Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: 4inVt2YUEL2l/XTxqUUElGVeDuq6X7JYIQ/k8Rz+bOc=
Subject key identifier: 25:B0:0F:ED:00:F5:EA:EB:62:8F:D6:93:90:76:00:DC:40:5C:47:ED
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 0199FCC64F85921B2576F7BA35F615B85242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 135A
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: hJwLwgQ19h/YT7CVVnNr/MBsFwininsF7/UgtiNyi/k=)
3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4f:85:92:1b:25:76:f7:ba:35:f6:15:b8:52:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=25b00fed00f5eaeb628fd693907600dc405c47ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:c1:82:ce:c0:3f:da:14:f4:63:c6:07:d7:
75:0f:50:93:b0:8d:af:fe:43:8d:d7:a2:d6:72:e9:
2b:a3:79:62:b0:b8:26:de:5c:36:e1:34:fa:f1:d3:
f6:ad:3f:e7:c0:22:03:fc:1b:e0:a2:94:2b:b0:25:
63:2b:a6:87:8f:d5:5f:3c:c7:85:49:52:f2:85:80:
a4:18:2e:c7:03:57:07:f1:01:5a:70:09:d6:ec:eb:
84:82:ba:9b:56:01:b2:dc:79:b2:92:4a:38:e3:6e:
41:03:ed:58:0d:98:a4:3b:a6:04:e5:96:dd:53:e9:
39:a8:b4:3e:af:b7:1c:65:c2:1a:e7:28:a4:bb:2a:
be:64:3c:fa:54:5f:ec:a2:8b:ab:c4:1c:e6:8c:81:
69:fd:e3:3a:b4:07:af:32:74:44:37:48:03:e3:fe:
e1:34:e7:a8:d9:ba:11:da:85:19:ae:47:de:95:61:
d3:76:b1:09:35:ed:6a:c7:92:95:b7:df:e0:91:7e:
c4:08:70:0b:d7:25:e6:2c:be:93:f7:13:1c:d0:59:
96:d8:c0:e5:85:f0:1d:b0:a4:3e:d1:79:12:f6:b1:
2e:51:85:bb:46:8e:74:fe:17:a9:ba:51:65:7d:92:
52:ad:6f:a7:f9:e8:8b:00:91:73:62:8a:c0:b3:f4:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B0:0F:ED:00:F5:EA:EB:62:8F:D6:93:90:76:00:DC:40:5C:47:ED
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4a:16:11:e1:1f:a8:72:1f:0f:5f:3a:64:e7:39:fd:46:ad:
7a:fb:bd:cb:a2:41:19:df:23:49:d0:8c:a7:48:a3:9b:16:7e:
40:ec:cb:da:b2:c3:39:24:eb:1e:3e:d7:f7:7e:68:f9:ef:98:
5f:bf:92:a3:ee:43:b4:b5:ed:0b:c6:66:9f:97:83:8c:23:00:
49:ce:d5:0e:27:25:ea:73:44:73:0b:d8:4d:b2:cf:8c:1f:ef:
fe:f5:fb:51:9f:5a:90:1d:b3:a4:c3:66:27:17:5c:a1:d5:c4:
80:b0:2b:0d:65:45:f5:76:bc:31:72:83:8a:4d:3a:1d:f4:22:
a9:a7:6b:18:65:63:08:15:3e:8a:2c:cf:ea:62:e5:72:5a:17:
34:18:16:67:47:21:b0:93:9b:b9:0b:45:bc:5f:4c:70:7e:df:
47:16:10:54:ba:89:76:b9:87:ea:48:9d:36:c3:09:95:09:f8:
57:dc:aa:1e:ac:fa:f8:18:f5:a5:7d:9f:f6:fc:bb:b0:3c:e5:
8a:89:d8:c6:ed:9c:f3:c1:24:a4:e0:1e:1e:d4:d0:d3:a9:0a:
45:8c:6e:f9:14:8e:5c:9a:ff:14:c7:29:6b:95:db:83:1e:b7:
af:89:ad:fe:3c:bc:8a:f6:4a:6c:03:2f:80:fc:34:39:fd:4c:
ca:4d:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:04 2025 by rpki-client