Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: T/WL0wpZ7OL/Z0emuQsLKke7l6ZADSi9F0Q8XpigbqQ=
Subject key identifier: C6:2C:C9:90:B4:2A:09:94:7F:BB:EE:19:8F:1D:E3:9C:93:6A:6D:0D
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 0198816692B3BD2ED761927CA93203D09650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:00:39 +0000
Manifest this update: Wed 06 Aug 2025 22:00:39 +0000
Manifest next update: Thu 07 Aug 2025 22:00:39 +0000
Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: 00DQASdJ2jUkFbBeC7L7d9Tapa4k2CNC0/ByCoUgfao=)
5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:92:b3:bd:2e:d7:61:92:7c:a9:32:03:d0:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Aug 6 22:00:39 2025 GMT
Not After : Aug 7 22:00:39 2025 GMT
Subject: CN=c62cc990b42a09947fbbee198f1de39c936a6d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:7a:a8:7b:c7:48:65:5d:c4:fa:a0:7b:4f:
28:4d:2e:f7:a9:d9:17:51:e4:72:20:d7:9e:f7:06:
b5:a5:49:35:ed:e3:ea:72:f9:8a:2d:d9:31:6b:99:
93:f7:22:51:42:17:a6:55:e9:92:ea:46:ef:3d:d3:
29:1c:ea:84:db:60:8c:c2:c9:cc:18:fc:33:eb:ab:
78:cc:35:9b:ae:81:cc:b4:53:c7:c4:21:b7:30:d4:
e9:1f:1b:3a:ca:7f:96:86:d6:6e:12:02:ae:26:1c:
e1:f3:a6:88:2b:3b:9c:23:54:3f:44:f7:c1:2e:16:
8c:b1:ed:d6:72:fb:53:2d:ee:0d:fc:1f:d7:25:f7:
e9:d6:ac:81:7b:44:cf:c3:bf:1a:bd:d1:93:c4:f6:
fa:d1:e3:14:e7:e9:9f:35:31:c0:3c:2c:de:ee:e6:
3b:b9:8a:8a:b4:b1:89:7a:56:64:39:92:a4:52:c0:
13:ef:79:55:47:87:6a:99:47:62:ec:65:96:1b:6c:
c8:07:78:d5:5c:5a:a4:0c:93:e4:89:5c:18:db:e1:
d1:7b:ae:d5:0b:5b:2d:e9:bb:94:55:97:aa:4b:4c:
e1:e4:96:73:6d:aa:3a:82:03:b1:39:49:2a:21:0f:
02:73:1b:52:e2:e7:d2:8d:70:8e:17:86:1c:dc:dc:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:C9:90:B4:2A:09:94:7F:BB:EE:19:8F:1D:E3:9C:93:6A:6D:0D
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f1:2e:02:fa:9f:de:3e:1d:47:2d:14:28:ab:9c:27:8d:0c:
1f:f8:d6:0f:5e:23:5a:32:5d:aa:c9:31:00:5d:52:06:43:7c:
61:bc:a0:f3:ba:af:29:6e:0e:5d:10:f4:77:c3:3e:9b:ae:c7:
6a:83:b2:8f:26:59:ce:2b:17:fa:6c:fa:ef:9b:fa:8e:9b:5e:
e3:10:1f:bf:7f:56:c2:d9:e5:3f:61:26:a7:23:a4:a7:f4:64:
38:97:56:a9:50:e2:8c:f5:37:9c:d3:fa:7a:90:f6:0b:4e:1d:
75:38:74:b6:a2:58:cd:8c:cf:3e:c2:04:6f:6f:3c:6a:b5:1f:
a3:90:39:c2:20:82:94:58:c6:a9:35:10:5a:c5:33:b6:e9:05:
02:2a:6f:76:67:73:f0:7f:5e:93:03:c3:b5:c9:d4:06:25:09:
6d:b1:7a:9f:73:08:c7:51:26:65:9d:9d:f1:d3:ec:0d:2a:49:
1b:da:77:1a:bb:de:01:c2:50:41:39:94:e3:8f:07:8b:8d:43:
e3:ed:cb:98:48:bc:2e:3a:bc:a4:23:0a:3a:58:09:1d:fd:2b:
66:6f:59:c9:2c:67:a0:0a:67:dd:12:f5:c3:a4:d7:41:9d:ec:
5e:20:66:33:b3:f5:c3:62:2d:06:ed:99:f3:bc:5f:06:98:8c:
01:f5:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:03:04 2025 by rpki-client