Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
File: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft (raw, json)
Hash identifier: /47MgcMidV0eb5fh4JMC/4j+kypvJOQpWhqpKhNlChI=
Subject key identifier: D8:86:1B:46:69:E8:33:AD:92:1E:88:0A:DF:4C:C0:A6:6F:87:04:1D
Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
Certificate issuer: /CN=b043e621fe1009701f6366843c0abc41e180c144
Certificate serial: 0199FFC85F5748AA6C928A8F818B10A2A188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
Manifest number: 0DCB
Signing time: Mon 20 Oct 2025 04:02:25 +0000
Manifest this update: Mon 20 Oct 2025 04:02:25 +0000
Manifest next update: Tue 21 Oct 2025 04:02:25 +0000
Files and hashes: 1: HyPwmwNvj6CdMpZdefHGIg4yDzE.roa (hash: OXYxYv21hsNNqtBtEPFKc2/1/qoxMz48zojYmP3J5L8=)
2: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl (hash: DkBZXIY19ZnxCajbIJCuM/Pv7USzzt8QI3TwvoF+e9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:5f:57:48:aa:6c:92:8a:8f:81:8b:10:a2:a1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144
Validity
Not Before: Oct 20 04:02:25 2025 GMT
Not After : Oct 21 04:02:25 2025 GMT
Subject: CN=d8861b4669e833ad921e880adf4cc0a66f87041d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:a9:54:a9:0d:66:21:3b:fc:94:96:46:d7:
aa:eb:bf:a5:b3:dd:9c:9b:13:75:be:5f:7b:55:1b:
59:07:9a:b9:12:b3:22:a8:40:04:1c:76:21:94:78:
1a:9e:5c:84:60:33:ba:18:5c:f0:9a:20:91:81:fd:
f2:4e:01:31:78:11:08:7a:a7:dd:a3:42:12:b8:b5:
97:05:06:42:99:0a:27:6e:e1:23:05:9a:24:c5:5d:
43:c8:65:72:5d:4a:31:2f:f3:7e:0f:53:5f:bf:4a:
8a:32:8d:41:72:82:ef:91:e8:ed:3a:53:87:32:66:
19:a7:ed:6a:21:be:59:16:cf:cb:8a:12:be:5d:88:
f4:7c:30:6a:08:2a:a7:de:1c:21:a8:2e:34:86:19:
34:31:16:a2:13:3f:4c:4e:7f:c3:be:5d:13:2d:cb:
d1:e3:98:51:d7:5c:90:e1:19:0a:94:aa:f8:1f:c4:
55:23:a7:e2:8f:b4:18:dd:1d:93:43:cd:4d:1e:de:
d0:05:92:fd:ba:b1:69:a9:fd:8d:b4:c0:8a:4b:e9:
c6:2a:ab:ef:a9:2b:4e:70:f8:24:eb:97:1c:27:6c:
02:49:70:7f:7e:2a:7f:21:d7:1f:5a:b5:75:33:65:
75:06:81:81:c8:c8:16:60:bf:26:11:14:ef:1a:3b:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:86:1B:46:69:E8:33:AD:92:1E:88:0A:DF:4C:C0:A6:6F:87:04:1D
X509v3 Authority Key Identifier:
keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:37:5c:50:7b:fe:1b:3f:88:6b:be:cd:65:42:3f:30:5c:
51:7c:65:98:e8:79:5b:08:aa:0b:3e:c6:6d:22:84:9e:4b:86:
d4:02:3d:fa:85:a9:19:02:78:a3:9d:54:07:01:b6:ea:f0:9a:
a6:ca:8c:ba:cc:96:10:c2:88:a8:c0:69:09:40:5b:30:92:d3:
62:12:e1:11:00:77:58:56:f3:a3:03:33:7a:41:e3:7f:4d:41:
61:ce:bf:f7:2d:4f:70:42:ce:16:aa:53:8c:32:f0:4c:6d:6a:
7c:f1:4e:68:f1:05:0f:6d:55:4e:39:82:c4:ce:c4:d8:9e:65:
68:bc:0f:eb:f0:ef:65:b7:96:69:82:86:2d:69:35:a0:54:99:
81:77:8c:da:24:98:89:5e:0b:6c:13:de:cb:0d:d5:ca:8d:84:
e9:13:85:57:c5:09:2c:44:39:27:9a:30:30:c7:54:e2:57:3a:
0e:0f:b4:c0:74:41:05:d3:95:f9:15:7a:75:ee:a0:bc:f2:4a:
83:31:7d:88:fe:3a:ef:cf:79:05:22:ec:10:3e:33:68:51:60:
0d:ff:bd:63:b5:1b:cb:6b:70:5f:b6:3d:fa:92:21:99:5a:1e:
58:6f:b7:56:3e:2e:8d:e5:4a:75:98:5a:4c:cb:e7:a2:49:e7:
ad:be:d2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:49 2025 by rpki-client