Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: yFcFWEAKIDUNmN8sUQgpjP6Dr3uQ2MibYr0n6Xl+2Qk=
Subject key identifier: 97:CC:BA:4E:AE:7E:D9:AC:BD:A4:F4:90:C1:DE:15:41:A4:EE:E0:E0
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019845BF2837DD3E7E2CE01EA8A770C6118D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 08:00:12 +0000
Manifest this update: Sat 26 Jul 2025 08:00:12 +0000
Manifest next update: Sun 27 Jul 2025 08:00:12 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: EoHhWg9ic3X8Tf/oXgX2LCYTSzjZ8L0evFrjFqTq1DE=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:28:37:dd:3e:7e:2c:e0:1e:a8:a7:70:c6:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jul 26 08:00:12 2025 GMT
Not After : Jul 27 08:00:12 2025 GMT
Subject: CN=97ccba4eae7ed9acbda4f490c1de1541a4eee0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:00:72:3b:52:22:de:79:0c:b9:fd:b9:f9:
83:a1:e1:7b:38:2d:1a:51:75:c9:fc:1b:32:4a:04:
63:85:ca:90:71:a8:86:22:e0:0e:2c:29:dd:81:15:
da:15:ef:b3:1f:8b:b7:be:5f:1a:53:ca:f1:d4:90:
71:5e:f3:c5:00:f0:70:dd:f8:6f:5e:35:2e:85:c7:
b0:01:2d:58:db:18:90:64:18:ad:6d:53:a3:3f:41:
b6:d2:5b:b7:2d:c5:91:dc:26:c3:bc:6a:23:cd:fa:
4a:b9:ac:9c:fd:59:a1:23:e4:f4:a4:cf:18:fb:64:
00:6d:8e:a2:29:d8:21:a1:2d:01:1e:e7:87:06:27:
c9:2e:de:71:92:7b:31:f9:b6:60:b5:b9:a0:27:84:
70:be:29:2d:79:ac:5b:62:3d:9e:d9:8d:ca:35:49:
ee:ef:d9:42:4c:ef:2e:14:7a:20:f4:9c:ef:bb:90:
c7:cf:cb:7f:1a:48:39:44:8d:a3:75:33:2e:97:38:
16:6d:2d:08:1e:97:fa:69:d3:0b:a5:01:e9:a4:d4:
41:ef:8e:2f:b4:0f:47:63:42:c7:47:8a:3a:27:29:
f2:c7:a6:41:92:d8:3c:ed:ef:fe:bf:a2:18:b5:ef:
21:fe:ef:74:69:db:65:00:de:46:71:6e:b4:2a:7a:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CC:BA:4E:AE:7E:D9:AC:BD:A4:F4:90:C1:DE:15:41:A4:EE:E0:E0
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:67:80:31:1a:12:b5:0b:70:84:64:77:d0:e0:ed:ca:bf:c6:
24:a9:51:06:e2:97:30:85:90:3b:04:96:6c:2f:fb:df:a9:13:
fe:11:27:9b:61:e2:c9:3f:e0:ca:a5:26:98:6f:13:46:93:15:
69:e9:e7:2b:39:e3:5c:89:f7:62:0b:60:a5:0f:bd:bd:0b:6a:
48:94:0c:c7:18:4c:f6:5b:53:86:85:e8:f0:78:db:a6:df:db:
9f:53:cd:8a:dc:33:ca:ab:6b:6f:d9:a7:4b:d9:24:e5:9f:18:
66:34:c9:55:ad:14:31:5e:21:c8:07:91:50:3f:78:32:b7:c3:
a2:5d:a9:f1:69:d6:90:cf:25:bb:7b:ef:01:93:e9:8d:59:d9:
fc:25:5e:da:26:be:da:a9:f7:56:a2:5e:ed:d5:58:75:28:21:
a5:c1:ff:52:fa:19:d6:25:f1:a8:01:2f:92:32:b4:ff:c4:bb:
1b:8f:41:f8:27:0b:2f:86:ff:e6:d9:e4:ae:4b:3b:6f:ea:c9:
10:77:54:65:68:e7:6a:ae:be:68:02:ab:69:43:14:fa:d4:ba:
ae:4b:09:37:9e:a6:e6:6b:17:82:3d:22:67:63:54:b0:9f:e1:
1a:34:21:0d:02:8b:24:6a:6c:99:af:82:93:7f:34:9b:94:d4:
c7:ec:9f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:43:12 2025 by rpki-client