Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: mmCRjxD4HiubnI/wDbHOTYymr5pYHmDONUhUcTF+YyI=
Subject key identifier: A2:AD:D2:C7:85:90:B0:65:66:BE:92:DC:2B:C0:B9:F6:C9:2D:78:F3
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0198D69825E9E0312501F73A9955FC0F161D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:32 +0000
Manifest this update: Sat 23 Aug 2025 11:02:32 +0000
Manifest next update: Sun 24 Aug 2025 11:02:32 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: vNrU1oYsu9g4XCQt46aBe3ikpewnfJPhMTk4RG9PMEs=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:25:e9:e0:31:25:01:f7:3a:99:55:fc:0f:16:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Aug 23 11:02:32 2025 GMT
Not After : Aug 24 11:02:32 2025 GMT
Subject: CN=a2add2c78590b06566be92dc2bc0b9f6c92d78f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:e7:e4:32:65:22:b3:ca:93:3e:90:58:39:
62:d5:2e:89:4b:34:65:8b:19:e5:fa:c5:ed:ad:c2:
b6:3a:9f:f3:2b:c5:5e:d5:06:fa:4c:f1:b0:4f:3a:
aa:3c:be:7e:9c:1f:51:11:db:33:80:62:f8:6b:71:
d4:ea:4b:39:5e:74:b2:eb:cb:ba:69:85:9c:a9:f5:
63:0f:d1:92:d4:0f:ff:9f:fe:16:5e:b3:fd:19:e0:
e8:55:99:cd:90:f4:74:4c:71:9d:c6:a1:53:07:84:
c3:bf:55:02:cb:8d:4e:69:75:67:ba:a9:b5:c0:11:
3a:bb:24:ca:85:b7:77:bd:9f:41:5b:d7:f5:dd:85:
ab:9d:aa:29:99:7f:14:5d:e4:b3:e3:7e:10:78:4f:
20:bf:23:8a:0d:75:4b:ee:57:cf:31:4a:14:ea:23:
1a:bb:b7:4c:d9:41:74:97:3a:db:01:b3:a9:6d:a1:
2f:1f:ca:d3:bb:6c:7b:15:23:87:83:88:22:d4:d1:
f0:60:02:70:d8:09:4a:55:4d:ad:4b:5e:e2:7c:6a:
40:75:73:63:4f:7d:5a:b6:f8:66:ca:74:70:6c:a4:
25:30:ef:69:02:90:df:a4:f8:ed:42:0e:79:f5:f7:
f2:40:1a:7e:b9:9b:a4:08:be:fb:d9:64:54:14:d9:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:D2:C7:85:90:B0:65:66:BE:92:DC:2B:C0:B9:F6:C9:2D:78:F3
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:0f:09:fa:ef:22:de:63:9b:49:9d:a2:2c:93:d0:0b:a7:
aa:08:25:94:13:90:d4:5e:a1:f5:c5:b2:03:90:29:e3:ad:d6:
33:0d:f0:3f:7f:fd:e5:21:31:d3:8b:58:84:47:32:d8:e8:e8:
5b:55:d7:75:10:d7:50:c1:4d:d4:6c:00:0d:b1:1a:7d:19:10:
89:51:20:7b:fc:78:de:10:32:44:ab:bc:94:71:19:f8:7d:40:
89:2a:61:cd:17:ea:1c:9e:78:2a:f5:29:ba:10:f2:41:99:0e:
b6:5e:db:13:3b:90:8f:9d:35:13:ed:eb:78:c9:fc:02:cc:92:
53:43:2c:9d:29:41:c9:c9:c6:8d:fa:ba:93:0d:41:d6:da:d3:
80:41:49:e6:04:66:ed:95:18:8e:2f:91:44:9e:04:50:1f:f4:
b5:5c:37:24:8e:3d:49:c8:ca:d6:7b:bd:2c:3a:1f:79:e3:d3:
3c:96:e9:f2:ca:58:ca:ae:c8:5e:ae:e0:25:1e:95:0f:3a:6a:
3a:31:85:59:e7:2e:92:bd:85:ec:6b:d8:97:58:79:c0:2f:a4:
62:24:7e:08:56:d1:e0:32:3c:e2:f8:cc:44:96:fb:e5:2d:48:
7d:9e:35:ba:96:4e:d4:8d:44:70:6b:08:1d:23:3d:a6:97:ec:
07:10:97:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:30 2025 by rpki-client