Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: yFfTx/8sDaFUsUmyzfxfg5dPbbOx1veH36Gj11OW1og=
Subject key identifier: 2D:BD:30:70:6B:C1:84:F6:23:EA:3C:1A:78:E6:FC:D0:F2:90:51:86
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 0198D65EFA8AF9119E684A42890B4523314D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:05 +0000
Manifest this update: Sat 23 Aug 2025 10:00:05 +0000
Manifest next update: Sun 24 Aug 2025 10:00:05 +0000
Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: yLlRJHPUWAAU8br6DOQMh3U9aMZ3E8PuNaviG6oFHmE=)
5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:fa:8a:f9:11:9e:68:4a:42:89:0b:45:23:31:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Aug 23 10:00:05 2025 GMT
Not After : Aug 24 10:00:05 2025 GMT
Subject: CN=2dbd30706bc184f623ea3c1a78e6fcd0f2905186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:47:ef:bd:6d:f4:06:db:dc:dd:78:20:23:
8f:fd:93:1c:74:57:95:63:95:77:95:8a:21:e6:e1:
3d:ed:b8:46:49:dc:1f:e6:4c:28:8e:db:ce:4d:dd:
4b:e4:99:50:04:b8:3a:46:37:68:8b:35:0b:6b:5b:
ee:7a:e6:7a:c6:88:5c:3d:c0:77:98:fa:b9:7f:d9:
67:db:f9:9b:b5:ac:55:b1:2d:18:37:3b:c2:d3:4f:
0e:db:1d:82:ef:9e:7d:54:ed:d1:bd:07:49:02:e7:
b2:a4:70:23:d2:1d:89:3d:6c:bb:3c:7e:8d:68:3f:
43:c8:a2:88:6e:65:ca:98:0b:c7:9e:a4:8c:39:ee:
c3:17:f9:36:59:5f:9e:12:55:41:10:2a:c6:e0:ab:
fe:82:5f:98:d1:ae:b8:8c:fe:7b:ce:18:b0:3b:44:
4c:76:db:0d:2d:7b:78:ed:af:47:e3:30:da:f3:df:
94:b8:1c:e3:58:61:e4:d8:15:1c:88:63:ee:3a:8b:
4f:d5:c8:bb:0e:71:09:41:1f:fc:e1:c6:3d:ec:e1:
a9:c3:71:63:ed:f1:7a:4f:61:6d:68:ee:16:fc:04:
51:0f:96:12:72:ff:e0:d8:cd:e7:30:71:10:d1:36:
f1:25:65:14:39:05:24:c4:7e:6a:76:31:e3:ee:ae:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:30:70:6B:C1:84:F6:23:EA:3C:1A:78:E6:FC:D0:F2:90:51:86
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d8:a0:cf:ef:d4:8d:36:dd:bf:21:a4:3f:df:4e:a9:a5:24:
38:e8:d8:f4:04:43:0e:5d:d0:1d:05:11:88:6d:27:fa:ba:9e:
dd:af:e4:93:89:ea:88:3b:f1:a6:de:10:ab:df:4c:9d:41:24:
d3:df:fb:54:0c:4c:b5:74:40:50:81:8e:5e:ac:46:8d:33:81:
03:41:65:db:13:02:48:83:00:2e:74:3b:70:d7:97:f2:70:06:
54:5b:b1:ac:d4:aa:32:ba:9b:df:f5:fe:d9:b9:27:8b:3d:55:
11:8a:f7:a1:f7:a4:f2:c4:65:d5:a0:df:d9:f7:ca:3e:b5:f0:
0c:b8:c3:29:a9:e5:b5:1c:68:2b:83:0d:96:33:3a:06:17:c4:
30:15:71:b9:6d:79:46:54:af:18:8c:82:1f:dd:aa:a9:7d:0d:
cf:1a:63:67:4a:a8:0c:81:49:d7:32:83:7f:18:0f:10:39:18:
fa:24:4b:8a:49:1a:85:fb:8e:ae:25:b5:68:a7:9b:e8:31:8b:
f6:0e:90:26:3c:54:0d:28:92:f2:87:87:a8:43:9e:cd:97:d4:
f4:a1:e6:66:a2:26:29:45:11:83:d5:9e:8f:42:48:16:da:2d:
1c:9d:18:fd:a7:ff:2e:34:96:51:9f:16:c0:91:28:17:ea:11:
85:91:6f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:48 2025 by rpki-client