Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: QE+g2owg+sNrMx5ZNQ9Mw2B5PXXs9eWP2Yt1PCZ7ZYM=
Subject key identifier: 00:4D:18:A8:F5:92:6C:27:39:0E:7F:76:E6:AB:EE:ED:12:94:B5:7E
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 01969F7601F875A04B20E99A68A6775B94AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 119C
Signing time: Mon 05 May 2025 08:00:33 +0000
Manifest this update: Mon 05 May 2025 08:00:33 +0000
Manifest next update: Tue 06 May 2025 08:00:33 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: 1UBa6GLP8ZTN4NdQP+qDOmY/VV8dWYxsfRBIrP26U2Y=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:01:f8:75:a0:4b:20:e9:9a:68:a6:77:5b:94:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: May 5 08:00:33 2025 GMT
Not After : May 6 08:00:33 2025 GMT
Subject: CN=004d18a8f5926c27390e7f76e6abeeed1294b57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:e4:87:8d:16:5e:3e:9f:4e:89:d7:c2:38:
04:ff:11:22:f1:85:a4:60:d8:ff:0f:de:50:32:46:
6d:7e:39:1a:0a:c3:a9:9c:1c:03:48:be:2c:71:02:
26:5d:a0:92:7a:01:78:66:21:3e:70:27:2e:16:b2:
55:38:1e:b4:96:2e:53:b0:e1:2c:8d:f7:94:9c:94:
00:e9:93:4c:84:86:05:ff:df:91:14:d4:fd:a3:4b:
8d:a9:99:0c:c9:29:aa:da:7e:1a:d6:96:6f:4b:e4:
86:6b:45:99:68:98:77:22:f6:9c:ed:0b:d3:8a:d2:
24:d5:5d:74:aa:ee:a4:25:18:8a:9c:87:42:91:df:
db:27:7b:bd:47:86:00:85:58:24:11:2d:c2:0f:03:
7c:8a:92:75:e3:16:19:33:8b:84:3b:53:02:35:d2:
58:ce:a3:84:9b:0b:35:fb:b0:81:8c:e1:a4:c0:e4:
7f:6c:00:f2:c6:7a:30:fc:44:9f:d4:31:96:01:da:
5e:6f:79:4a:8d:76:90:70:a2:ba:d8:df:94:e0:ed:
48:e9:16:45:0c:26:37:bd:25:a1:56:65:4b:e7:d5:
62:8d:8c:31:03:61:55:2a:ff:19:e0:ff:2b:73:3c:
21:a6:dd:9f:63:41:fe:66:14:39:dc:35:39:0d:17:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4D:18:A8:F5:92:6C:27:39:0E:7F:76:E6:AB:EE:ED:12:94:B5:7E
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:67:78:46:17:80:42:6b:b8:57:e3:c3:14:01:e4:eb:b2:b6:
2b:1f:37:38:32:80:63:87:e5:b0:8a:48:83:96:e0:98:67:19:
11:59:de:c5:8f:0a:f7:9e:92:8b:a7:cd:66:c2:04:c8:ca:de:
43:25:a1:15:4a:1c:af:3e:3d:9d:69:c2:a6:eb:39:c1:7f:da:
1f:ed:2d:ca:82:85:a6:de:bd:ae:39:80:fb:2d:41:65:a2:c9:
4b:3e:fb:1f:d6:fb:bb:42:69:ec:24:bc:4f:a9:80:0a:ba:e9:
dd:ee:8c:f7:8a:41:e2:7b:1c:c6:c7:54:e9:e6:4a:16:d3:4a:
5d:c4:ee:43:24:ac:1d:21:ee:1f:c3:38:c8:b2:48:b6:2f:61:
98:09:5d:c2:71:37:94:d3:04:b0:70:32:29:c3:57:c4:5a:05:
d1:5f:9b:42:fa:f4:44:60:17:8d:2b:f0:64:d2:b9:cd:31:0e:
fa:d5:07:5a:c4:ac:2c:dc:56:70:a0:24:b4:13:3d:8b:97:32:
7c:fb:75:73:18:87:49:de:7a:19:99:12:89:e3:85:5c:ce:f9:
39:a6:36:21:7a:6f:5f:8c:07:9c:bc:00:7a:c7:05:f4:a8:bb:
a5:2a:ed:70:92:a2:51:65:fa:86:3d:82:41:1f:46:c8:77:08:
8f:4c:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:45:48 2025 by rpki-client