Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: J98U3b4LlI5nWVtnnAkrb/RC6m5hvRlS0JCCrykpo+c=
Subject key identifier: 54:01:E4:62:84:B5:DE:8F:47:17:50:5B:DD:2F:10:FC:4C:2D:9E:5F
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 0198D54E630A58738BBB3F9E55C9EC79EB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 116B
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: 9/EnEjZAO9pk0nEJMPY5Z/JN2Jhx/7OWCCUxZ7/CaVI=)
3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:63:0a:58:73:8b:bb:3f:9e:55:c9:ec:79:eb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=5401e46284b5de8f4717505bdd2f10fc4c2d9e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:07:d3:e6:94:37:16:69:77:38:8d:bc:5a:
2b:8e:c0:7a:d5:b4:a0:ef:8f:fd:90:e1:13:3d:02:
a9:77:ba:20:1c:4d:99:55:1d:0e:1b:4f:e8:c7:4c:
6f:ce:18:1f:c9:2c:0e:0d:7e:58:e6:74:61:17:ab:
0b:0d:95:00:bc:47:ae:ce:9b:fa:07:d9:54:06:a3:
2c:97:99:ff:d0:30:30:bd:68:82:fc:b8:82:62:43:
4d:e2:85:e3:7d:58:69:0c:f0:9d:86:37:43:36:c8:
17:c0:36:69:d9:85:02:de:ad:9d:b0:eb:4b:c6:70:
a1:a9:32:e6:e8:86:b4:49:ca:c9:4a:1c:a5:e9:00:
47:b8:58:8a:8e:14:2e:0e:e5:ce:d1:41:a8:d4:fd:
1d:a5:78:70:21:a1:a9:45:29:82:55:ab:a1:88:31:
8a:c8:8b:3a:ee:e8:d2:4c:4a:67:32:30:ca:e9:0d:
91:38:ba:0c:c1:0a:8f:2b:ef:93:27:d5:49:92:ef:
0c:7e:92:a8:04:90:1b:18:e4:84:27:26:f4:56:c3:
20:7f:30:75:a0:f8:36:65:f3:c8:2f:8c:85:63:86:
a5:6a:61:76:71:f0:f6:72:c5:d5:bb:13:09:99:59:
96:6b:c0:b8:c3:21:53:fe:be:65:1d:ad:4e:fa:2b:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:01:E4:62:84:B5:DE:8F:47:17:50:5B:DD:2F:10:FC:4C:2D:9E:5F
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:2e:2b:e2:c6:4e:31:c1:be:d4:32:f1:b1:55:f3:06:4e:
39:1f:17:10:8a:4f:59:e2:a8:70:0d:eb:0e:91:81:6b:76:44:
78:73:6d:75:5a:09:f5:39:10:a1:fc:17:78:70:79:82:4a:c3:
ab:02:af:ee:26:09:a9:0b:20:da:38:87:c1:ab:22:31:14:5d:
9e:13:2d:97:94:7d:29:a1:04:a0:75:ea:62:79:6b:84:2e:9f:
f5:f6:bf:32:a6:32:54:1a:f0:0e:0b:21:d8:e0:e0:b7:83:08:
5b:9c:25:cd:7c:09:03:0c:00:42:6a:42:01:1c:b2:4c:50:09:
d2:ad:ec:07:85:25:db:2f:bf:0c:21:41:9f:5f:0f:44:36:9d:
4e:fe:27:4d:4e:db:7e:f4:9f:9e:46:11:f2:6c:85:16:dc:6c:
5d:3d:43:73:6e:61:26:a2:3d:a7:8b:ff:a5:d9:03:c3:40:a2:
0a:1f:93:b9:bd:50:a1:ab:72:0a:6e:ef:1f:bc:57:30:c0:bb:
86:51:62:27:33:c5:df:d1:86:a9:32:3e:2f:47:f1:1d:de:7b:
2f:c4:7b:fc:18:0c:e9:d9:89:64:aa:e0:73:37:b2:46:69:79:
1c:73:52:63:88:8c:f3:a7:55:ed:38:1c:30:a7:26:e7:d1:71:
08:1f:fc:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmMKWHOLuz+eVcnseetHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDEwZjcyOGQ2NDk5YTc0OWFlNTkwMmU4ZmE4ODNmMWFk
ZDQ1MTcwHhcNMjUwODIzMDUwMjIwWhcNMjUwODI0MDUwMjIwWjAzMTEwLwYDVQQD
Eyg1NDAxZTQ2Mjg0YjVkZThmNDcxNzUwNWJkZDJmMTBmYzRjMmQ5ZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQYH0+aUNxZpdziNvForjsB61bSg
74/9kOETPQKpd7ogHE2ZVR0OG0/ox0xvzhgfySwODX5Y5nRhF6sLDZUAvEeuzpv6
B9lUBqMsl5n/0DAwvWiC/LiCYkNN4oXjfVhpDPCdhjdDNsgXwDZp2YUC3q2dsOtL
xnChqTLm6Ia0ScrJShyl6QBHuFiKjhQuDuXO0UGo1P0dpXhwIaGpRSmCVauhiDGK
yIs67ujSTEpnMjDK6Q2ROLoMwQqPK++TJ9VJku8MfpKoBJAbGOSEJyb0VsMgfzB1
oPg2ZfPIL4yFY4alamF2cfD2csXVuxMJmVmWa8C4wyFT/r5lHa1O+it1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQB5GKEtd6PRxdQW90vEPxMLZ5fMB8GA1UdIwQY
MBaAFHnRD3KNZJmnSa5ZAuj6iD8a3UUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgt
YjlmMDVlMzE1MjNhLzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgtYjlmMDVlMzE1MjNh
LzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagguK+LG
TjHBvtQy8bFV8wZOOR8XEIpPWeKocA3rDpGBa3ZEeHNtdVoJ9TkQofwXeHB5gkrD
qwKv7iYJqQsg2jiHwasiMRRdnhMtl5R9KaEEoHXqYnlrhC6f9fa/MqYyVBrwDgsh
2ODgt4MIW5wlzXwJAwwAQmpCARyyTFAJ0q3sB4Ul2y+/DCFBn18PRDadTv4nTU7b
fvSfnkYR8myFFtxsXT1Dc25hJqI9p4v/pdkDw0CiCh+Tub1QoatyCm7vH7xXMMC7
hlFiJzPF39GGqTI+L0fxHd57L8R7/BgM6dmJZKrgczeyRml5HHNSY4iM86dV7Tgc
MKcm59FxCB/8IQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:36 2025 by rpki-client