Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: RiT1VSCHm7HtLKei4WJ7MnmHQg1a5RshyoJDMqJjMXs=
Subject key identifier: 00:A5:2C:9F:AA:B0:E2:A6:E3:0A:A9:1B:EC:8A:77:D5:83:16:85:C6
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019A4F2B8A6182C9323DC8AC4F95D4438CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:44 +0000
Manifest this update: Tue 04 Nov 2025 14:00:44 +0000
Manifest next update: Wed 05 Nov 2025 14:00:44 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: dAW9qZ97Az7QhVAZG5DtBPRJPqA4bs3JHWlTXN/lgNY=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8a:61:82:c9:32:3d:c8:ac:4f:95:d4:43:8c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Nov 4 14:00:44 2025 GMT
Not After : Nov 5 14:00:44 2025 GMT
Subject: CN=00a52c9faab0e2a6e30aa91bec8a77d5831685c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:43:42:b8:63:eb:e3:b6:de:bb:00:d2:a7:
12:2b:e7:84:c1:cc:31:76:2a:e2:74:ad:c4:b0:1a:
61:dc:22:71:44:a7:56:d7:8a:bd:81:66:bb:01:a9:
c4:b0:d5:b7:82:fb:37:38:96:62:eb:0b:62:f5:e9:
2a:bd:d5:26:8c:d4:f6:61:be:79:12:03:fd:92:6d:
0d:3b:62:ba:b1:ed:1c:2c:dc:10:49:34:7c:61:21:
76:48:0a:34:e4:6d:4a:47:5c:9e:f8:9e:c7:c8:46:
07:9f:db:f8:55:19:b7:e7:ba:ed:b1:eb:48:ee:1a:
c3:c9:18:f8:54:bb:a4:07:dc:e3:42:ad:6e:36:65:
72:80:d7:39:fb:41:f4:e4:e4:ea:b9:7c:8d:bc:39:
ad:7c:20:ff:83:da:fd:53:d2:ce:40:c1:93:27:33:
c3:7c:56:ac:56:94:18:ec:10:6c:83:03:ca:c8:b2:
e4:fe:c7:8d:f7:a1:62:54:77:42:99:cc:dd:93:41:
45:df:07:cd:cd:e4:ac:95:d7:d8:f8:2c:02:5b:ec:
b8:7e:eb:49:99:17:09:54:b3:f2:31:f5:94:5a:7d:
d5:34:b2:b1:84:a9:4a:0d:eb:6f:e3:24:44:1f:ad:
c8:b4:0a:66:8e:ab:2b:c2:ee:ca:71:0b:e0:ed:a7:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:2C:9F:AA:B0:E2:A6:E3:0A:A9:1B:EC:8A:77:D5:83:16:85:C6
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0a:42:95:72:cd:fa:78:08:cf:06:61:fe:88:84:fd:c5:2d:
ef:94:c4:58:36:cc:d5:c1:61:36:09:f6:bf:f1:8d:c7:d8:92:
8a:f0:75:57:81:2c:4d:51:2c:65:26:5f:a7:ea:bf:23:28:8f:
38:b7:f1:09:26:80:43:c7:12:12:e9:a8:f9:9b:50:b1:f8:bb:
5c:c9:7f:71:03:99:6e:81:5b:22:98:b3:62:33:23:2d:88:51:
c1:d0:7a:38:d0:11:b5:d7:ca:31:15:4e:88:cd:53:46:51:14:
38:8a:0b:e8:74:75:4e:12:d9:e5:55:cb:a1:b1:b0:3a:d0:bc:
be:e3:94:38:e7:d7:46:19:f1:92:fe:9b:97:d8:f5:05:f0:94:
47:df:a7:9f:c3:24:fb:ac:6d:0a:d4:b1:a0:52:f4:b5:ce:be:
24:fe:f6:1b:b3:a2:33:11:3e:52:4e:dd:54:5d:26:bd:e2:e9:
8f:84:a2:fa:f2:99:1b:70:4d:c0:49:c1:ba:cc:eb:17:5f:29:
d3:a4:a8:0f:0d:82:52:53:fa:85:dc:3f:e1:e7:21:4a:ba:b1:
49:4a:e1:9a:d2:f9:af:69:7a:64:c4:ba:da:e3:b0:50:06:a9:
ae:d4:f8:f9:ca:8e:b8:e8:6c:bf:93:50:ac:4c:b6:90:3f:1f:
33:47:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:38 2025 by rpki-client