Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier: xs+wAGixzhj8jiminP7nnpvGMadV8LMtUA+Yehu811s=
Subject key identifier: 36:89:50:55:E9:3F:5D:57:ED:80:85:9D:EC:57:8E:41:0F:FA:8D:69
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 0198D54DD3C77D4FBB888F3A2F5D76393BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=)
2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=)
3: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: viGgTiL/yK2gCYIQOtkj77dxsOSkXf2c8lTnvMB/rDo=)
4: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=)
5: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d3:c7:7d:4f:bb:88:8f:3a:2f:5d:76:39:3b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=36895055e93f5d57ed80859dec578e410ffa8d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:bf:39:e1:1f:4c:07:9c:69:0d:11:31:87:
98:10:3e:2a:c1:f3:a8:99:9f:75:89:3c:dc:b0:67:
da:d6:88:67:c5:4a:96:e7:88:e7:98:3a:aa:5e:4a:
37:60:a9:8d:e6:9f:e0:f9:c1:5c:9f:56:e8:e9:a4:
77:24:49:01:f3:f7:db:12:a0:52:94:ff:3f:66:8a:
84:17:a5:84:9f:bd:32:4d:01:14:6c:0f:85:66:a7:
9f:24:59:17:61:17:f5:a9:c2:8c:47:51:41:f7:6b:
03:3c:12:8a:e4:b6:a4:ec:5b:78:b8:de:ab:24:e8:
09:29:9d:6c:50:f7:60:57:22:c1:bc:74:0c:6b:1c:
89:89:81:ed:95:e8:c5:66:e1:3a:2b:0d:5a:15:10:
9b:22:9f:ac:45:44:ce:07:90:df:86:74:97:09:ff:
dd:99:02:8d:db:fd:19:87:20:60:7a:8e:7a:64:c2:
ea:3c:5f:e9:7d:fc:7c:53:c5:3d:16:54:d7:3f:16:
28:55:78:ee:16:4e:a3:3c:f3:f8:6b:1c:ac:24:6c:
71:0b:d7:92:ea:2b:ba:32:4a:a7:d2:0a:10:98:b3:
6a:0e:25:89:c2:e4:21:93:9e:72:60:58:f9:36:01:
c2:9a:2b:86:cc:28:7d:8f:97:60:df:39:af:2a:07:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:89:50:55:E9:3F:5D:57:ED:80:85:9D:EC:57:8E:41:0F:FA:8D:69
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e3:7f:5e:d4:c5:89:da:f7:a7:7d:3a:0a:87:e7:79:c2:2f:
e5:54:00:d1:02:98:a5:04:92:e4:92:33:80:61:86:8c:f9:8c:
bd:bd:9c:4e:60:c5:ba:7e:64:42:59:45:c0:62:ea:b8:0f:ba:
ef:3b:50:a2:36:04:b1:22:3b:57:a0:dd:c2:4e:f3:4f:d7:fb:
b6:73:27:85:47:55:12:41:11:c8:27:79:85:b7:8c:fb:82:c1:
76:d3:b1:65:ea:a1:5c:47:df:7f:13:24:63:4f:74:d5:13:ef:
77:65:07:df:a9:40:38:5f:50:c9:10:56:28:aa:29:ea:1d:14:
81:ac:16:e1:10:1c:23:76:6e:f7:0b:5f:55:2f:b9:02:de:89:
90:b9:2f:39:34:46:42:c4:d5:52:25:f7:aa:7f:db:99:e3:ca:
b0:72:2a:de:b1:13:04:ed:63:70:fb:b0:c1:c4:27:19:ee:70:
bb:9f:85:e7:8b:87:fd:0e:a3:d4:2d:dd:04:1a:66:9e:27:01:
d2:7f:91:ab:83:98:c7:c2:93:82:2b:c9:55:9e:84:45:3a:ec:
c8:65:a6:e6:d2:46:4b:de:56:93:95:b8:85:15:87:13:c0:06:
62:56:f2:47:7d:52:e6:6c:0b:c2:fb:91:83:c9:e0:f0:80:db:
03:e6:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:17 2025 by rpki-client