Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier: g1pZ+g673C+LyZ2PklRhrnDVA8pmBG9PeuY27VSQ8nA=
Subject key identifier: D3:86:91:CB:81:BB:68:74:B1:8F:C3:27:9F:86:2C:2B:79:0C:D3:30
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial: 0198D4DFCFBC7BE96D71C74370380326FD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number: 0887
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: CgMQZaW8L/FbRBwa4Dc3KR0SJ6gPou8ta/Xf4UlgDpY=)
2: Rm4G8KwJAms34HdBJGkkvyGyVeo.roa (hash: /H/EXJlnlnkPcjJyZSTq8hc9wXqmJ/nwbv9HzKcNsm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cf:bc:7b:e9:6d:71:c7:43:70:38:03:26:fd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=d38691cb81bb6874b18fc3279f862c2b790cd330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:d7:56:81:a2:98:50:8e:db:4e:6c:cb:41:
bf:31:3c:50:7b:db:07:2a:68:0d:e1:76:73:82:1c:
33:6d:fa:22:93:33:28:59:7f:de:f1:d6:d2:24:fd:
d8:65:23:78:9f:2b:26:ae:06:6c:61:27:5d:4a:64:
9d:9b:6b:44:70:4f:4c:f2:1f:b9:6e:5b:70:6e:b8:
18:e2:a9:cb:93:e1:50:ec:2a:6e:5e:8e:c3:e2:f6:
1d:6a:d1:e8:43:57:f4:04:2c:ee:ae:c9:54:52:e3:
6d:ac:c0:cb:7a:73:5a:90:dc:2a:2b:29:50:5b:b5:
54:72:33:53:1f:dd:4e:d2:d9:7c:94:11:ed:4b:ab:
48:a7:7c:44:64:b1:13:bc:d8:d7:4a:3e:f2:e3:ac:
49:44:e1:06:4f:64:5d:af:d4:21:cd:a8:10:92:49:
08:54:96:d5:8c:f1:8c:d2:54:54:04:46:18:db:f7:
46:f4:b9:7d:17:4f:c7:0f:b6:b5:be:34:66:37:03:
1e:75:b5:69:5a:81:86:71:76:2f:e6:4c:a0:a9:d3:
fd:1a:24:1d:24:85:84:c5:5e:28:47:f4:c1:8f:15:
8a:e0:79:a2:e9:c1:ce:20:ba:76:58:db:79:09:e8:
cf:18:fb:8f:1a:87:2d:f7:bb:d5:73:c4:82:d3:d6:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:91:CB:81:BB:68:74:B1:8F:C3:27:9F:86:2C:2B:79:0C:D3:30
X509v3 Authority Key Identifier:
keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:dd:aa:64:7f:22:11:63:20:b9:57:ce:0a:6d:a5:2d:e6:c3:
35:cc:c9:a7:c2:d6:3b:50:42:ac:e9:25:ec:1b:cd:07:25:07:
d3:36:61:45:9d:60:d8:cc:7d:9e:8d:ac:9c:d9:eb:43:1e:fe:
93:a3:e9:ab:e2:f0:05:df:8b:0a:e0:99:a3:02:fc:36:74:dc:
72:6c:0a:cf:b9:6b:a4:ad:00:b9:6b:ea:c1:17:93:5b:1f:59:
3c:c7:d3:e7:84:60:e0:a3:a0:ca:2e:91:70:e2:26:8f:7c:3d:
f2:45:14:45:2d:0a:9a:e0:77:95:e0:46:5b:e0:a8:7e:15:a6:
b1:fe:37:e0:ff:4a:54:fe:0e:35:5f:b2:a8:0f:fb:51:d3:f5:
63:88:24:4e:6b:ac:91:a9:f4:0a:2b:61:31:9a:28:ab:11:a5:
13:3c:ec:65:ed:9d:bc:45:14:0b:d9:17:b2:92:68:e9:93:1d:
59:12:54:d2:05:e9:08:ae:54:1e:c2:cf:d5:cd:bb:22:d7:25:
51:c4:ae:34:25:ee:29:ea:d3:a2:8f:92:be:ea:f5:e4:a4:8d:
f4:8e:37:cf:60:ba:cb:5e:dc:b3:a2:74:a2:e3:db:80:19:7c:
df:af:5b:ab:a3:4b:84:5f:88:ad:26:9a:2d:6d:e8:ba:e2:60:
08:30:4e:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU38+8e+ltccdDcDgDJv0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjliZDFjNzE2ZmQyZTk1YWM5ZDYxMDc1ZDcwOTYyMWFl
ODA2MDAwHhcNMjUwODIzMDMwMTM0WhcNMjUwODI0MDMwMTM0WjAzMTEwLwYDVQQD
EyhkMzg2OTFjYjgxYmI2ODc0YjE4ZmMzMjc5Zjg2MmMyYjc5MGNkMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J/XVoGimFCO205sy0G/MTxQe9sH
KmgN4XZzghwzbfoikzMoWX/e8dbSJP3YZSN4nysmrgZsYSddSmSdm2tEcE9M8h+5
bltwbrgY4qnLk+FQ7CpuXo7D4vYdatHoQ1f0BCzurslUUuNtrMDLenNakNwqKylQ
W7VUcjNTH91O0tl8lBHtS6tIp3xEZLETvNjXSj7y46xJROEGT2Rdr9QhzagQkkkI
VJbVjPGM0lRUBEYY2/dG9Ll9F0/HD7a1vjRmNwMedbVpWoGGcXYv5kygqdP9GiQd
JIWExV4oR/TBjxWK4Hmi6cHOILp2WNt5CejPGPuPGoct97vVc8SC09ZS0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOGkcuBu2h0sY/DJ5+GLCt5DNMwMB8GA1UdIwQY
MBaAFBD5vRxxb9LpWsnWEHXXCWIa6AYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUt
ZDJhZjFjYzNmYTMxLzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUtZDJhZjFjYzNmYTMx
LzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF92qZH8i
EWMguVfOCm2lLebDNczJp8LWO1BCrOkl7BvNByUH0zZhRZ1g2Mx9no2snNnrQx7+
k6Ppq+LwBd+LCuCZowL8NnTccmwKz7lrpK0AuWvqwReTWx9ZPMfT54Rg4KOgyi6R
cOImj3w98kUURS0KmuB3leBGW+CofhWmsf434P9KVP4ONV+yqA/7UdP1Y4gkTmus
kan0CithMZooqxGlEzzsZe2dvEUUC9kXspJo6ZMdWRJU0gXpCK5UHsLP1c27Itcl
UcSuNCXuKerToo+Svur15KSN9I43z2C6y17cs6J0ouPbgBl8369bq6NLhF+IrSaa
LW3ouuJgCDBO1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:05 2025 by rpki-client