Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: 4aGfEtyfbKf9nmPQmfkTW2hs2TBonOJMnsYr1vXLTi4=
Subject key identifier: 3F:4B:AA:22:0B:65:4B:B2:E3:C1:DA:34:7B:06:18:B1:4F:69:5D:72
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019A4FD019612835E4D5C9D9325FAAA452D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 1385
Signing time: Tue 04 Nov 2025 17:00:29 +0000
Manifest this update: Tue 04 Nov 2025 17:00:29 +0000
Manifest next update: Wed 05 Nov 2025 17:00:29 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: lcJVhl49au2STpM8feZ+9aKUQIIh9Kp5cW5yXFpNy3I=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:19:61:28:35:e4:d5:c9:d9:32:5f:aa:a4:52:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Nov 4 17:00:29 2025 GMT
Not After : Nov 5 17:00:29 2025 GMT
Subject: CN=3f4baa220b654bb2e3c1da347b0618b14f695d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:33:16:ed:63:0a:37:7f:73:91:e4:6a:47:
1f:bc:38:ea:a7:07:ca:6d:4a:c1:9e:5c:18:f8:f6:
7e:4b:ef:a4:f5:39:51:53:e4:50:85:5c:36:40:83:
7c:0f:2c:0f:f4:72:4a:d2:7f:14:57:cd:8f:b5:ac:
52:1f:e3:85:0f:d0:5f:dc:b0:ad:32:e0:69:3c:85:
53:06:b6:82:62:99:ee:f9:3c:09:15:8a:96:fd:ba:
4c:3c:c0:b2:60:31:8a:2a:9f:35:28:c4:ea:df:da:
62:02:29:af:ba:79:0c:88:2d:51:c9:96:63:2e:62:
93:e6:8e:5d:0b:6a:01:2b:b0:fd:6c:41:86:3f:4e:
ab:19:f2:4e:19:c1:8a:5a:0c:2a:b8:c3:bd:52:2e:
fd:be:f4:dd:da:25:11:d7:57:85:31:7b:e3:18:8d:
0d:ed:00:18:b0:c9:7d:01:1f:27:80:d9:79:c9:a4:
f1:be:a3:b2:71:2e:c7:5b:98:4e:e4:f7:1b:3b:f8:
26:4b:92:78:3a:64:3b:ee:c6:3d:d6:58:de:8b:d2:
27:f3:c1:61:ba:b7:2f:38:0a:d1:75:7b:9e:fe:83:
2a:25:ce:d3:4d:48:ed:2c:41:26:ce:04:9a:87:03:
c5:67:0d:23:24:20:1c:6f:73:86:66:ed:58:a9:c0:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:AA:22:0B:65:4B:B2:E3:C1:DA:34:7B:06:18:B1:4F:69:5D:72
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:05:bb:b4:4e:49:9a:96:53:b1:25:b7:ea:81:28:d0:22:79:
ab:ee:27:0e:61:06:2b:e1:7d:5c:e1:26:2d:a0:0e:0e:be:36:
3a:6c:de:5c:e0:33:fe:d5:93:12:71:01:b8:6b:f3:7f:04:a1:
14:87:97:27:e7:fe:e2:85:ff:f9:e5:fe:a3:92:a4:b8:a9:9b:
8b:73:01:4c:da:9a:1b:d3:46:bc:ad:2a:f4:b1:40:f4:9d:df:
d6:0c:f4:08:c7:1c:66:a3:47:6b:b2:cc:2d:2a:9f:bf:84:ff:
fa:cd:ee:0f:e9:2d:75:38:6d:b8:d9:2f:06:55:4d:b6:a8:fb:
b3:04:35:90:ac:1a:46:49:60:53:bf:8f:b0:28:95:32:c7:97:
2e:f3:44:67:55:bd:f6:63:33:a7:66:4f:c7:b5:3c:f0:b4:61:
72:ca:e5:0c:7d:d8:e0:d5:e4:1a:40:90:9a:c7:b0:9c:00:2a:
7e:8f:13:16:b0:95:ba:20:84:e9:26:77:29:6d:b4:d5:d1:90:
a4:1a:80:a0:19:7c:b8:60:4a:01:0f:76:35:40:47:7a:b3:25:
ff:9e:c9:ea:9e:77:2a:4f:e7:af:d7:59:59:b8:1b:7c:a2:45:
c4:04:52:ca:bc:52:7b:a8:57:68:a9:59:b3:3a:81:bb:25:c8:
c4:97:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:32:27 2025 by rpki-client