Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: fpQg8qtG+RRHoGhLpsf8zDiPGuMdbzgN98iY+LxtcAQ=
Subject key identifier: 1E:4A:67:1C:9F:20:18:86:72:81:3B:A4:33:40:6C:C2:47:69:BC:EA
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 0197B77C2AF5B8804BDD1590AE3593D4E666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 122D
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: ksoVggFk7nLxt4yNCJkefGwiHEJ5ga/Piqo5rVVZE74=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2a:f5:b8:80:4b:dd:15:90:ae:35:93:d4:e6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=1e4a671c9f20188672813ba433406cc24769bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:fb:c0:6c:1c:ad:33:7f:05:9d:c4:f9:6e:
5d:dd:0d:ca:9a:23:c8:cd:d5:a6:90:ee:99:d8:6d:
b3:f2:b6:bd:b5:b0:a9:7b:f4:3f:ca:dd:e3:ea:02:
d6:0f:98:ce:07:15:02:88:67:9a:59:c4:ff:25:56:
af:f5:15:a8:0d:05:52:00:f1:7e:72:0b:27:b3:33:
d1:f2:a5:38:92:59:a1:fc:86:eb:6a:d9:0f:4e:ef:
30:5a:48:c7:6e:02:10:62:30:8c:8f:68:01:3b:01:
05:49:b3:06:f7:17:c6:d9:be:c7:c4:f6:74:cf:82:
3e:56:11:2f:c9:6f:ed:58:a9:83:d6:2f:60:c4:47:
cf:33:6d:e4:79:ba:b6:34:1f:a0:e8:fb:0d:6c:b9:
23:89:26:3a:73:63:b4:15:62:62:23:2c:a5:45:05:
b2:26:94:72:74:a5:0d:61:f3:7a:25:59:ef:db:6f:
19:e4:8b:dd:50:22:34:75:ca:39:f5:86:28:6d:c5:
98:ae:a0:46:d3:65:40:af:c6:11:ac:73:94:39:03:
fe:78:6b:13:ea:df:77:77:a8:5b:12:4e:60:0e:fd:
1b:b5:fd:d2:c8:53:db:4d:1d:dc:3b:45:a3:cf:c9:
99:61:a6:a2:5f:45:cc:b3:47:29:73:07:27:72:00:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:67:1C:9F:20:18:86:72:81:3B:A4:33:40:6C:C2:47:69:BC:EA
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8e:fa:75:7b:4d:38:70:f6:2b:6c:9e:14:6e:d3:cd:2f:59:
3d:6b:03:ab:2b:dd:f6:9e:f3:45:ae:7d:5e:bf:cd:3e:a0:ca:
29:b7:d2:d3:12:87:9d:98:31:57:25:b4:66:ad:8a:fa:ab:62:
07:3c:67:37:1e:19:4e:ca:15:36:23:af:4d:39:02:d1:91:dc:
6a:9c:b5:4f:9a:31:18:f4:d7:aa:bc:d1:ef:a2:98:fa:7e:91:
c3:5a:4c:48:e4:a2:79:88:66:c0:04:56:cc:e4:1e:b8:0e:5e:
b3:b9:8e:d0:e2:f7:0c:40:b8:b2:db:45:2f:4f:70:f5:a6:c5:
b8:62:fd:f8:f8:43:83:4f:1d:62:71:fa:43:c9:fc:cf:52:f3:
ed:fe:b5:f2:82:b2:7d:93:6c:49:6e:70:89:2f:81:cf:2a:4c:
11:ca:13:cb:af:c5:87:01:16:a1:b4:ab:95:67:63:1c:67:59:
4f:5b:59:4c:1d:a4:26:b5:b9:40:3b:08:c8:10:23:6c:e5:0c:
af:55:01:22:da:a5:f9:e9:7c:1f:d9:80:5a:08:9e:4e:46:71:
28:93:eb:96:35:a5:a9:a4:12:b7:58:d7:33:39:f1:0d:85:ef:
f9:56:ef:69:1c:02:ce:bb:13:8d:a5:0b:46:26:25:17:a2:bb:
75:a1:0b:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fCr1uIBL3RWQrjWT1OZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFiMzQxNTNkYTBkNWQxMjFjZmY0MzI1OWZjZDllM2Ri
ZmM3ZDQwHhcNMjUwNjI4MTcwMDU3WhcNMjUwNjI5MTcwMDU3WjAzMTEwLwYDVQQD
EygxZTRhNjcxYzlmMjAxODg2NzI4MTNiYTQzMzQwNmNjMjQ3NjliY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtj7wGwcrTN/BZ3E+W5d3Q3KmiPI
zdWmkO6Z2G2z8ra9tbCpe/Q/yt3j6gLWD5jOBxUCiGeaWcT/JVav9RWoDQVSAPF+
cgsnszPR8qU4klmh/IbratkPTu8wWkjHbgIQYjCMj2gBOwEFSbMG9xfG2b7HxPZ0
z4I+VhEvyW/tWKmD1i9gxEfPM23kebq2NB+g6PsNbLkjiSY6c2O0FWJiIyylRQWy
JpRydKUNYfN6JVnv228Z5IvdUCI0dco59YYobcWYrqBG02VAr8YRrHOUOQP+eGsT
6t93d6hbEk5gDv0btf3SyFPbTR3cO0Wjz8mZYaaiX0XMs0cpcwcncgDoWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5KZxyfIBiGcoE7pDNAbMJHabzqMB8GA1UdIwQY
MBaAFHqRs0FT2g1dEhz/QyWfzZ49v8fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTkt
NGRjYjIzZmRiMDZhLzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTktNGRjYjIzZmRiMDZh
LzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI76dXtN
OHD2K2yeFG7TzS9ZPWsDqyvd9p7zRa59Xr/NPqDKKbfS0xKHnZgxVyW0Zq2K+qti
BzxnNx4ZTsoVNiOvTTkC0ZHcapy1T5oxGPTXqrzR76KY+n6Rw1pMSOSieYhmwARW
zOQeuA5es7mO0OL3DEC4sttFL09w9abFuGL9+PhDg08dYnH6Q8n8z1Lz7f618oKy
fZNsSW5wiS+BzypMEcoTy6/FhwEWobSrlWdjHGdZT1tZTB2kJrW5QDsIyBAjbOUM
r1UBItql+el8H9mAWgieTkZxKJPrljWlqaQSt1jXMznxDYXv+VbvaRwCzrsTjaUL
RiYlF6K7daELRw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:16:21 2025 by rpki-client