Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: 4LeehkOudcGB/4wdQn2UteYFqlGvBMmHc0Cqbjq+Hv4=
Subject key identifier: 75:5D:5B:51:9B:AE:69:86:86:92:E6:12:60:71:90:FA:E0:DB:FC:54
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 019A4DE1C9A684214264185D06FCA9FDE5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 122E
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: n/z95BHN3kDFR79AUZNXniZ7ndCKBkxjbtcpwJVfx+k=)
3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c9:a6:84:21:42:64:18:5d:06:fc:a9:fd:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=755d5b519bae69868692e612607190fae0dbfc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:db:9f:c3:f6:9e:ae:5f:d6:d0:50:bf:a8:
48:13:9a:27:af:d4:90:b8:7a:1f:3c:11:ca:6a:5e:
68:a4:de:f3:ac:eb:69:79:fb:17:d6:fd:1b:98:06:
93:9e:07:81:ba:e5:93:66:83:55:dd:6a:62:d6:ac:
d8:ba:bb:00:2b:61:c1:12:3d:08:62:c3:a5:1e:ec:
55:a3:22:3c:49:21:b1:48:11:41:a6:20:ee:46:e1:
23:eb:23:26:e7:ba:37:b9:d6:1e:f2:a5:55:e0:70:
4d:0f:19:2d:ab:06:40:dc:b9:e6:84:fe:53:64:dd:
de:87:4a:91:66:31:42:ff:d4:7f:4c:5e:a1:93:87:
9b:86:f3:bd:5c:0d:70:d7:83:a1:d2:a2:46:34:f6:
c6:24:3a:6d:a3:6a:42:b1:ea:b2:e9:bc:88:01:86:
0c:e7:8e:0e:9d:92:75:7e:86:84:6c:b8:05:ce:6e:
77:a4:80:c2:8b:ff:bf:e7:91:6f:a5:e4:03:e1:f0:
35:5a:6c:b8:8a:1b:32:28:34:ea:6c:94:fe:cc:7f:
b4:a0:6a:22:6c:5a:2d:86:25:e5:1c:4c:e6:9b:e5:
72:e1:68:1d:96:f2:2d:22:da:81:fe:a4:45:9e:7d:
94:00:51:ed:75:f5:c2:49:83:6f:75:3c:da:a3:e8:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5D:5B:51:9B:AE:69:86:86:92:E6:12:60:71:90:FA:E0:DB:FC:54
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6b:89:45:b5:a9:47:a4:5c:58:22:81:6c:d3:41:63:0f:bc:
b7:c5:dd:90:0d:1b:1e:80:e2:af:b8:30:5a:b9:c7:cc:5b:01:
1f:9e:c6:4f:08:62:b5:89:59:df:09:82:93:17:57:8b:43:13:
fe:65:cd:34:c9:64:58:b4:d7:75:d2:86:3f:77:e8:ac:9f:47:
65:1b:0b:e9:40:9e:77:a2:84:9e:f8:ba:a7:df:3a:92:12:7a:
15:fa:d7:ce:a4:6d:4e:52:87:32:64:c9:4e:aa:ad:1d:af:c6:
6d:d4:5b:29:48:a2:b7:c3:3e:61:f2:bf:f5:92:6a:e1:f0:b6:
70:d6:58:c5:62:d6:e2:ce:93:b1:2e:89:0e:39:65:02:44:51:
4d:a1:5e:6d:f0:06:e3:36:ee:29:e7:66:4b:72:c2:f5:ec:22:
35:f8:f8:bb:ee:39:b5:60:23:b4:43:70:92:55:82:74:de:2d:
60:40:10:ad:ba:fa:a3:78:ab:85:76:d5:00:f0:4f:40:51:6b:
3f:6e:21:c5:74:e3:57:1e:c3:31:1f:c0:0c:8f:b1:59:5b:80:
1e:5d:60:5a:a4:dc:66:0d:c1:10:f4:f1:11:05:90:75:55:77:
1b:2d:f9:ed:8f:bd:fd:66:22:65:d0:23:7c:54:7e:fd:66:cc:
0c:41:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:30 2025 by rpki-client