Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: FFaLy+qiRk+4aGGcqZP/n+HcYo3PzRFRs/FT3Qh048A=
Subject key identifier: CA:EA:F9:E7:A2:06:AE:9C:C3:65:92:C2:0C:65:02:C3:09:17:08:2E
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 0199FBEB125D1A940A98CA122230EFF80499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: Q8Wz7B+VaCZsrMP1nGD7D7z9FBGSSCXA0WyGfF9qxOk=)
5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:12:5d:1a:94:0a:98:ca:12:22:30:ef:f8:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=caeaf9e7a206ae9cc36592c20c6502c30917082e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:26:fb:4a:29:83:4a:39:f6:c4:b8:b8:0f:
13:ac:5c:6e:91:b6:fb:3a:b0:1f:cb:39:c9:b5:a0:
c7:d2:ee:36:52:81:10:fb:f7:66:9a:f2:39:a8:57:
0e:93:10:61:97:3a:c2:d9:98:7a:29:5e:8f:b6:90:
76:a9:9c:0b:b2:37:f0:84:50:28:1f:7d:b7:b9:25:
83:57:ed:97:b2:c6:09:04:d1:01:df:58:a2:b8:c4:
8f:58:13:ab:33:b6:bb:08:cc:5b:08:6f:65:33:1b:
3f:18:41:1c:ea:3b:15:6f:7e:88:f9:71:f2:c7:de:
a0:57:42:8b:1a:b9:2a:13:78:83:88:aa:d0:a5:88:
4e:1d:b8:e4:b4:e3:0d:f6:2e:7a:84:f2:99:8a:17:
c4:68:84:18:bf:cc:70:2f:d6:75:91:19:ae:ee:83:
d1:33:e8:54:10:6b:e0:c3:85:e4:e8:35:67:5b:a8:
7e:df:08:b1:18:18:6f:16:c1:c2:8a:6f:18:c7:85:
f2:51:45:7c:c9:0b:c6:a2:d7:6e:69:b6:9b:26:95:
dd:a8:b7:bc:76:04:44:4e:e7:3c:7b:a5:a0:59:26:
43:5f:14:57:4f:f5:8d:02:f8:b5:a1:bb:8c:60:e6:
3c:0a:9b:4e:2d:74:7e:f2:c7:61:55:c0:1b:73:17:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EA:F9:E7:A2:06:AE:9C:C3:65:92:C2:0C:65:02:C3:09:17:08:2E
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ae:82:a8:a7:b4:16:74:7c:36:9a:63:8a:78:55:29:68:f4:
cb:98:30:66:d2:26:b7:bc:09:65:18:a3:8f:ca:eb:11:c1:77:
b1:31:d0:13:11:44:9d:f0:37:ef:4e:ac:7f:95:88:dc:4d:a0:
2a:95:59:05:e4:32:7a:97:4d:95:28:db:a1:13:7a:c8:03:32:
53:0a:37:5d:2a:00:13:9c:72:2b:d4:0d:54:43:eb:e8:bb:c9:
12:51:ad:4c:42:bb:c4:3e:4f:e9:1d:11:7b:be:39:93:1d:11:
f4:a1:3a:6b:c5:93:be:0d:76:51:96:1b:8e:05:1e:b3:8a:6c:
02:7b:16:c1:81:dc:5b:01:c6:85:30:f9:79:f3:b2:a1:06:7c:
b2:a1:90:d0:7a:7d:cc:56:db:72:88:ee:30:a9:30:1b:1b:fd:
1d:4a:4c:f8:aa:9f:00:26:3e:1e:52:20:02:51:1e:30:ab:1c:
15:fc:63:9c:41:a5:cd:49:ce:c5:bf:64:cd:64:f5:b2:48:0e:
66:7c:a7:44:6d:2c:1c:7f:21:2c:c7:60:ba:be:9e:24:da:a4:
16:14:70:e8:8d:b2:2c:2f:57:b9:7f:2e:73:4a:4f:23:b0:08:
c8:97:1f:a0:30:0f:b0:b7:31:ef:b3:55:2d:99:c1:6f:17:c8:
41:5a:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:04 2025 by rpki-client