Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: TR/u7zmbN+9p4wwnASIiVxl/UuEHGotu4CkHL3jbFxc=
Subject key identifier: 54:8B:8F:18:74:FA:3D:A8:FE:D4:80:2E:58:3F:44:66:ED:3F:D7:1A
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 019872CFB63F2AA9010B8C72C523FAD070DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 1138
Signing time: Mon 04 Aug 2025 02:01:11 +0000
Manifest this update: Mon 04 Aug 2025 02:01:11 +0000
Manifest next update: Tue 05 Aug 2025 02:01:11 +0000
Files and hashes: 1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: FEqM+1LXueG4fKgiXvV6AyqL40JFxE7rvw6/VRrTCjk=)
3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:b6:3f:2a:a9:01:0b:8c:72:c5:23:fa:d0:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Aug 4 02:01:11 2025 GMT
Not After : Aug 5 02:01:11 2025 GMT
Subject: CN=548b8f1874fa3da8fed4802e583f4466ed3fd71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:36:75:5d:5f:01:35:8d:c4:c2:53:41:c8:
de:89:50:a8:ab:1a:10:37:42:e1:7a:f7:2b:2d:50:
be:ba:98:69:14:ae:6a:37:55:81:66:d6:f3:d4:86:
06:44:d3:68:8a:05:cb:c1:4d:14:0c:9f:f6:a3:0b:
ad:88:65:7f:9a:7d:1a:cc:82:d1:e2:d8:74:c5:c4:
9a:ba:23:18:d3:93:9d:e4:d7:d2:e1:59:5a:27:5f:
f9:0a:08:6c:9b:97:9a:a7:af:9c:12:87:51:8a:89:
c2:d0:27:86:9e:e1:da:9c:3c:27:ae:df:bd:b3:d6:
de:6a:9c:ca:3c:6c:d0:4d:f2:61:f6:73:a6:f7:7d:
e0:a7:42:56:e2:ba:d0:8d:c1:82:bb:df:af:11:44:
e8:3b:ad:81:fd:fe:fb:2e:cc:d9:65:49:15:92:3a:
4a:17:6a:7d:ee:df:df:92:e4:94:6c:47:80:55:90:
31:71:fe:22:c0:be:05:c2:08:a9:36:9c:4d:0e:df:
f9:b2:52:a9:b0:1e:2b:11:3a:ba:98:dd:14:8b:e7:
2b:cb:eb:85:fd:0c:8a:13:ed:c9:fa:00:ba:46:e7:
4f:27:4c:2d:41:4f:69:9d:02:e6:11:53:fb:06:5d:
fa:0b:23:1e:17:0e:28:c8:6a:38:c5:4d:e7:ba:42:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:8F:18:74:FA:3D:A8:FE:D4:80:2E:58:3F:44:66:ED:3F:D7:1A
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e1:2e:fb:5a:12:90:d3:e9:9a:bb:ed:10:0e:ec:1f:3d:74:
bf:d2:d5:e0:bd:54:e7:b8:4e:58:31:60:ad:82:50:4a:30:41:
3e:36:b7:fe:8a:73:62:0d:e7:6b:60:1e:8e:e4:3f:86:5d:0e:
65:d6:ac:c7:16:a8:75:6b:ca:c5:ab:0e:d7:88:c2:3d:5d:b6:
6d:f4:46:1f:9b:4a:aa:0e:33:20:43:42:9b:fc:fd:5c:6e:39:
0e:93:89:cf:28:f1:9f:db:58:6b:b3:df:5d:16:78:1b:08:e9:
50:3c:69:a1:9f:88:4b:cf:9f:99:b3:a4:ed:34:37:f6:52:ed:
0d:02:23:35:79:bf:1c:df:d6:80:f5:d3:93:10:1c:84:ee:a8:
5c:fb:8a:3a:e2:a3:67:c3:e1:c9:31:8a:8e:b2:77:c4:9d:03:
c6:bf:f7:0d:1e:a8:3a:38:45:9a:52:47:91:ae:0e:08:20:b2:
06:8e:0b:be:a3:05:6b:17:97:72:70:ae:ce:82:78:2e:d8:0c:
0e:7d:df:3d:14:9a:9a:dc:a4:f3:fe:1d:dd:a8:12:8a:5e:65:
b6:75:f8:3c:51:13:01:f4:41:46:53:28:88:16:d9:8d:84:fe:
2d:f1:cc:ae:91:3d:c5:e0:6b:34:20:a3:fd:db:31:63:39:08:
dd:03:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:34 2025 by rpki-client