Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File: EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier: gexGOVwpCmW7/Xlg+TruEb+tkfle0XsWVIq2LOSn5xQ=
Subject key identifier: B7:0E:FA:59:FD:33:B8:1E:B3:09:F4:83:8F:A5:CB:D2:0A:48:6C:79
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 0199FC5892047EAB91FD15D94002DFB61DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 2RYqLOOOCbthDUAcjKq8EsDLRUQ.roa (hash: Q1LOM4u7XAO8escJ6IGTLdV2wb9RNCfCJR9rh+j96Ys=)
2: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: wxLWXWLhEHKEqRRaXWBNjCg7SY1mpmEIxhVI4DJ3QQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:92:04:7e:ab:91:fd:15:d9:40:02:df:b6:1d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=b70efa59fd33b81eb309f4838fa5cbd20a486c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:07:cf:45:af:58:22:bc:21:4e:70:0e:8a:
07:4b:55:63:85:18:b9:d8:f7:cc:f7:d6:7c:f5:be:
26:62:fa:8f:31:7f:4c:ff:77:23:1e:b5:f4:8d:c8:
c0:fb:26:7e:48:9c:58:b5:73:1a:6a:6d:a5:7b:b2:
1b:14:43:d4:91:7c:1a:82:00:8c:62:f8:d9:11:01:
a3:48:bd:36:68:05:81:9d:69:8d:0a:55:f9:0f:db:
5a:95:13:00:88:4a:1d:34:b4:04:02:66:09:22:46:
f3:54:e9:6a:41:99:6f:09:3e:61:ea:3f:73:29:71:
63:a1:cf:66:a9:43:51:19:19:29:84:75:19:85:28:
18:04:ab:94:08:31:f4:f7:87:de:df:4f:52:53:57:
9d:f6:25:4b:89:6d:0a:9d:1c:e5:9b:71:3c:4b:9e:
3d:a8:d9:1b:9d:bd:b4:fe:e5:9a:e3:b7:dd:ea:40:
f4:be:a6:d4:8d:c3:60:ba:70:9e:46:54:a9:44:bf:
89:5a:79:4d:55:43:2b:84:12:a3:48:4c:9a:ce:9d:
dd:e3:66:3b:7f:fe:a9:5d:de:bd:2e:40:20:6c:62:
19:66:37:2a:00:6e:19:5d:a9:c3:20:48:90:0c:e2:
e7:80:49:65:09:c7:b9:26:8c:ff:13:fd:4a:60:d0:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0E:FA:59:FD:33:B8:1E:B3:09:F4:83:8F:A5:CB:D2:0A:48:6C:79
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:44:c7:99:cd:44:5c:6a:c2:ad:d8:c4:a0:83:19:8d:07:
10:e9:46:3b:5e:db:ce:86:83:2e:18:cb:dd:d1:eb:27:8b:e6:
ea:ce:e5:24:b7:48:ce:af:fc:51:76:2f:fd:78:96:5f:9a:4f:
85:aa:82:98:68:99:97:e7:d5:d6:d9:9b:a0:86:d0:ac:74:03:
4e:6a:35:27:47:4d:e5:bf:42:ff:c3:02:2d:b0:c9:85:5c:ac:
85:5e:e7:72:11:87:2d:0a:4c:f6:f8:fb:68:d3:52:fa:cb:64:
f0:02:b7:ad:75:9b:0a:a1:1f:42:48:06:82:5f:29:1a:88:14:
ee:33:f5:4b:b0:59:aa:02:d9:6a:b9:9d:f9:f1:89:9d:18:1c:
3a:b2:5f:d9:df:9d:c7:08:f4:5d:84:b7:b6:04:64:12:46:d7:
49:44:5e:17:8a:47:d0:e5:84:cc:f4:75:5f:c8:9f:a5:48:e6:
98:bb:9f:60:cd:51:c3:81:a8:6a:a2:8f:39:26:d1:be:4d:a3:
9a:c8:a8:6a:2b:20:b4:60:a6:22:94:ec:d6:f8:dd:45:57:b2:
08:cf:b5:80:23:dd:1f:72:eb:48:9c:49:4e:d2:8b:2d:0f:84:
23:c1:9f:7a:6d:89:67:0a:e3:89:5f:65:85:d4:b0:6d:4a:6d:
0d:5a:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:23 2025 by rpki-client