Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: S7MmQ1xEtA7NK72WYMvNMkFxTDqe50+YY2hQvMgKuc4=
Subject key identifier: D8:6D:17:A7:5C:77:5D:8A:BB:3E:3C:9D:20:7E:91:18:4D:01:8C:D5
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0196A8793B1FA75A24A174921FB40FB863BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 02:00:39 +0000
Manifest this update: Wed 07 May 2025 02:00:39 +0000
Manifest next update: Thu 08 May 2025 02:00:39 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: qR6aUq15ZVRF8gm2KDazgxVg2+Wk9pnv9lCFu++aNVQ=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:79:3b:1f:a7:5a:24:a1:74:92:1f:b4:0f:b8:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: May 7 02:00:39 2025 GMT
Not After : May 8 02:00:39 2025 GMT
Subject: CN=d86d17a75c775d8abb3e3c9d207e91184d018cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:73:c5:76:15:2a:41:20:6a:17:3e:5f:db:
0d:fb:86:de:a1:3e:72:f1:db:10:bd:ca:e0:b1:4a:
4e:50:2a:07:11:88:55:bd:80:ec:ea:29:8e:0e:00:
a3:ba:3b:65:0c:80:1f:67:e9:95:b5:8a:90:01:20:
c6:33:bd:7c:c5:bc:14:81:10:69:e8:67:26:5b:e0:
65:77:07:9a:c2:62:88:85:c5:e0:56:4f:df:5f:03:
fd:9f:4e:2a:76:d5:03:25:b6:a7:a7:b4:92:73:8f:
17:fd:26:35:4f:72:49:e1:8f:8b:c4:88:94:86:13:
65:64:b6:61:55:26:25:91:70:36:07:3e:21:02:54:
04:6f:2c:51:fa:4f:27:28:b6:01:fa:22:81:67:ef:
4c:8d:be:d0:a9:9b:8f:d8:8a:47:c2:86:cd:ac:69:
11:6d:61:e1:db:c4:2b:32:ea:ff:6f:17:b3:6f:59:
b6:b4:37:ff:0d:d0:e5:3b:ff:92:e9:5e:2f:b9:cc:
1a:eb:06:ee:5a:15:99:15:ca:a6:1e:30:8e:68:4b:
bf:de:e7:4e:95:27:f1:a3:05:8c:04:22:0d:be:db:
6b:eb:2e:5d:2e:fb:d5:32:73:f3:b0:2f:49:35:9c:
a7:49:36:5a:bc:c4:96:b0:6e:62:15:fa:f1:34:54:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6D:17:A7:5C:77:5D:8A:BB:3E:3C:9D:20:7E:91:18:4D:01:8C:D5
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:74:77:8a:5d:28:5e:cf:7b:d3:95:81:1e:4e:86:72:0e:63:
8f:18:b8:2f:81:7d:9f:9d:b0:c9:cb:1b:58:b7:50:e4:78:ce:
9d:e6:7c:77:4d:de:7d:ca:b0:71:c5:0a:c9:64:fe:57:e2:0a:
fa:cc:ad:58:66:ed:f8:bd:f8:87:0a:66:fe:44:b2:9a:a7:98:
90:91:14:85:51:0e:b4:57:b6:9c:37:35:fd:fd:2c:34:50:6e:
26:3b:8f:e8:57:6f:49:ed:fa:4f:e0:e1:72:b7:ca:9c:3d:59:
97:2b:80:2d:53:ec:a2:a7:b8:f3:d6:02:ec:af:33:9c:55:f1:
8d:72:6a:6e:74:f0:2e:3c:d0:6b:3c:0e:ca:77:6d:90:44:05:
1f:62:5f:88:0f:6e:9b:cf:a4:9f:14:43:4b:64:54:b4:40:00:
86:36:a9:ff:68:c4:ba:b5:7c:73:e8:1f:86:90:fa:9d:3c:72:
78:1c:5c:f7:90:d2:b8:f9:1f:3b:4f:ca:e1:3d:cd:aa:5d:9e:
c5:53:a0:e9:3a:d0:75:ea:d8:dd:59:68:f1:81:fe:c2:35:d1:
46:9f:87:ff:8c:96:cc:87:95:b6:a0:29:66:77:f4:54:08:a3:
0e:bd:92:76:5f:78:1c:5a:82:3d:a6:6a:38:e7:61:19:79:d2:
b2:c6:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:13:12 2025 by rpki-client