Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier: ci+cMGh3lEf1osG1eBgRBFiJU+7IGnSDraTypvSwDAw=
Subject key identifier: 84:50:AC:DD:5A:09:3A:54:81:79:28:34:2F:A4:B5:E1:23:65:35:D4
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 0196BA116276A9BD86229E9D9D909506DA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 12:00:23 +0000
Manifest this update: Sat 10 May 2025 12:00:23 +0000
Manifest next update: Sun 11 May 2025 12:00:23 +0000
Files and hashes: 1: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: AX8L1pBPqdAb6TcEhmSmiaSYDiAXfS2H3+Ij3nbp7ig=)
2: id8eO-SAr4HmH_kU9gWG3wDOyMg.roa (hash: QVeP890/1IAEaEOIUM6FuUPhuYx18zEBeNk09Lb1+ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:62:76:a9:bd:86:22:9e:9d:9d:90:95:06:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: May 10 12:00:23 2025 GMT
Not After : May 11 12:00:23 2025 GMT
Subject: CN=8450acdd5a093a54817928342fa4b5e1236535d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:77:c4:60:be:cf:d8:5a:a4:bb:10:d4:ae:
fd:76:4e:eb:0d:84:78:a5:aa:71:9b:8e:3a:5d:23:
c6:7d:1c:fa:83:1b:14:bb:22:45:0f:0a:73:cb:a8:
32:16:0f:fd:71:4f:85:d0:e3:b3:b0:7b:c9:b9:62:
a9:e1:a4:da:89:ec:dc:77:70:1d:6b:4f:b1:13:df:
7e:64:49:18:7e:93:c6:c4:7e:77:e2:46:11:e7:2a:
84:9c:22:92:db:a2:ab:6a:3a:58:86:0f:63:1b:a6:
9a:50:f5:ea:ff:c4:f0:a8:78:de:47:2a:b4:fc:9f:
84:c6:d4:96:1a:e1:54:8f:0e:5a:8d:d2:cf:84:e6:
51:69:a5:ee:7c:72:e3:dc:31:7f:bd:05:0f:6d:3d:
01:a5:b3:52:0a:0e:60:a2:1b:cd:cc:ac:c6:61:94:
d1:cc:34:c8:ff:e4:53:4f:0e:2e:06:3d:2e:f8:89:
0e:fd:52:bc:94:6b:b5:bb:86:8a:77:3b:37:c7:c1:
fb:e3:82:75:ee:20:d4:4f:68:a4:7c:cd:b6:2f:4a:
66:4a:1d:3c:6b:91:9b:1e:2e:db:31:3a:98:83:e0:
27:3f:c7:29:0c:c5:94:41:e6:6c:43:4d:db:a9:c0:
a4:1f:15:d7:ce:3c:5f:1a:d0:1c:29:3e:58:53:16:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:AC:DD:5A:09:3A:54:81:79:28:34:2F:A4:B5:E1:23:65:35:D4
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c2:ca:ee:0e:97:79:d3:28:e5:87:11:74:6b:26:20:5b:8c:
32:58:d8:51:9c:c4:6a:c8:46:a1:4c:78:a3:5f:1c:6b:01:94:
41:be:45:be:b0:3a:7c:33:2f:40:aa:b1:18:e4:bd:72:c1:f3:
2b:9f:e7:b4:ad:c1:36:c8:ec:04:97:76:11:73:0f:7f:50:68:
66:18:76:1b:ff:5f:d3:a8:b1:db:f5:83:c8:7d:13:e7:ca:12:
d4:a6:c5:6f:f0:55:f1:ab:bc:4c:29:1f:f0:3f:a4:bf:3f:06:
a7:15:77:a0:ca:d5:0d:d4:79:d3:3f:22:37:f8:8c:9e:18:6d:
fd:b2:3d:72:66:62:b2:a7:33:f7:fb:29:3b:43:77:6e:e5:2f:
cc:d3:98:2d:c0:50:10:c2:3f:6f:49:77:23:92:fb:87:d8:70:
bf:8d:f2:9b:85:97:f0:f0:e0:99:33:d1:fe:1c:3e:22:26:f0:
93:6b:b0:16:1c:01:44:ee:e6:75:5d:7e:63:9f:79:c0:7f:69:
8c:22:23:5a:63:c3:71:53:e4:ec:23:3a:2a:09:c9:58:a6:f7:
47:88:11:40:80:7d:d4:2f:66:ce:ab:db:2a:ce:07:49:e2:38:
d3:c4:3f:36:af:3e:a3:03:a1:de:47:6a:1b:57:d7:eb:73:d7:
15:01:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:00:19 2025 by rpki-client