Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File: ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier: o9+wn1zY27FH2yZaGtFdtJmFLN69Ti8I0V16SsIFrpw=
Subject key identifier: 2D:52:5E:BE:52:66:3D:48:9E:BF:A1:7B:01:5E:45:1F:9F:2F:14:C0
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer: /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial: 01984A40E0367A02A02FA4F9A77B681077C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number: 0411
Signing time: Sun 27 Jul 2025 05:00:22 +0000
Manifest this update: Sun 27 Jul 2025 05:00:22 +0000
Manifest next update: Mon 28 Jul 2025 05:00:22 +0000
Files and hashes: 1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: jpLwUOVBV05XkDZIEhpiNXJQU/c6YmYRpYrreOcGEuA=)
2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:e0:36:7a:02:a0:2f:a4:f9:a7:7b:68:10:77:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Validity
Not Before: Jul 27 05:00:22 2025 GMT
Not After : Jul 28 05:00:22 2025 GMT
Subject: CN=2d525ebe52663d489ebfa17b015e451f9f2f14c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:a0:86:86:c5:8b:29:4f:20:d3:9b:e3:81:
eb:b4:8f:e3:f3:e1:b0:36:1d:5d:6d:cb:6a:9b:0c:
72:5e:19:96:73:7c:9c:a5:71:3b:28:9b:88:f2:d2:
3d:16:1e:16:7d:34:02:c2:4b:b0:47:65:63:51:bf:
36:45:38:02:7e:d1:96:d1:3f:74:d2:87:df:fd:14:
51:5b:3e:29:39:57:5b:fe:ef:b8:3f:24:d4:dd:ca:
23:10:45:74:29:77:a4:1f:85:0e:1b:bb:10:ea:84:
af:ef:5e:7d:fb:b9:bd:a5:29:ae:5c:70:90:69:8c:
1a:24:55:b7:d8:45:9b:85:d0:a1:29:30:72:a7:c1:
36:a7:0a:9d:3f:2c:24:be:23:59:3c:e1:34:52:0f:
30:36:0a:da:1e:78:5c:3c:91:73:ee:b5:77:6b:b5:
65:ef:a5:7d:e0:b1:27:81:1a:34:1c:63:e2:c3:8c:
6a:2f:79:1c:cf:ed:2d:81:2c:ec:dd:2c:94:9a:4f:
17:b9:69:8f:8d:5e:76:c9:32:18:cb:56:9d:28:8a:
4a:88:53:67:87:45:7e:00:34:76:5a:0f:12:96:b4:
d7:3c:99:04:4e:74:56:da:cc:ea:4d:52:32:06:00:
59:70:ec:c4:72:36:e8:50:74:63:40:c5:3c:76:b1:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:52:5E:BE:52:66:3D:48:9E:BF:A1:7B:01:5E:45:1F:9F:2F:14:C0
X509v3 Authority Key Identifier:
keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:96:ed:34:31:9a:7e:24:ed:d6:65:84:ee:89:74:d2:8a:80:
42:67:e1:69:01:a4:f0:68:8a:92:97:73:aa:90:83:99:6e:24:
b9:5b:48:5b:1e:27:2a:e9:ff:87:e2:ec:6e:ca:27:55:23:8d:
38:ec:ea:c4:f5:04:cf:1c:fe:b2:53:af:aa:5c:11:a5:a8:52:
30:73:ed:5f:8f:3c:26:7a:7f:b6:37:a2:60:2e:ab:de:cf:b8:
54:61:ef:70:00:66:b4:38:95:db:9f:cb:dc:a9:a4:28:20:f5:
a5:b5:1a:e9:2c:28:c9:e1:9e:f1:21:7b:c6:b8:f0:d0:e1:53:
ae:19:08:72:75:4a:d4:b9:96:82:42:ed:51:26:6e:0d:48:53:
7f:2d:d0:06:a0:a4:99:5f:b9:71:8b:95:64:da:0a:48:30:08:
1d:e3:c7:dc:42:fa:64:bf:a3:ee:2a:39:75:4e:3c:ff:72:1c:
37:07:b0:a4:ce:ec:38:4b:e8:67:d2:7e:bd:09:32:a5:76:3a:
6c:43:dc:12:07:09:79:7e:84:bd:aa:13:b9:e5:f2:94:2c:ff:
1f:7b:1f:8f:22:71:9d:20:e5:37:44:9a:9d:77:97:31:12:b0:
93:3f:ea:30:6d:8a:42:bf:2d:23:1c:22:66:93:a1:c8:b4:16:
1a:70:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:15 2025 by rpki-client