Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: OgD3dRABZAJ5GrG4fhd2JCUIvglQfiXUBwQOO8oBOKE=
Subject key identifier: 39:AE:08:C1:91:99:69:D4:9B:22:A0:EC:1A:08:D5:3F:E0:7A:81:42
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0199FC2184C7098E615AAD242D0925DA3D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: qX9mL8H0ZQwHPQhC7tSfnAbslOvVwGY7jRRryCAK788=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:84:c7:09:8e:61:5a:ad:24:2d:09:25:da:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=39ae08c1919969d49b22a0ec1a08d53fe07a8142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:ac:e6:80:82:56:8c:9c:af:c0:f0:16:58:
ae:da:ad:68:55:56:80:c8:17:ef:39:f1:81:24:d6:
41:e1:99:88:b3:59:68:c7:7a:9f:48:59:81:a0:f0:
4e:62:13:67:37:a4:31:be:a4:ff:66:74:df:d1:ec:
df:da:a4:93:6c:15:c2:a0:12:f6:26:23:68:ba:17:
40:95:b2:b1:70:8d:b2:db:30:ba:32:23:c5:2b:d1:
83:77:da:6b:14:34:e7:e8:72:70:71:2d:ee:b5:e6:
41:b5:1d:37:9e:49:e7:7a:bb:22:e7:a3:ff:bd:4b:
99:9e:71:98:63:1e:dc:2e:8c:06:69:74:5e:28:33:
fa:5d:d9:ac:08:91:e2:d5:85:b7:3e:a4:7d:7d:7e:
d7:c5:3a:d3:59:e0:31:b6:8c:c0:8e:08:f9:05:f8:
b3:e3:73:f5:8d:18:03:5a:87:8f:f9:6b:ef:de:7f:
f5:d1:70:a7:7f:3e:35:5a:a7:76:e8:05:1f:4e:2f:
ea:f4:9a:9c:0c:c6:1f:f6:ca:bd:74:41:bf:50:26:
ba:10:4e:c5:a4:94:18:06:ac:37:27:13:74:2d:ac:
82:f6:20:56:47:52:b6:97:6c:a8:f4:30:28:25:da:
b9:f1:17:ba:24:3b:09:05:33:b4:a7:74:54:a7:e2:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AE:08:C1:91:99:69:D4:9B:22:A0:EC:1A:08:D5:3F:E0:7A:81:42
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ec:89:d9:8b:be:76:7c:03:88:c8:60:1d:c9:95:3b:6f:a4:
9d:96:31:06:55:f1:0f:65:32:98:12:48:be:35:05:16:e6:56:
c6:da:b6:45:55:b7:fa:38:6a:ae:46:af:d2:27:fb:d3:2c:c0:
e5:8e:ae:44:8c:4b:df:93:3b:95:d3:0f:a5:06:ac:57:77:e6:
f3:93:cd:fe:cc:2d:f9:b2:6e:41:3f:a8:3b:6a:8b:dd:d2:98:
25:73:61:87:b5:72:65:e1:2b:e6:69:82:4a:00:c3:b7:36:50:
c4:e2:ff:3d:0b:dc:46:e1:f4:06:6d:3c:05:d1:59:7f:fe:d1:
ff:69:cd:1a:6e:b3:8b:65:97:3a:d1:3a:d9:84:9c:d6:db:4a:
e0:9c:c1:ff:76:f3:2d:e4:3c:8f:36:f2:ed:2e:3b:74:03:7e:
5b:3a:8c:82:25:03:e2:00:dc:85:05:cc:fa:c2:3f:09:22:f7:
a0:4c:af:f8:f0:71:e5:d8:34:f4:9a:5c:a8:61:c5:9a:05:b3:
d0:d0:ed:15:e7:84:da:7f:d1:7a:c4:3a:4d:61:39:6c:45:1b:
4b:73:e3:2e:58:80:4f:64:13:01:56:32:7d:a8:2c:65:81:4c:
5a:7f:20:f9:a1:d6:10:93:e7:95:cb:1f:69:6b:bb:ab:df:50:
ef:7d:b4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:46 2025 by rpki-client