Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: 0W/OOS0icfbNWN5hblu4k6zijqhphMxkecraCs8FhHk=
Subject key identifier: 76:2A:4F:33:10:0E:56:00:42:12:56:8E:FA:BE:8A:39:F8:07:61:37
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019A4EF462E205B6DD22EB81FB6ED4F0732D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:30 +0000
Manifest this update: Tue 04 Nov 2025 13:00:30 +0000
Manifest next update: Wed 05 Nov 2025 13:00:30 +0000
Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: L5Td0OC3FAvQKX30y0Y6wln7YXDVj+hCEhlusYVk5lY=)
5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:62:e2:05:b6:dd:22:eb:81:fb:6e:d4:f0:73:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Nov 4 13:00:30 2025 GMT
Not After : Nov 5 13:00:30 2025 GMT
Subject: CN=762a4f33100e56004212568efabe8a39f8076137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:3b:ac:8f:f5:a8:64:d7:dc:db:d3:c9:80:
5e:d7:5d:51:8f:a1:d5:df:28:cf:17:b9:62:c3:69:
4d:e5:00:51:e8:e6:22:60:58:df:98:dd:b5:c8:63:
35:5b:2e:56:8a:45:23:9f:3d:7a:38:ca:8c:3e:5f:
78:3d:1b:78:24:99:d2:7b:7c:32:ef:62:ce:09:9f:
1e:57:75:10:e7:7b:96:47:90:04:65:0e:db:4e:d2:
69:83:8f:24:67:2e:61:7f:55:eb:cf:d7:68:1b:2b:
95:aa:b8:ca:22:c9:33:2e:39:75:12:17:97:bb:24:
86:a5:d8:31:cf:24:88:7c:95:e5:f2:8a:9e:81:06:
50:1f:fc:29:2a:0e:e7:bd:3b:14:e9:d7:51:8e:de:
e4:15:69:a8:0d:dd:28:0a:5b:a8:b9:72:26:cb:42:
ff:24:05:ab:a7:29:a7:a6:b5:db:20:4d:9e:db:19:
09:f1:6b:53:9d:7f:01:6d:6b:39:11:00:11:b6:ff:
bd:47:c2:32:8e:fb:d1:05:a7:42:1e:80:52:58:5c:
44:d6:2d:3f:6e:01:a1:ec:6e:90:3d:26:ee:97:84:
b7:80:44:e5:18:c4:4b:72:b3:7c:26:8c:d5:3d:da:
ac:ff:d9:3b:56:57:ab:37:49:db:87:fd:a7:72:09:
ba:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2A:4F:33:10:0E:56:00:42:12:56:8E:FA:BE:8A:39:F8:07:61:37
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:75:fe:37:9b:f8:c9:17:dd:13:27:17:22:2f:6d:4e:3a:29:
ea:2f:1c:05:db:f1:33:76:7b:3f:8b:e2:db:2a:c0:ec:77:cc:
5a:63:b1:ec:29:a1:24:55:ba:4b:41:99:85:75:0c:d2:9d:af:
be:06:f7:18:ea:57:ee:7f:f0:f9:4b:32:02:63:a0:12:2b:16:
a6:44:fc:90:0d:2b:49:77:c3:93:23:d4:fa:07:62:48:41:cf:
8b:fe:c3:fb:1b:11:58:e5:8a:17:d3:ff:cb:24:77:b6:73:2a:
21:76:1b:0c:1e:b2:ae:fe:20:6e:84:48:5f:5a:0f:47:e7:fb:
47:bc:62:e2:a6:18:6b:16:e5:81:66:5a:97:c6:00:4d:a4:7a:
2c:03:39:74:a9:93:2d:fc:5a:0e:fe:20:0d:bb:53:a2:f4:8f:
d1:a4:40:36:e6:41:3d:02:56:c9:e5:d1:dd:24:88:64:c5:d2:
8b:a7:00:ac:18:62:6a:40:55:ad:34:d3:ee:ff:24:f8:9c:c5:
ef:87:4f:aa:a5:ff:31:b1:46:be:7d:3a:59:94:aa:13:6f:ab:
b6:6f:92:5a:cb:d4:b7:48:63:ce:4b:65:4c:0c:5e:c5:e9:94:
a7:ad:a7:23:8b:7f:22:ab:c6:24:8c:d6:ab:15:39:61:3a:d3:
6b:36:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:21 2025 by rpki-client