Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: ZnxBM6h88mNBSrEGoZGJvoHnkKGtgjvAC6849YPlkEQ=
Subject key identifier: 8A:A0:FE:5F:ED:06:F5:B1:32:DD:3E:B6:58:F0:D1:DE:E0:22:4E:FF
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0197B6D77BCE0F0D369B3A9CE9D05F5D87D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: A/YXrJfYYp7KLfzENMdzoDsA2Torxa0LRIyZ901rVJg=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7b:ce:0f:0d:36:9b:3a:9c:e9:d0:5f:5d:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=8aa0fe5fed06f5b132dd3eb658f0d1dee0224eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:9f:a0:14:5c:5f:3e:d7:56:0a:f4:89:f3:
d1:d9:31:5c:3a:11:ed:ac:a5:65:75:e0:20:ef:3f:
15:16:9d:af:41:5d:b3:2a:e5:05:cf:bb:77:a7:06:
29:b0:c5:9f:26:c7:e4:2f:23:d6:fd:ed:68:2f:ef:
ae:58:83:a8:3e:8c:db:54:60:9a:6e:ea:68:12:a2:
22:2b:90:db:64:5b:1f:cb:32:ee:b6:6c:5c:fc:7f:
3f:43:29:43:62:56:a5:6d:39:0c:cc:43:b6:85:fe:
93:17:ca:ab:77:5b:6b:37:2e:16:ab:62:e6:6b:85:
f9:43:ad:91:5b:28:e9:bc:c4:d1:a6:ce:d3:36:e7:
91:16:92:88:ab:a6:9e:09:25:df:e9:de:19:55:0c:
0e:c3:7e:62:bf:9a:cb:3d:f8:06:56:49:f1:8f:a8:
fe:d0:aa:f5:89:38:d1:d5:a0:da:91:e5:ff:6d:bd:
8a:1b:3a:7d:48:d7:fe:f7:bb:28:e4:fe:cf:0d:50:
97:0b:5d:e6:ba:9b:67:d5:3f:65:d6:d9:44:85:fd:
dc:f7:7f:95:5b:97:cb:d5:9b:27:44:da:97:9e:12:
9b:cc:9b:70:d7:7f:e8:bf:59:5d:bb:40:0b:e9:ca:
d5:de:75:91:48:c0:4a:dd:be:48:8c:39:fb:64:78:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A0:FE:5F:ED:06:F5:B1:32:DD:3E:B6:58:F0:D1:DE:E0:22:4E:FF
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:f0:16:4e:05:b6:18:9f:a1:72:55:c3:98:34:63:bc:00:
1f:b9:90:4b:b4:e9:8a:10:90:c1:5e:3a:8b:b7:06:7c:13:31:
11:37:70:1c:e9:1a:ae:ad:80:81:b4:58:c2:86:5b:42:28:eb:
b8:8b:a7:37:c1:d3:10:f6:63:24:bc:5d:7e:04:4e:e3:08:3e:
d8:73:1e:a1:14:12:f4:69:8e:a4:d4:f7:bd:3a:89:79:c1:37:
e0:9e:ee:90:1f:68:b2:6e:aa:23:34:48:c5:69:77:40:ce:f3:
f7:7b:3b:a7:ec:2f:5d:13:42:f3:7a:4d:31:79:70:16:11:90:
0a:1d:89:b3:ce:3b:06:36:ae:9b:5c:f2:13:bb:e7:d1:cb:2b:
da:29:b1:b3:8b:05:6c:21:f1:9d:b3:de:f9:86:23:93:90:d9:
81:a1:53:82:9e:6c:05:3f:ae:5d:e2:3a:0e:db:5e:7e:38:18:
41:9f:2b:0d:2b:de:12:fd:f0:b3:67:3a:e2:ae:d8:be:ab:91:
86:f3:eb:a4:49:b8:e4:9b:97:c7:b2:f7:d3:9d:12:37:25:5c:
56:0e:50:75:d8:64:34:94:45:c4:d6:c0:85:a6:9c:51:07:87:
e6:87:4e:25:bf:24:ce:98:9c:f9:d3:ea:03:5e:16:9e:b7:ff:
80:96:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:53 2025 by rpki-client