Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier: /yPcOHAZKyWGI9vce/e/8YX8tHgTLoFe3L/d5Iky494=
Subject key identifier: D2:28:E5:67:58:CB:07:AC:83:32:4C:64:14:DB:53:F5:4D:97:FC:41
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial: 019A006C73BC8822230623B10D403F43FEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number: 0C83
Signing time: Mon 20 Oct 2025 07:01:38 +0000
Manifest this update: Mon 20 Oct 2025 07:01:38 +0000
Manifest next update: Tue 21 Oct 2025 07:01:38 +0000
Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: 4ivLcCf0x1CAJnxcpfPDjs8QXN9yAYwg9qiCxfsZ+HA=)
2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:73:bc:88:22:23:06:23:b1:0d:40:3f:43:fe:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Validity
Not Before: Oct 20 07:01:38 2025 GMT
Not After : Oct 21 07:01:38 2025 GMT
Subject: CN=d228e56758cb07ac83324c6414db53f54d97fc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:7d:9c:1d:99:bb:52:51:1c:8b:78:bd:60:
f2:bf:67:d3:06:17:80:ce:1e:ab:c0:45:ab:5f:de:
42:08:ad:ae:67:4c:43:d3:cd:5f:48:71:24:f9:92:
c6:05:ce:83:97:12:1c:69:6b:f6:3e:af:60:c3:71:
3f:84:8e:ae:f4:b2:a9:43:b9:cc:37:9d:4c:cd:66:
5f:92:87:62:c2:65:0a:2d:d8:04:a5:ad:49:d7:d5:
4b:4b:c3:8a:0c:8c:83:44:83:f6:a6:77:d8:23:e6:
12:ac:9b:94:df:c5:73:d8:b3:39:b6:b3:f7:59:db:
5f:c2:ed:22:01:9e:24:d2:c0:ee:e9:72:a5:ca:df:
79:a1:45:b9:2a:a5:c1:84:b4:ad:a1:86:11:37:1e:
83:7f:04:39:63:13:a1:15:70:36:46:29:42:9a:41:
62:60:04:d9:0c:54:a5:ea:02:03:b7:03:12:5a:a3:
d5:ac:65:f6:23:15:fe:34:54:d1:62:67:ee:fe:e4:
5a:a0:2b:fd:fd:3d:ae:da:84:32:be:6e:5f:74:84:
e1:ef:72:81:dd:2b:5f:48:58:ad:02:09:4b:b8:28:
da:5a:8e:74:d0:83:ad:31:4f:92:4b:08:ab:54:51:
36:cb:e4:c4:26:49:e6:f5:30:4e:2c:6f:b3:7d:22:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:E5:67:58:CB:07:AC:83:32:4C:64:14:DB:53:F5:4D:97:FC:41
X509v3 Authority Key Identifier:
keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dc:00:08:d4:81:4f:45:35:87:4d:78:ce:1e:e7:4c:f2:65:
49:ab:4f:a8:f8:dd:9e:81:8e:15:ce:17:7f:ef:d7:f5:fe:9d:
c1:7a:ab:57:00:28:8d:24:35:4c:3d:ee:94:c8:16:a5:a7:c7:
8f:60:ef:7e:0a:f1:21:c1:43:de:97:d0:41:db:cb:be:0b:c1:
fa:d1:4b:75:37:53:f0:17:7a:19:6f:ce:ca:50:ff:23:6b:12:
2d:1a:15:70:2a:82:0e:65:4f:05:42:b0:76:03:b9:60:e6:47:
3b:ed:84:1e:11:7d:f7:54:17:8d:53:f5:28:1d:b8:a7:5a:1b:
29:0b:57:f6:a2:ad:67:41:bf:7d:ed:20:59:62:78:da:29:ee:
d8:53:ee:e7:53:7a:6f:71:66:fc:d3:33:80:1c:99:22:d6:80:
a6:af:9e:2f:ba:9f:c1:5e:5a:1d:4c:8f:11:8e:eb:1e:a4:0a:
f1:4d:70:a7:4c:5e:19:96:0a:14:71:7f:34:5d:71:98:5b:53:
ee:c2:38:ee:dc:29:b8:0d:cf:82:80:10:58:42:0f:6f:17:c1:
95:ac:48:3c:51:25:99:e8:6f:b7:05:6b:1e:f5:1d:2b:aa:35:
33:7e:e0:2b:58:0a:62:1c:8a:f9:9b:b8:11:5c:fa:de:cc:52:
13:53:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:14 2025 by rpki-client