Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier: tjQO5znWNg1QxpqVLZUE32RuxiET7m8ZACp77fz5OLA=
Subject key identifier: B4:3A:BF:4E:2F:BA:6F:98:30:5F:81:9A:E6:58:F9:0C:C4:67:F7:ED
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 019A4FD093E72DD411337718A45075DCFB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number: EE
Signing time: Tue 04 Nov 2025 17:01:00 +0000
Manifest this update: Tue 04 Nov 2025 17:01:00 +0000
Manifest next update: Wed 05 Nov 2025 17:01:00 +0000
Files and hashes: 1: DyDiidWZS3iA7B2blKmA9bXsSRk.roa (hash: 8Th9ZjmszvDIlprvR+a1tMmoJ0kkYSailEtQfsqFMeY=)
2: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: 0tYc3mgolCt5TQzhBblMbu7NGsgrozTB6814CIEaj7Y=)
3: EZZjtsRZB4At2QcIZcqmfQeU5tg.roa (hash: vbbShe8wdndeEL7lS6dm5FZSSpF2qDaTf1tgRMD7QrU=)
4: L6E0N5We5qeZ-y9d2NJMforAByY.roa (hash: ZYC/BS1PJtF8W5Ev9dV+L5Rd8Gl/CdhyxKHOzd5pCTw=)
5: YaE-516tO0-vxtzgzUQCVeYa6sM.roa (hash: yKU5PrBmHLHt75hheXsS4PIrNLFdDNALNLqvpMN9xYM=)
6: sb-GCH9IlUVV1HBTwu_2sGH00L8.roa (hash: NIEwuhjNP7AJ1aGJG2ysJUL1eP2V5WuknrN1zsvlhbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:93:e7:2d:d4:11:33:77:18:a4:50:75:dc:fb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Nov 4 17:01:00 2025 GMT
Not After : Nov 5 17:01:00 2025 GMT
Subject: CN=b43abf4e2fba6f98305f819ae658f90cc467f7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:67:c2:26:13:64:66:32:97:a1:e0:8e:54:
63:12:98:85:6b:c7:e9:f0:19:d8:10:e5:0c:c4:1e:
3e:3f:40:54:72:9e:73:14:ce:a4:3b:2c:41:ed:dd:
69:07:94:92:93:d5:a2:9d:d5:1c:41:92:2d:31:66:
6d:a2:ba:e0:6e:7f:c8:c9:2a:a6:90:51:ac:31:c4:
21:50:7e:53:45:8a:5c:e9:0c:31:94:92:b8:77:a4:
f1:03:3e:cf:5e:16:74:26:d7:da:0b:5a:fd:0b:fe:
d5:5a:0c:92:04:ca:84:b4:3f:b4:b1:90:41:bc:68:
2e:06:26:cf:09:ff:bb:8b:be:e4:43:aa:5c:eb:10:
d6:0d:94:0a:2f:f4:48:8e:34:ed:5e:54:07:12:4d:
4c:d0:2e:d3:f0:b2:aa:e8:4e:e6:11:2a:55:40:3e:
99:e5:0c:f8:c1:62:19:e1:6b:a1:b8:0a:4f:3d:e3:
50:9d:cc:96:3e:51:35:8a:94:91:cc:eb:d2:65:24:
0a:ff:91:5d:39:9e:18:7b:e1:44:b3:f9:c5:f5:70:
14:86:43:12:d3:58:77:c2:32:9f:a3:6c:d3:0f:84:
ab:a5:27:f5:c3:7c:2d:ad:71:67:ac:0a:2f:0e:3f:
2b:d0:21:c9:50:97:84:ff:fe:cb:0b:5c:8b:47:05:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3A:BF:4E:2F:BA:6F:98:30:5F:81:9A:E6:58:F9:0C:C4:67:F7:ED
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c4:d8:ac:63:e8:a6:39:e4:df:aa:a7:75:1a:ed:60:09:2c:
2c:7c:45:e9:97:b1:26:fa:50:8d:bb:b8:6e:82:bd:64:6d:f8:
58:9c:dc:f5:e4:7a:48:3d:da:09:2d:ed:f2:39:ce:7c:ca:48:
36:c9:05:62:f1:d8:d9:1e:18:18:c9:5c:10:f3:d5:ac:31:d3:
c7:bc:ad:6d:3e:bb:73:5d:4f:a9:6c:7f:cf:83:53:b0:83:aa:
52:a6:4c:15:73:50:6d:c5:5f:0a:f8:4a:9d:7c:b4:74:fd:e6:
e7:98:c3:f0:50:38:a8:39:ad:b8:29:f9:5a:cf:23:07:c5:a4:
4e:48:94:af:2f:8f:a8:01:87:2a:4a:22:94:f3:40:8a:cc:5b:
20:1b:6e:14:17:c9:26:0e:c0:ea:a7:ad:00:89:30:11:1d:5b:
61:9d:61:ae:12:a9:d1:53:ef:20:32:7c:a1:5c:9a:41:1a:b8:
11:ac:4a:3d:60:b9:bd:12:d1:a9:08:27:dc:46:db:24:6e:34:
dd:54:90:42:d5:39:b8:f8:04:1c:45:44:a3:b1:de:0f:d6:2e:
8c:ab:3d:f2:77:c5:55:77:87:5c:40:9b:1a:26:f4:d8:02:c1:
75:35:11:e4:9f:a2:eb:f3:4a:6f:2b:fa:34:28:3e:bd:0b:1a:
40:d8:ab:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:28 2025 by rpki-client