:0a:05:4d:cb:09:
d0:fa:bf:e3:da:e0:bc:b5:cd:92:92:c3:5b:74:b1:
97:df:09:0c:2f:41:e7:47:05:93:3c:b5:20:ca:c6:
d3:4f:23:78:73:b2:71:9d:56:6b:82:2a:89:96:01:
dc:c8:6f:ad:57:fe:c6:8c:2a:7c:e3:87:e6:a3:aa:
32:96:75:e0:f5:00:e9:05:ce:42:5e:b2:5a:56:8a:
fa:53:31:7f:4e:95:5b:9e:ae:c9:dd:60:ff:85:44:
c1:d8:1c:4e:aa:89:9b:93:12:13:ed:1d:6d:cd:b2:
b1:30:a4:92:dd:3d:42:9f:4d:04:1d:dc:76:02:01:
af:64:df:cb:8c:53:49:dd:74:57:5e:82:64:88:87:
37:a8:ae:76:33:0e:61:42:a6:55:74:1b:97:4a:54:
52:b4:4f:e4:69:dd:53:cb:8d:24:64:8a:27:45:5f:
e6:15:93:af:62:f8:fc:74:ce:86:94:2b:3f:e8:63:
4b:87:14:09:4d:ec:a7:46:d0:bd:85:c6:6b:4d:0e:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:5D:B0:D8:CD:D0:98:9D:81:9F:D3:E7:8E:EC:0A:A1:42:D4:C9
X509v3 Authority Key Identifier:
keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ea:69:3c:92:81:d3:f4:8d:64:54:20:c7:50:2f:c5:2c:80:
9b:28:73:31:2f:a4:2f:89:3d:de:08:e2:fd:42:26:3f:fc:21:
92:29:87:2c:27:03:a0:56:77:05:80:c2:be:c8:61:9f:f7:d3:
1d:c8:3e:e6:69:ca:fe:68:e4:ba:46:40:8e:06:f5:c7:b1:75:
2d:a7:eb:39:5d:77:27:b0:c2:8a:fa:b0:e3:c4:e3:67:cb:7a:
3b:7b:72:7a:84:57:2d:0b:6a:61:bf:25:7d:1e:e5:bb:0f:c1:
8f:3e:23:59:50:33:d8:0d:ca:ac:22:a5:f4:66:30:9c:13:54:
f7:2b:c0:ac:1c:0d:d3:c9:70:7b:7c:5b:d9:2e:72:44:47:30:
a4:5e:18:56:3c:6e:1b:14:40:a3:46:c9:89:66:6b:87:9c:e7:
aa:ad:95:1b:e8:a6:d8:82:f2:13:ee:9a:d5:62:37:31:fa:88:
0a:ad:af:1b:0b:85:c4:5e:69:d9:f2:ec:4e:2c:06:ed:e0:aa:
e3:8f:3e:00:81:94:ff:5b:53:86:43:9f:fb:9b:d8:e1:3a:aa:
07:2c:8b:5b:db:50:f6:eb:00:bc:28:b0:1c:94:9a:76:c8:30:
ae:0b:b0:bc:6e:1d:20:3f:23:ad:9f:d5:88:36:17:65:5f:ca:
ba:0b:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:06 2025 by rpki-client