Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: HxPEaobBKzVls7u3e65WUDXHOghu65MO7YmXtn7dyIQ=
Subject key identifier: FC:78:01:7F:C9:01:8B:81:07:DE:3D:14:0D:E5:D7:A2:F8:03:74:71
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 0198D58382FEAE295F3D95729215DE25ED6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: z0VA2Hu2Kkal12CATD8rKOB6i8bHnoINZ2eGVDBPH4g=)
2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:82:fe:ae:29:5f:3d:95:72:92:15:de:25:ed:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=fc78017fc9018b8107de3d140de5d7a2f8037471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:00:e6:ed:0c:7a:a5:98:15:94:be:50:f0:
74:12:54:9a:d5:67:96:1c:a0:f8:1b:61:bb:fc:b5:
99:d3:e3:5f:18:cf:a3:22:d3:79:34:78:08:81:5a:
e2:00:db:43:8c:c6:98:61:88:b2:6b:b9:a9:5f:66:
e2:52:c2:50:0b:d4:57:94:1d:d2:b2:1b:3b:0d:f4:
c2:cf:fb:6e:61:9f:86:5f:e4:25:de:e4:4a:53:80:
76:66:1c:fa:ce:5d:9c:3f:fa:17:38:2f:14:76:42:
08:9a:d6:f4:d0:a5:12:4f:f3:00:3d:02:f9:46:33:
d4:76:d8:85:c2:75:b3:9f:5a:78:91:45:bd:19:d8:
1e:16:9d:90:03:e4:f5:ce:25:9e:8d:f3:66:86:fc:
06:17:3c:b9:eb:ff:d2:c9:c7:1a:3e:48:6b:29:59:
54:ba:c7:5e:30:78:da:59:ca:28:73:56:cb:69:21:
d0:c3:d1:a7:a2:f6:52:cc:70:cb:05:da:fe:f4:bc:
bd:d7:4a:3d:5e:29:ec:6c:09:40:85:dd:08:b9:af:
5b:de:57:0d:ed:df:e8:2c:3c:f8:5e:f5:1e:df:5a:
b2:c1:b0:a4:71:01:44:1a:69:c1:01:9b:35:cd:d4:
20:57:fa:25:55:69:72:62:93:91:18:0f:d1:62:df:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:01:7F:C9:01:8B:81:07:DE:3D:14:0D:E5:D7:A2:F8:03:74:71
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:db:89:79:ad:01:9c:ef:7c:c6:78:08:1b:eb:87:14:cc:83:
cd:cd:25:2a:45:3b:fe:20:a5:25:78:75:2b:32:71:4d:f5:0e:
df:5c:53:01:a6:3c:bd:d5:43:50:82:a5:c0:cd:56:d9:e8:93:
fa:63:e2:19:73:ce:22:c8:54:14:5a:cc:49:21:d8:67:85:ab:
35:f4:20:5b:bf:05:49:b3:80:70:41:a5:28:dc:a9:8e:ee:5e:
32:28:f8:32:c1:83:ab:45:f1:f0:0c:a3:81:38:0e:4d:af:e7:
a4:9a:1c:09:93:a5:53:37:c0:1c:80:7c:58:e2:88:63:a9:2d:
2e:32:81:0d:7e:21:be:a7:c5:4c:d7:4f:77:7e:7e:c9:e7:8f:
e2:c2:89:9e:98:e0:ec:26:09:d0:c9:0b:48:f6:bb:99:c2:0d:
96:ab:95:ca:9e:09:cd:7d:b5:6d:21:cb:80:9e:40:a1:53:a3:
7b:59:0e:30:f6:ae:98:6e:09:aa:1e:14:ca:82:40:a0:12:db:
bc:81:33:f0:b7:bc:cb:af:dc:f3:e0:fa:95:c5:0c:84:e7:e6:
5a:bd:af:20:7c:5c:19:dd:69:f3:1e:98:8b:5b:9d:39:23:fd:
fa:13:fb:35:37:14:35:94:8b:7a:15:bb:68:78:18:64:89:78:
97:ea:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:38 2025 by rpki-client