Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier: J/qukLwsa7VM0V3sD02Me2zadClckqn/pWTBn8+vppc=
Subject key identifier: 11:4F:73:51:E1:1A:D3:5E:51:2B:92:F9:E1:30:C9:78:59:F6:10:D2
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 019A0035AA94C3166ECC1505C041D20AC8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 06:01:48 +0000
Manifest this update: Mon 20 Oct 2025 06:01:48 +0000
Manifest next update: Tue 21 Oct 2025 06:01:48 +0000
Files and hashes: 1: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: 4XcGEcoTOArQ9ZXKwdYP8AQh8+6Ga9tZT3l+0DB+2Lo=)
2: id8eO-SAr4HmH_kU9gWG3wDOyMg.roa (hash: QVeP890/1IAEaEOIUM6FuUPhuYx18zEBeNk09Lb1+ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:aa:94:c3:16:6e:cc:15:05:c0:41:d2:0a:c8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: Oct 20 06:01:48 2025 GMT
Not After : Oct 21 06:01:48 2025 GMT
Subject: CN=114f7351e11ad35e512b92f9e130c97859f610d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:ae:fb:2a:46:e8:41:64:0d:ec:d2:8b:cd:
1a:b4:7e:70:e9:e2:ec:98:19:87:fe:c8:6b:e3:b7:
42:59:02:56:28:33:5a:6e:e6:d2:5e:31:32:ba:c3:
c7:40:3a:34:fb:c8:a8:f9:31:22:d2:45:e5:8f:2a:
a8:ea:bd:4d:17:f7:14:c3:ca:36:aa:b3:6f:a8:a1:
d4:47:57:c7:9f:48:92:93:1b:57:be:86:26:bc:19:
1d:08:87:ff:86:56:7b:30:28:44:bc:1d:b3:a1:b3:
bb:99:2b:2c:51:85:f1:99:12:f2:f3:fb:59:01:48:
97:ea:bc:db:e7:ae:92:8f:3c:46:3e:eb:7c:29:9a:
7d:2e:72:35:87:d6:23:39:0b:14:55:4a:1c:03:82:
ed:00:44:dc:28:25:dd:19:34:5a:27:77:62:f3:69:
94:6a:d6:a2:d2:05:fc:f9:7c:40:a7:47:97:b5:af:
0e:f5:3f:31:5d:f1:ce:fe:be:3b:eb:28:88:6d:58:
7c:02:ea:85:1e:3f:36:a9:eb:4a:f1:f5:5a:fb:14:
07:d6:9d:e0:a4:b9:89:18:bb:b6:c0:74:47:71:f0:
8c:82:d7:99:1d:e1:6c:9a:6f:78:74:ea:f9:7e:71:
1d:55:9f:65:52:11:af:16:f6:5c:a6:89:38:3d:76:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4F:73:51:E1:1A:D3:5E:51:2B:92:F9:E1:30:C9:78:59:F6:10:D2
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:69:15:eb:e9:11:85:45:e2:2c:c9:4c:c5:53:fa:de:51:ae:
e0:34:cb:23:34:6c:b0:33:cb:9e:fd:62:e7:d8:76:bb:c6:6f:
dc:98:9f:76:43:74:41:e9:1e:a6:06:eb:cf:37:ea:fb:e7:4b:
3a:94:1b:c6:12:0c:ac:e8:7d:79:e2:63:0e:f4:48:0b:e2:7d:
31:5c:a2:74:b8:de:3e:65:42:5c:00:f1:cd:e3:c6:95:20:eb:
de:b4:46:f7:34:d0:c2:b1:bc:33:4c:a4:77:40:7d:e3:35:f9:
d9:29:18:aa:70:3c:4f:16:01:ee:51:a1:ce:99:6a:85:4d:0b:
d8:68:b2:b8:e6:a8:6f:15:bf:e4:b9:6e:83:a6:f1:6b:20:d1:
bb:79:da:e9:29:8e:ea:39:d6:79:a8:b7:0c:c3:17:7e:c0:f5:
23:92:a8:07:13:50:25:35:aa:9a:7e:ca:7c:b3:8f:10:4c:0f:
f4:b5:dd:b7:8d:8d:68:cb:c5:95:9c:85:fd:6f:4e:18:d6:60:
c0:05:0d:f9:64:e3:9e:76:9a:6e:73:d1:14:0d:a2:73:d2:5c:
17:d8:39:76:f7:55:8d:41:28:4d:a1:c9:bd:73:5a:5e:7f:fb:
69:e9:47:92:c4:bc:88:94:bb:96:fb:47:28:80:97:f8:ee:99:
a6:d3:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:52 2025 by rpki-client