Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File: ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier: kJ9+ueYLJU7ZTpmDm2v4OHLWIfsAP6bNEbakEJ8Jl7g=
Subject key identifier: 95:FA:41:3D:ED:5E:53:D4:3D:F1:85:58:A1:B8:75:AA:E8:65:CB:7B
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer: /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial: 0199FCC611240DC4A460902F8E6AE3A55925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number: 04F2
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: yYfG1M4/b3w6EpQxsyB0J2ttuAOz5gX4kIks96EizQw=)
2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:11:24:0d:c4:a4:60:90:2f:8e:6a:e3:a5:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=95fa413ded5e53d43df18558a1b875aae865cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:4d:d9:ad:8b:e3:4e:47:be:77:28:0d:92:
97:77:70:8c:31:57:7c:f1:ee:12:63:1e:7d:fe:91:
02:23:51:ec:8d:8a:6d:6e:6f:db:36:1a:be:05:bc:
6e:66:6e:78:82:7c:d5:e2:4c:57:55:1a:6f:3f:bc:
71:ef:fd:d3:af:37:3f:af:37:03:b7:06:11:31:de:
c1:77:83:1c:c8:60:1d:8d:98:b8:fa:8e:2e:43:06:
c8:1c:b4:7d:9f:22:52:f6:14:61:2f:90:ae:20:19:
a6:21:f2:91:e1:82:ae:46:6b:3a:e0:ef:0e:0c:16:
c2:80:f5:5e:60:f5:3a:db:a2:d7:a4:c2:95:13:77:
5d:ce:bb:50:c1:b5:d0:1c:4c:9d:94:cf:db:a9:92:
9f:17:0e:59:9f:12:7b:b5:2a:46:93:94:33:b9:fa:
d5:3b:28:8f:22:4e:76:11:ae:74:44:33:81:85:1a:
a9:fe:65:fe:b6:84:58:ff:e2:27:4e:68:07:1b:0d:
09:1c:31:4e:99:4f:92:52:9a:c3:a0:54:cf:3f:f6:
89:ac:96:c3:ed:28:8f:2a:45:68:cf:a0:d5:c7:56:
16:d6:f4:52:05:fa:d7:23:67:d5:a8:fa:89:17:c7:
22:a5:90:37:eb:82:23:f1:44:0e:5b:11:dd:e3:47:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:41:3D:ED:5E:53:D4:3D:F1:85:58:A1:B8:75:AA:E8:65:CB:7B
X509v3 Authority Key Identifier:
keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0c:79:2c:18:ea:7a:f9:7e:2a:f9:8d:c1:cc:4d:04:49:51:
22:02:a5:c5:d7:a1:46:6b:b5:a0:17:1b:5f:34:2d:3e:00:a1:
25:74:8e:02:1b:17:f5:ba:74:ec:ee:ac:d6:b9:f9:db:39:15:
1d:87:96:68:3e:6f:8c:cb:ac:e6:c9:0f:a3:43:e5:32:8c:76:
05:6d:1e:87:7b:c9:4e:26:2a:1c:27:c3:da:ef:4d:bb:a1:ca:
e1:6d:e0:2c:d4:1c:32:55:18:c0:4a:30:3a:b2:04:d3:99:93:
ed:bb:fd:40:60:06:e9:2e:d2:59:9e:f8:08:57:7d:7f:50:88:
51:d0:74:0a:d4:1a:77:d9:f3:5b:fa:48:b9:f8:c1:26:9b:46:
ec:65:42:7a:f8:48:16:93:55:ac:4b:c0:e1:ff:e0:09:22:f6:
26:19:f0:bc:36:6e:75:c2:7d:65:30:d4:1f:ec:92:b4:68:70:
71:af:ab:cb:6e:de:b4:e8:a3:9e:ce:b0:f3:31:03:5b:f7:9b:
85:d3:d0:f3:28:35:51:b6:ca:50:d0:3b:2b:71:03:0d:22:f4:
15:bd:32:84:bd:5b:a8:7d:d7:b2:32:c3:eb:8b:1c:8d:c2:bf:
5c:4f:2c:87:f6:62:bf:ab:49:49:dc:eb:24:50:66:9e:42:45:
6e:7a:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:51 2025 by rpki-client