Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier: 1KXz2uxyY6kXwQ1XeDQ8xO/8jeApzUbm0kv2v5AP4Qk=
Subject key identifier: D7:9F:FD:77:90:76:33:BB:DD:EE:A1:1B:B4:72:24:5A:66:55:23:53
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 0199FAD7B0593F3D81B1E6D8D7D2B2CE5AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 05:01:03 +0000
Manifest this update: Sun 19 Oct 2025 05:01:03 +0000
Manifest next update: Mon 20 Oct 2025 05:01:03 +0000
Files and hashes: 1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=)
2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=)
3: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: tbypjha7NJRVzIlpFB9mN0JQH0jPXU3jDxsqfKtbZyc=)
4: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=)
5: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b0:59:3f:3d:81:b1:e6:d8:d7:d2:b2:ce:5a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Oct 19 05:01:03 2025 GMT
Not After : Oct 20 05:01:03 2025 GMT
Subject: CN=d79ffd77907633bbddeea11bb472245a66552353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:3b:d0:0a:d0:07:84:71:73:b2:9f:87:ec:
08:32:4b:59:8b:33:bb:6b:09:16:10:aa:21:17:30:
a9:42:0a:5a:0b:79:53:26:df:25:66:85:98:09:fd:
9a:fd:68:83:46:09:4b:49:1d:02:41:86:bc:eb:ae:
7c:95:6e:f5:ba:49:5b:c8:f1:ab:4d:f7:73:6c:1c:
b9:25:6f:1c:d6:d3:b9:6f:e4:89:cd:aa:65:40:36:
55:58:aa:6b:88:29:9c:aa:e3:c1:7f:7d:be:57:c6:
11:a4:46:dc:26:a4:d5:d3:f2:55:14:a1:35:d9:81:
56:61:ba:e5:46:b6:33:9d:75:96:96:11:c4:6c:69:
2b:18:fb:d0:f3:d9:27:a0:d7:c7:0c:51:f6:44:03:
ec:c8:31:8a:22:ab:47:27:44:e5:4f:ef:2f:dd:b7:
7c:1b:d7:41:5d:4f:a6:69:3f:a1:94:a7:bb:2b:a9:
71:66:12:27:fc:b8:88:fe:0a:70:58:c5:99:ad:05:
fb:58:51:47:fa:ae:72:e6:7d:1f:f4:f0:6c:ab:4d:
74:da:01:ed:bb:ec:e4:76:54:d7:76:97:ea:66:d2:
fc:39:1f:4f:1f:64:d6:f6:f0:5f:bd:3f:ab:be:a9:
d8:bf:bb:2e:1a:26:e7:ca:ac:86:ec:37:0d:1a:c9:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9F:FD:77:90:76:33:BB:DD:EE:A1:1B:B4:72:24:5A:66:55:23:53
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:74:33:83:62:64:b5:a8:0c:95:15:44:32:f5:04:d9:df:b0:
4c:54:de:2b:5e:11:e5:5d:a7:d2:a3:d8:88:b1:80:f5:07:96:
91:8f:87:7e:16:b8:d5:bc:05:99:4e:fc:fb:41:2a:41:d1:4d:
30:04:e2:df:a8:4f:86:63:e8:fb:bd:79:bf:c3:bd:06:bb:d2:
88:bb:8c:19:37:ca:7e:5a:b6:4b:25:d2:8d:72:63:a0:be:42:
14:ea:a7:e1:f9:8b:3b:7f:75:6a:f3:47:85:e1:3b:bd:a1:7a:
ee:f9:2d:fd:e4:05:40:0c:3a:e6:ef:fb:63:7e:68:26:b9:d7:
fa:ba:6a:75:9d:9f:15:16:a7:9b:6b:4b:fb:55:1d:a5:eb:77:
d8:11:55:69:5f:f3:2b:4c:b1:9e:19:3b:31:12:7d:bc:0d:47:
08:e7:48:36:ed:af:42:37:e0:2c:f9:2b:a0:09:ed:cd:15:8e:
52:9f:42:c8:bf:c0:87:b1:bf:f1:6d:09:86:8f:8b:76:54:0a:
c2:8b:dd:04:03:93:ea:79:50:38:1b:86:9c:b0:82:dc:54:f4:
01:3d:fa:78:cb:e9:47:15:63:09:8a:e0:5a:4d:13:2d:00:c2:
95:24:c8:7b:2d:e8:74:db:4d:12:a5:f3:6b:b1:a1:71:88:ca:
d1:d8:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:56 2025 by rpki-client