Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier: hJhAgiw/KKYZR3cT13ALoIvmRxoCDWRCSsb3d34jSeA=
Subject key identifier: 98:40:EF:77:B4:CE:50:82:C2:13:53:2B:F3:3B:BD:26:C7:E6:E7:87
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 01987A898385634FF0667E067B5BB647DD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 14:01:29 +0000
Manifest this update: Tue 05 Aug 2025 14:01:29 +0000
Manifest next update: Wed 06 Aug 2025 14:01:29 +0000
Files and hashes: 1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=)
2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=)
3: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: 5U/MIJFC9SjxVtbSRn7+0PvBF4QJG4IuEkH5OVc0svs=)
4: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=)
5: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:83:85:63:4f:f0:66:7e:06:7b:5b:b6:47:dd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Aug 5 14:01:29 2025 GMT
Not After : Aug 6 14:01:29 2025 GMT
Subject: CN=9840ef77b4ce5082c213532bf33bbd26c7e6e787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:69:b9:3a:1f:58:10:ab:79:0a:d2:bb:3d:
18:5d:0a:b5:90:49:e7:74:13:1b:f8:74:78:cf:a2:
92:af:8d:78:2e:de:59:98:50:be:ef:07:8b:c5:65:
ed:aa:0f:b4:9f:75:3b:ac:ca:92:06:42:b4:f4:d3:
7e:e3:ab:a4:0a:13:f4:e7:15:73:b0:6d:f1:66:37:
a9:b1:70:85:14:bf:88:97:9c:9e:c2:6a:9e:30:6d:
06:8e:22:72:c4:64:fe:29:13:8a:4f:15:1d:39:78:
7e:d8:03:3b:13:a8:65:56:36:14:37:88:7f:38:d7:
79:6c:a4:6c:b8:3b:6d:ea:00:08:3b:6c:f3:23:80:
92:60:23:33:47:21:bd:d5:35:69:0d:d5:d1:b2:eb:
9a:c0:09:d3:a6:0c:42:a8:cc:46:81:c5:7a:d3:c7:
24:98:78:4e:de:f5:0a:b6:5c:58:36:36:c3:b3:1c:
eb:94:d1:fb:67:e4:5f:d4:c3:42:7f:95:38:a3:9a:
a3:ec:c0:37:88:a2:67:71:3f:e0:29:40:d8:55:8b:
54:65:6f:33:e5:6e:c8:fd:4d:c0:e9:67:31:71:a3:
cc:6b:5c:10:4a:b9:9d:db:ff:3e:e1:69:52:5b:d2:
1e:59:a9:ef:8c:3d:88:77:a5:5e:d1:fc:ce:a7:3e:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:EF:77:B4:CE:50:82:C2:13:53:2B:F3:3B:BD:26:C7:E6:E7:87
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fd:db:e6:6a:4e:23:d3:d3:8b:b7:26:d8:be:c9:46:33:cb:
7f:ce:fe:93:f0:55:20:91:15:3d:a0:ff:4b:29:aa:e2:9b:22:
7f:d4:0a:a7:f3:15:74:1b:95:8c:9e:79:6c:3d:c6:6b:c9:4c:
59:4d:4b:d5:98:39:16:c2:2d:f0:77:b0:c2:55:da:17:9c:12:
b7:8d:7c:d8:29:a5:d9:81:0b:2b:4c:38:e9:bc:63:92:92:2f:
81:ed:52:c7:58:33:58:2e:b2:53:b6:43:4b:0b:34:2d:2e:b1:
6c:48:a1:26:7e:9f:8e:33:b6:41:3b:12:d7:9f:79:f4:bd:a7:
75:e3:c9:18:e0:1a:f2:5c:40:dd:89:e0:a8:19:f7:c6:82:33:
29:9a:4d:0a:64:69:de:d7:db:27:de:de:ca:63:89:5e:28:5c:
1b:6c:67:ec:83:60:e8:2f:18:20:29:e6:5b:9c:f9:e6:2f:e3:
5b:c1:a0:94:0f:54:4a:bc:1e:92:62:4c:39:c3:82:ed:66:08:
60:e4:5b:da:01:a6:eb:7a:b6:8d:ff:35:10:b2:22:cf:f2:2e:
18:ab:e1:fc:f1:d6:6b:3c:d0:d6:5a:19:a4:e2:d2:02:78:37:
d0:76:d0:7b:36:d9:fc:df:90:ef:3e:e4:e7:38:d9:3a:43:12:
a4:6e:cb:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iYOFY0/wZn4Ge1u2R90TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjFkMGRiZTA5M2M3MjIzNTA2MThmNDA0NWMyNWJhOTQz
MTdmODcwHhcNMjUwODA1MTQwMTI5WhcNMjUwODA2MTQwMTI5WjAzMTEwLwYDVQQD
Eyg5ODQwZWY3N2I0Y2U1MDgyYzIxMzUzMmJmMzNiYmQyNmM3ZTZlNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKhpuTofWBCreQrSuz0YXQq1kEnn
dBMb+HR4z6KSr414Lt5ZmFC+7weLxWXtqg+0n3U7rMqSBkK09NN+46ukChP05xVz
sG3xZjepsXCFFL+Il5yewmqeMG0GjiJyxGT+KROKTxUdOXh+2AM7E6hlVjYUN4h/
ONd5bKRsuDtt6gAIO2zzI4CSYCMzRyG91TVpDdXRsuuawAnTpgxCqMxGgcV608ck
mHhO3vUKtlxYNjbDsxzrlNH7Z+Rf1MNCf5U4o5qj7MA3iKJncT/gKUDYVYtUZW8z
5W7I/U3A6WcxcaPMa1wQSrmd2/8+4WlSW9IeWanvjD2Id6Ve0fzOpz4bvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhA73e0zlCCwhNTK/M7vSbH5ueHMB8GA1UdIwQY
MBaAFBDx0Nvgk8ciNQYY9ARcJbqUMX+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYt
MmYwYTZiZGJiZTUxLzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYtMmYwYTZiZGJiZTUx
LzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGf3b5mpO
I9PTi7cm2L7JRjPLf87+k/BVIJEVPaD/Symq4psif9QKp/MVdBuVjJ55bD3Ga8lM
WU1L1Zg5FsIt8HewwlXaF5wSt4182Cml2YELK0w46bxjkpIvge1Sx1gzWC6yU7ZD
Sws0LS6xbEihJn6fjjO2QTsS15959L2ndePJGOAa8lxA3YngqBn3xoIzKZpNCmRp
3tfbJ97eymOJXihcG2xn7INg6C8YICnmW5z55i/jW8GglA9USrwekmJMOcOC7WYI
YORb2gGm63q2jf81ELIiz/IuGKvh/PHWazzQ1loZpOLSAng30HbQezbZ/N+Q7z7k
5zjZOkMSpG7Lcw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:45 2025 by rpki-client