Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: eVxhj45YNUKIaJ1nRnk0hfqfjnJxKDdK3pxBeZ5cR3w=
Subject key identifier: E2:F7:40:C5:12:7E:DC:46:EE:2A:B4:C8:48:E3:F9:B5:6F:21:A9:C5
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 0196A8E6BE53E4A7E509FCEFD4770F2C3729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 0723
Signing time: Wed 07 May 2025 04:00:16 +0000
Manifest this update: Wed 07 May 2025 04:00:16 +0000
Manifest next update: Thu 08 May 2025 04:00:16 +0000
Files and hashes: 1: 1-zD-VP--H8n0NROM6_MEnlnoArY.roa (hash: nJouFHvYIjsuEwuLWeuvNkKf+hqux6O1NRmsIOTPhUc=)
2: 1heB0YuNq-USGUveTj29qvEG1XU.roa (hash: 0NZHYUEHQ1C7qLoCH8KkLUBz6NfTEtAiQEDR0MzkAeo=)
3: CXfl0vZF1sbQq93reOXuNh2tfq0.roa (hash: ouJvYI4QUtdTBIQDtkd9tLF9CepiUn3okCMjYpiyZEI=)
4: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: StSQKj5+GBlOeM5ykQTpTpqxjDIKER7z171cDZ8NkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e6:be:53:e4:a7:e5:09:fc:ef:d4:77:0f:2c:37:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: May 7 04:00:16 2025 GMT
Not After : May 8 04:00:16 2025 GMT
Subject: CN=e2f740c5127edc46ee2ab4c848e3f9b56f21a9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:47:49:a6:e4:38:ff:5e:f3:c0:20:e3:5e:
fb:9f:86:0b:c6:65:f5:11:33:14:eb:24:33:8d:5e:
a2:e3:02:89:f2:81:0e:29:b0:3d:67:3b:28:74:c4:
d4:eb:35:01:19:e6:3e:12:5b:fc:25:4b:c5:a1:85:
31:04:03:62:07:81:b0:f6:1b:7c:1a:11:0c:4d:7d:
d7:bc:8a:dd:3e:e7:d6:43:f9:9d:f3:ce:3e:00:58:
b3:ed:8e:f5:11:ab:27:31:4b:c8:12:3a:fd:9b:5b:
ad:fb:73:bb:00:28:37:b1:2e:f0:c3:12:9d:c2:07:
6b:5a:bc:b9:1b:5c:5a:ce:44:c5:eb:cf:4c:a1:29:
41:b3:11:0a:18:c9:9a:f8:f8:ea:17:2c:78:77:26:
b3:43:a1:11:a5:8c:df:ba:5e:61:95:48:51:15:cf:
b9:9a:57:e0:ae:ca:2e:25:fb:13:cf:1d:71:91:53:
a5:48:a4:58:eb:ad:74:83:49:ab:2a:80:f7:ec:88:
4f:df:5a:04:56:7c:0b:9d:dd:60:c5:98:a2:ce:e0:
e2:43:ff:38:cf:53:ef:41:8f:e8:8a:3a:56:ae:06:
9e:88:77:04:7b:83:94:ff:30:8f:14:43:86:d0:fa:
86:47:77:84:12:09:80:ef:90:91:95:af:46:1e:f4:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F7:40:C5:12:7E:DC:46:EE:2A:B4:C8:48:E3:F9:B5:6F:21:A9:C5
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1f:cd:81:69:da:11:89:c6:d7:18:13:db:e5:55:3c:17:5e:
e7:30:d7:29:b4:42:6d:fb:46:c7:19:f7:05:ac:bc:15:ce:d8:
2f:2a:f6:1b:90:e5:6f:63:b5:e2:a9:59:48:7f:7a:53:5c:ad:
e3:76:e3:da:42:ae:f8:de:28:1e:eb:49:b6:b3:4d:0b:65:81:
9c:c1:79:39:88:7f:ed:46:f2:39:84:b5:c0:03:e7:fd:24:b8:
4b:70:d0:9f:37:74:d4:4f:b4:a0:51:14:6e:f9:39:c4:01:99:
24:fc:18:c0:8b:86:8f:c0:2b:7b:d5:ae:bd:22:c1:6a:33:c6:
52:60:14:f0:5a:7d:6e:1f:f2:98:3b:d5:96:07:62:f5:f7:cf:
0a:a6:7f:87:77:48:50:e6:61:53:0b:f3:b6:4d:3d:28:46:84:
46:01:a1:93:63:95:6d:a1:67:47:f5:62:65:8e:5e:3a:23:a8:
19:a3:20:67:3f:26:3c:6a:07:ce:60:0b:b9:d3:41:6d:e0:ec:
c6:2c:37:ce:75:40:73:83:b7:f2:4b:ce:23:ba:e4:46:f8:a3:
cb:92:dd:ed:e5:9e:55:2e:03:99:1e:ef:47:8a:f4:87:f0:6c:
d4:80:62:0e:8f:29:c5:82:67:03:f8:c9:8c:fa:5d:34:7e:8c:
3d:62:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:29:54 2025 by rpki-client