Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier: X/86nqO8l1csj4XssSqyD2W1JdGE3PUk5ZhJeaUN3FQ=
Subject key identifier: 9C:1C:CA:92:4A:65:8A:DD:B1:97:23:8A:63:A3:72:76:E4:C8:D5:BB
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 0197B77C37C854CBE0AADAC0D64C373FC0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:00 +0000
Manifest this update: Sat 28 Jun 2025 17:01:00 +0000
Manifest next update: Sun 29 Jun 2025 17:01:00 +0000
Files and hashes: 1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=)
2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=)
3: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: vEsvWfZPW5KWWcRtfoSzeyJmQiCaC8AcBpmH7Lu/YnI=)
4: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=)
5: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:37:c8:54:cb:e0:aa:da:c0:d6:4c:37:3f:c0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Jun 28 17:01:00 2025 GMT
Not After : Jun 29 17:01:00 2025 GMT
Subject: CN=9c1cca924a658addb197238a63a37276e4c8d5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:10:71:32:4e:2c:a8:b8:e6:36:18:a3:ec:
5b:49:be:0e:65:f9:48:21:b5:f8:ae:41:1f:23:17:
8f:54:c8:56:e7:ef:bc:0b:d8:09:30:02:81:86:7b:
43:0b:ca:03:a8:37:16:0d:80:a0:e4:f5:65:22:23:
d8:50:99:95:5b:d1:92:bc:1e:e9:1c:52:56:be:d6:
9e:db:f0:b6:ae:0f:9c:f1:ef:88:54:54:d3:51:96:
37:9a:b5:d0:c7:88:97:69:75:a9:e3:ec:38:1e:53:
a7:a2:75:de:ea:f6:cd:ff:fe:34:cf:b2:d8:ed:d9:
3d:67:90:ae:78:c4:8b:dc:a4:8d:80:1a:95:e0:b3:
ea:09:51:44:a3:4b:bf:db:8a:8f:14:48:9b:68:af:
8b:8e:6c:7c:3f:6b:4d:cc:c8:3d:d9:8b:77:e6:56:
0e:a4:cf:b1:39:5a:96:37:de:f1:ad:98:8b:f1:66:
b4:e0:a8:d4:ad:83:15:d0:32:7c:d7:b8:cf:1b:d6:
6e:18:16:b8:71:db:f5:f9:13:9c:fd:44:b5:9f:a5:
8c:bd:b5:7e:23:f3:d3:d2:c3:21:5f:ef:e9:a2:60:
d4:2f:4b:6f:80:73:90:08:57:55:45:d1:ef:4f:19:
15:65:0f:4c:d7:a1:5f:bd:48:e3:aa:ef:72:f0:70:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:CA:92:4A:65:8A:DD:B1:97:23:8A:63:A3:72:76:E4:C8:D5:BB
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ce:5e:b5:f0:e9:9b:93:b0:48:b7:5c:35:75:51:f1:65:1e:
44:8e:9e:58:19:f1:bc:81:78:64:d0:19:e9:e6:a7:b7:35:16:
62:ba:2a:a3:d9:c0:98:2e:7d:81:76:f6:b9:eb:21:b2:bc:94:
2c:e2:1a:15:c8:dd:cd:ee:5b:63:6c:28:26:ac:e6:66:1e:66:
4b:e3:e1:a1:ea:35:5b:85:4e:a3:fd:79:4f:ef:f2:c7:25:88:
ad:f4:35:4b:9c:30:00:d5:50:a3:f5:0e:34:6f:68:21:ce:19:
05:05:b1:da:c7:dc:43:cb:11:d6:a4:d7:fe:70:70:fe:5e:16:
89:8e:7f:5e:d7:86:53:27:87:01:4c:b5:83:a1:12:3b:f2:1a:
ca:e2:ab:b4:07:5e:0e:f3:61:cd:35:ff:fd:cd:4c:f7:d8:19:
10:04:1e:12:0b:e7:e9:db:dc:d8:73:7b:81:5a:1b:4a:5d:b3:
f3:bb:cf:70:ac:ba:1d:3a:e7:a1:13:40:89:83:3d:60:84:3d:
67:d6:ae:50:57:69:7f:cf:ec:f5:48:7d:2f:9e:39:3d:22:7c:
e7:1f:fa:a6:32:00:76:31:41:44:36:f4:43:c1:63:0a:42:e2:
7b:42:5a:a7:f6:cd:fc:45:cb:f4:cc:e7:94:a4:32:7c:0f:c4:
93:a9:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:29 2025 by rpki-client