Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File: ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier: cbU45+9GlNgdfac8qSX3iHrje4RbVhX/+rUuCRKURlg=
Subject key identifier: 47:71:9A:07:B8:82:4A:9C:D0:78:8C:E9:A5:62:58:01:BB:8A:81:FE
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 0196AD6899E3C25E19440AF9A90603B2AF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number: 0C89
Signing time: Thu 08 May 2025 01:00:35 +0000
Manifest this update: Thu 08 May 2025 01:00:35 +0000
Manifest next update: Fri 09 May 2025 01:00:35 +0000
Files and hashes: 1: OJTbvvzGPXknTcn0a0PisGO6RMs.roa (hash: uuBkvJW42/0DIxeQ/apWNWGffvOofFBXJM//FCrkhBE=)
2: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: EptD0KrMK1Vbc6oX9ub8rgzSxxjWdM6tLcp1RL8unf8=)
3: nArRHp-4C_xfVc5I0xzODMyX0Wc.roa (hash: unbAaPNeb8ss923AiSBNv55C1f+CW+UAKQwmAnYXVMU=)
4: ykzqitomWOX9VDgPXh0lfRNIPGs.roa (hash: sexKwZGXJqgH8EP0OUhLDrGvQUeJF4VTHV0LtWwcjpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:68:99:e3:c2:5e:19:44:0a:f9:a9:06:03:b2:af:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: May 8 01:00:35 2025 GMT
Not After : May 9 01:00:35 2025 GMT
Subject: CN=47719a07b8824a9cd0788ce9a5625801bb8a81fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:b5:32:e2:36:25:ed:1c:80:b0:6d:25:3c:
1e:13:01:14:3a:d6:c8:97:74:65:51:d4:ad:46:7a:
28:d5:77:b4:66:80:65:cc:4d:db:ad:95:50:e4:08:
ad:e1:03:09:cf:19:df:86:78:4f:ec:45:8f:9c:bd:
43:2d:46:3c:84:4d:c6:69:4f:1e:e0:fd:b0:ee:7e:
97:f3:d6:3c:42:9c:b2:0a:78:55:db:ed:21:46:41:
08:f0:5d:0f:ab:40:d7:2e:8c:56:7c:9f:cb:b9:67:
a1:e2:24:88:68:74:be:97:91:f6:dc:0a:f6:a8:c3:
d4:c8:19:f8:a6:90:47:fb:58:e6:3d:e2:83:6a:7e:
fe:03:94:93:d0:89:82:e2:aa:fc:27:45:95:46:22:
45:75:f2:ae:0a:c9:2f:b6:1b:ef:60:0d:53:7a:ca:
a3:fb:af:15:c8:48:02:61:00:9d:df:da:2e:fc:f2:
ea:cc:30:a0:21:42:7f:20:c9:83:ba:81:63:f5:ec:
40:fe:76:25:a1:9e:1b:e1:28:a2:c7:64:f7:2d:da:
bb:dd:64:b5:ab:0c:a1:19:f1:93:3a:8c:b6:e1:e9:
1c:3c:38:d2:e2:f7:99:89:43:43:a4:96:02:85:fb:
f8:a7:1f:92:6b:45:a3:fa:ce:c3:0b:8d:2c:c3:a2:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:9A:07:B8:82:4A:9C:D0:78:8C:E9:A5:62:58:01:BB:8A:81:FE
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:90:25:05:b7:c3:97:fe:4a:45:c4:5f:8d:ca:d2:ee:99:eb:
15:a3:09:b8:0c:c8:5c:e2:de:74:cb:eb:aa:09:d8:cd:d6:f8:
8c:7a:a2:5a:46:cb:f1:91:a0:26:0b:d1:87:62:da:a0:51:eb:
4d:1a:be:59:86:06:73:1d:0b:01:2e:d7:c7:70:25:0f:21:18:
44:ea:6f:31:f8:bd:5b:c9:7f:6a:17:70:17:73:c2:35:2e:c8:
75:47:fa:99:c8:2a:f0:30:c8:23:38:d8:60:39:6d:a4:30:7e:
58:d9:cc:df:e2:32:3a:90:41:f7:67:8c:b1:58:fc:ce:7d:70:
d1:05:0d:c2:d8:72:d7:a6:1c:be:90:e3:6f:f2:e0:fd:f1:31:
02:e9:99:8f:20:41:58:b5:eb:3d:d8:2d:75:7a:cf:bd:d5:79:
cd:67:17:60:d6:8c:e1:13:00:42:a6:f5:d2:7c:ee:3a:eb:e2:
76:b7:91:de:13:45:c4:30:89:cd:0c:59:c9:35:7a:e3:1d:dd:
94:74:6d:d3:39:9b:0c:c1:29:69:19:cd:88:09:5f:68:47:4b:
9b:05:66:77:85:e5:e3:90:fb:2b:fc:ef:90:ac:ab:c8:5c:37:
0b:6f:01:d1:77:7d:7f:90:a3:35:bf:19:33:c4:d1:a8:a8:f6:
ce:b4:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:14:52 2025 by rpki-client