Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: mbLLR65Ili3Ieagln2C8Y5RpV0tpZ33MEu37V80b+x0=
Subject key identifier: 24:CD:E5:42:EB:F3:2A:7B:FE:0E:55:BF:C8:B1:86:DB:51:71:43:26
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0198819E1FBF2723D23A2C39BB4F48528A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 23:01:20 +0000
Manifest this update: Wed 06 Aug 2025 23:01:20 +0000
Manifest next update: Thu 07 Aug 2025 23:01:20 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: AUzfCJTQOyE4OzAgZh0vmRLcSoGZAhXFoIETJhW19kw=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:1f:bf:27:23:d2:3a:2c:39:bb:4f:48:52:8a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Aug 6 23:01:20 2025 GMT
Not After : Aug 7 23:01:20 2025 GMT
Subject: CN=24cde542ebf32a7bfe0e55bfc8b186db51714326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bb:18:b6:a2:bb:ab:1f:93:3d:bc:9b:86:1c:
0e:99:10:fd:ad:1a:72:0c:4a:af:6d:ae:d9:7b:53:
73:33:da:c3:9c:c6:72:91:5e:43:e4:d5:c5:e4:f5:
68:e6:e2:0f:75:03:f1:f0:cc:63:41:08:47:af:92:
90:cd:2c:3a:1d:ca:04:42:df:51:f1:5e:0e:a9:9c:
7b:0d:ad:d5:57:40:2c:61:bf:ab:48:21:3e:ab:14:
85:d7:bf:d8:d2:db:ed:f3:de:65:da:44:7c:a7:83:
91:ae:0c:15:98:27:21:e1:eb:da:81:27:bb:ba:4d:
23:78:bb:9e:fe:e9:a2:79:b0:e8:f7:82:47:71:0c:
cc:98:e2:f5:f3:2e:53:03:bc:1b:0a:5f:4e:9f:4c:
b2:1c:ac:5d:57:4b:6c:1c:7b:9b:40:2b:d0:64:94:
2d:ec:1f:72:b3:9d:d8:03:49:2a:73:89:d4:86:ae:
b2:95:6e:47:56:64:b1:e9:54:c9:64:36:15:68:94:
21:f9:f5:fa:bd:2d:30:30:05:e1:56:47:c3:cc:fd:
e4:8c:99:4f:2f:f6:ff:25:94:50:d1:9c:f1:49:bc:
30:2c:d7:ba:c9:c2:36:ff:b0:97:08:53:4f:e5:fa:
cf:05:ad:78:4c:85:e9:d5:6a:19:a5:d0:3b:ee:a3:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CD:E5:42:EB:F3:2A:7B:FE:0E:55:BF:C8:B1:86:DB:51:71:43:26
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:82:7f:6a:89:e1:e0:8b:7a:39:26:18:b9:55:f9:73:98:
4a:69:73:6d:4f:b8:80:18:18:e4:e4:e1:c9:f1:7c:05:4e:69:
3e:45:74:34:e7:ea:f1:8a:04:3b:83:a8:9d:6e:63:c1:aa:11:
a4:fb:3f:68:bd:ea:8b:e0:11:7f:3e:8b:2e:23:a2:08:ec:ef:
83:43:a9:bd:43:38:ed:fa:81:86:92:e0:bb:19:ae:65:6f:b1:
33:28:cb:0d:8f:9f:8a:7e:2c:81:34:cb:30:ea:13:a0:3f:28:
23:57:7e:1e:2e:bb:41:f1:a9:d1:5f:62:fd:7c:7c:49:6a:6d:
74:66:e0:65:c4:83:01:5c:2b:be:98:bc:79:a6:98:6c:5f:0a:
4c:c4:26:c3:db:be:09:db:48:ed:12:ee:43:5f:42:6e:35:06:
48:5a:50:ef:d8:a4:fd:95:2b:0b:cc:a3:91:9d:8b:da:44:cd:
9e:44:b3:39:1e:9a:c1:a0:58:0c:f9:44:51:cb:d6:6c:4e:02:
13:1a:00:5b:98:58:eb:eb:33:e8:67:43:7d:6f:fe:02:1b:d1:
c4:f3:35:d9:db:70:45:4c:28:98:3a:76:3d:84:18:a9:30:3e:
19:32:c0:3f:fa:44:ec:56:bc:90:ca:a9:b7:08:84:2b:cf:82:
e0:53:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:30 2025 by rpki-client