Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: k3ye0ERHxqg2+758cn7CORZQukBx2SPmAvBG0ZnFi9Y=
Subject key identifier: 8C:9C:0F:F0:51:C0:9E:DF:3A:17:65:F7:45:AF:A9:9E:C5:51:95:11
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 0197B74590FD6B62B40737F83B6F8DCA4547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 07AF
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: 1-zD-VP--H8n0NROM6_MEnlnoArY.roa (hash: nJouFHvYIjsuEwuLWeuvNkKf+hqux6O1NRmsIOTPhUc=)
2: 1heB0YuNq-USGUveTj29qvEG1XU.roa (hash: 0NZHYUEHQ1C7qLoCH8KkLUBz6NfTEtAiQEDR0MzkAeo=)
3: CXfl0vZF1sbQq93reOXuNh2tfq0.roa (hash: ouJvYI4QUtdTBIQDtkd9tLF9CepiUn3okCMjYpiyZEI=)
4: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: yCi9t2Jj91E+V+RAJ/pyP54Gf2h6MFhi/ZbtRqOuLao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:90:fd:6b:62:b4:07:37:f8:3b:6f:8d:ca:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=8c9c0ff051c09edf3a1765f745afa99ec5519511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:4d:8f:1e:63:07:39:2a:4d:91:19:fb:81:
5f:58:51:1a:78:1b:6b:fd:ef:84:09:76:7a:55:41:
28:b1:2d:c2:9a:6d:8a:7d:b6:6b:dd:25:c2:37:c9:
94:e2:75:e8:d8:d4:da:40:86:49:29:af:dc:e0:0b:
04:b5:70:47:ba:51:4b:19:99:a6:e4:4e:cf:f6:3f:
db:09:1a:23:03:1e:30:31:1e:ca:64:93:28:4c:3a:
52:f3:f5:93:fd:b3:e2:2b:cd:f6:c1:f9:c3:4e:58:
e7:f3:d1:09:c1:61:6d:48:8b:2c:40:16:2f:72:60:
e3:8e:52:93:2f:6b:50:6f:e8:71:75:43:da:24:ee:
0e:c4:0f:07:61:81:f0:21:26:54:6d:5d:48:71:ea:
21:e0:29:8e:db:ee:56:da:13:a8:63:de:2c:49:45:
e6:59:a9:9e:03:b3:01:74:30:bd:d5:82:1e:73:e4:
b5:50:77:81:ff:50:cc:a0:27:71:e4:8c:e6:6b:e7:
95:6a:1c:48:5d:51:7b:f1:ad:23:db:a7:47:90:9c:
26:3e:db:4f:4f:00:1a:25:61:75:66:a4:0d:fc:d2:
08:fe:38:25:17:73:80:bc:fb:87:a5:6d:65:c1:7e:
01:0d:92:4a:07:c7:54:1e:a0:3e:6e:f7:02:fd:ae:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:0F:F0:51:C0:9E:DF:3A:17:65:F7:45:AF:A9:9E:C5:51:95:11
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:65:41:5c:f3:e8:02:04:04:d4:b1:18:c7:ee:0e:54:be:55:
06:96:c9:04:29:ad:e3:dd:69:d2:16:af:00:c7:87:2e:9f:9a:
4d:06:2f:65:1b:df:a9:02:2f:c0:35:e4:c4:0c:0b:fa:44:20:
b2:9e:4c:a9:9a:27:47:e4:84:c9:f8:56:f2:e0:1c:ca:b4:07:
39:21:7d:44:b6:0c:f5:dc:52:13:99:7c:df:e1:c1:a7:02:46:
fb:31:54:8b:01:64:9e:ac:ff:11:e8:b7:62:ce:67:45:36:27:
79:78:0d:29:8c:5f:59:60:f6:3c:dd:f6:f2:23:2f:5e:76:45:
5d:cf:76:ae:5c:e6:3a:e5:30:06:33:27:f8:7e:90:a6:f9:95:
c2:e8:1f:b1:02:5b:5a:a0:75:69:86:c9:e7:6e:6f:c7:08:46:
fb:24:1a:12:93:b9:92:cb:a3:d2:6c:e9:a5:c2:bf:fb:25:86:
f3:5b:66:54:e2:1e:18:e4:5b:70:ef:86:38:d3:0b:b5:a5:e7:
05:b4:00:ed:fb:e8:e3:11:5a:8a:f3:75:8f:53:4e:b9:e5:4e:
e6:05:f8:fb:35:b0:42:24:17:dd:0f:79:79:d8:d0:42:00:b5:
3e:1c:5b:5f:3d:f0:21:3a:ad:97:6b:38:cd:b3:ff:50:7a:e7:
31:e3:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:27 2025 by rpki-client