Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File: ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier: OVHiILnD1jX6ct30mKmNnvjQPTv8BQAEPH5QHdOcxCg=
Subject key identifier: 00:6D:92:10:D1:25:B4:64:02:2E:F4:B8:66:3F:5E:B0:65:D8:D7:74
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 019882B104B48D44EF00D61C18013CFE962A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number: 0D7C
Signing time: Thu 07 Aug 2025 04:01:35 +0000
Manifest this update: Thu 07 Aug 2025 04:01:35 +0000
Manifest next update: Fri 08 Aug 2025 04:01:35 +0000
Files and hashes: 1: OJTbvvzGPXknTcn0a0PisGO6RMs.roa (hash: uuBkvJW42/0DIxeQ/apWNWGffvOofFBXJM//FCrkhBE=)
2: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: 0b2QP61U8ENj1oNtX6xUN29BLpo1SaBQtqSOJCxqS+Q=)
3: nArRHp-4C_xfVc5I0xzODMyX0Wc.roa (hash: unbAaPNeb8ss923AiSBNv55C1f+CW+UAKQwmAnYXVMU=)
4: ykzqitomWOX9VDgPXh0lfRNIPGs.roa (hash: sexKwZGXJqgH8EP0OUhLDrGvQUeJF4VTHV0LtWwcjpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b1:04:b4:8d:44:ef:00:d6:1c:18:01:3c:fe:96:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: Aug 7 04:01:35 2025 GMT
Not After : Aug 8 04:01:35 2025 GMT
Subject: CN=006d9210d125b464022ef4b8663f5eb065d8d774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:e6:f1:71:70:1c:87:f5:dc:99:89:b9:7c:
ae:7d:16:ed:85:6e:33:ab:5b:bb:31:fc:c6:00:fc:
87:a2:de:a3:84:63:89:cc:72:54:69:b0:73:f6:c0:
cc:b4:fd:8c:e0:bf:84:b6:3b:7c:78:44:31:43:6c:
d7:f7:56:91:e5:db:52:2a:3d:57:ff:23:0c:77:ad:
0a:b2:38:a8:81:f7:54:23:27:c4:50:08:1a:f7:bd:
6c:41:59:30:a9:06:91:c8:d2:04:83:cf:2e:7b:5e:
ef:57:92:f5:c9:b4:48:03:2a:68:7e:08:9b:ae:8b:
86:c8:8c:4a:76:64:f0:15:73:b7:b3:f5:b1:b5:61:
d4:aa:ae:dd:34:a8:2d:67:3f:28:49:64:25:17:98:
42:8e:8b:ae:54:8e:d6:2a:f1:f0:75:ef:e2:9a:8d:
df:50:f9:3d:88:79:6e:91:4c:4d:ae:3a:de:9f:6e:
0b:e7:ae:6d:ef:46:97:19:a4:b3:eb:02:e5:d0:82:
2d:0e:51:a3:8c:a6:4f:09:27:81:db:54:82:5b:89:
d3:63:c8:eb:7c:94:9f:83:29:0f:7e:21:f6:03:32:
55:57:fb:15:20:1d:fc:93:7e:8f:94:af:61:02:d0:
26:7c:e3:a6:e6:4f:25:65:e4:0d:30:ac:9b:48:de:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:92:10:D1:25:B4:64:02:2E:F4:B8:66:3F:5E:B0:65:D8:D7:74
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:48:8d:62:10:c5:76:1d:16:97:4c:a5:77:09:eb:ac:72:49:
1b:a8:1e:03:f4:c3:2e:49:53:17:4c:43:14:3d:10:f5:46:5a:
bf:85:f4:f0:08:55:de:7b:bc:49:35:26:17:26:51:92:ec:97:
38:4f:a9:02:1d:fe:a5:da:a2:5a:ae:72:c3:46:13:84:14:ce:
2f:60:b4:b1:f8:4b:e1:8f:8a:96:9f:84:10:5b:86:90:54:33:
31:d6:de:6d:88:24:b0:65:95:f5:c6:dd:35:09:c7:60:2b:1a:
61:bb:5e:64:21:77:e3:b0:52:4a:d6:90:70:21:03:cb:13:0c:
52:cc:4c:db:c9:03:ca:ee:5f:c3:f2:1d:24:32:c9:2a:54:ea:
cf:dc:44:89:18:e8:04:76:c7:43:82:9d:ea:cd:74:f6:05:72:
ad:73:16:fd:c6:7e:bf:47:a4:61:75:51:7e:ae:05:df:82:f8:
e5:51:8c:ae:e6:dd:0d:9a:cb:b2:43:27:dd:a9:93:30:08:c1:
76:ee:ce:49:6b:f1:c6:90:7b:58:4e:5e:e2:27:99:9c:01:c6:
12:b8:f3:24:d9:71:ac:3e:e8:42:2b:44:be:ae:89:8b:26:e7:
08:eb:76:5b:b4:a9:30:a3:e5:82:10:94:3d:b5:6e:c1:d2:e1:
18:51:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:16 2025 by rpki-client