Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: dfJ1IXcgyp0wtGBRZcEMEV0PgSNMCsulfrciRWL/47w=
Subject key identifier: 86:98:4C:E8:F6:87:04:E9:8E:2E:F4:5C:3A:B6:C3:20:29:06:79:4D
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 0199C5D920238577676FAE90C86C330C438B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 22:02:45 +0000
Manifest this update: Wed 08 Oct 2025 22:02:45 +0000
Manifest next update: Thu 09 Oct 2025 22:02:45 +0000
Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: /fiUWoGbWZAa9yTuGpdKGhdTlSfD8wTXq7HD7UdiRtE=)
5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d9:20:23:85:77:67:6f:ae:90:c8:6c:33:0c:43:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Oct 8 22:02:45 2025 GMT
Not After : Oct 9 22:02:45 2025 GMT
Subject: CN=86984ce8f68704e98e2ef45c3ab6c3202906794d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:b9:aa:7f:76:32:48:e5:01:1b:65:fe:90:
65:be:92:2b:88:d5:d6:1a:99:39:50:ee:c8:f4:48:
49:e4:5c:a1:68:4b:8b:89:e5:dc:4b:3c:d0:9e:bf:
88:0f:80:c2:06:35:d1:88:1d:bb:a5:b6:c0:64:08:
45:56:bf:7e:f8:aa:2c:da:5d:ff:db:b4:80:d3:09:
0a:29:8d:93:55:36:2d:88:24:4a:7a:15:35:80:c3:
97:aa:3f:81:06:01:96:75:84:91:21:4a:d8:41:2a:
7f:c1:85:91:b6:ff:e4:2f:35:d3:69:19:49:a5:2f:
eb:78:97:88:64:2c:f3:3b:86:39:7e:fc:e8:fc:84:
5d:23:ce:e5:e7:0f:ae:00:2b:25:f3:29:93:ea:c5:
4c:a5:8b:0f:46:16:02:84:21:2c:4b:bd:43:d6:3e:
f7:ee:fd:39:c0:f0:d2:56:86:39:30:97:a4:bb:9a:
2b:ac:76:dd:0b:d0:49:a6:b5:38:e0:98:4c:b9:e8:
e8:32:b0:e8:98:e0:85:32:6c:bf:b8:28:fe:fb:75:
7d:c1:0c:ed:2b:a8:61:a7:d6:f5:d5:37:fe:43:89:
c6:f8:52:33:c2:1a:fe:76:b8:83:f9:08:fd:b9:c2:
60:15:52:50:9f:01:f4:da:16:35:32:29:e8:22:63:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:4C:E8:F6:87:04:E9:8E:2E:F4:5C:3A:B6:C3:20:29:06:79:4D
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:36:52:44:0e:2f:db:64:83:cf:8c:2a:6a:7d:fc:63:26:cb:
ac:91:68:ea:aa:70:74:1a:cf:82:fb:9f:b9:24:d5:57:b3:ed:
41:d7:ce:14:22:f0:87:3e:ec:af:08:60:5a:6d:c1:c7:ab:98:
25:b3:5b:a4:2c:d9:0f:16:51:26:64:ff:11:25:73:b7:32:f6:
31:b7:d3:9f:3b:16:2b:ca:08:54:76:74:d6:c8:98:9c:aa:7c:
0e:96:4e:42:3a:56:1c:dc:b2:4d:49:22:f5:74:e0:09:5f:ac:
da:b9:c7:8b:10:be:4f:af:d6:da:92:00:08:7a:ec:f4:9b:32:
c9:8c:0d:09:58:b1:de:07:f2:97:df:d4:8b:4b:23:8c:d1:11:
4e:72:c2:18:d4:ff:08:a3:c0:a4:29:1d:7c:3d:12:3b:c5:40:
1a:7c:3d:59:71:6f:27:ea:de:9f:c8:13:bc:d9:7a:75:83:9c:
fe:42:15:a0:fa:ec:45:38:fa:2f:d6:8f:15:fc:ca:51:28:8a:
f3:b2:40:1d:01:1f:49:84:30:ac:c6:22:1a:25:e0:c5:ed:dc:
5d:f5:34:10:93:f7:30:f5:75:3b:18:e8:3e:f6:3d:88:f6:5a:
25:d2:32:95:d3:b5:32:33:32:fb:3f:39:16:f5:8f:da:91:02:
13:39:48:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnF2SAjhXdnb66QyGwzDEOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3
Mjg3YzcwHhcNMjUxMDA4MjIwMjQ1WhcNMjUxMDA5MjIwMjQ1WjAzMTEwLwYDVQQD
Eyg4Njk4NGNlOGY2ODcwNGU5OGUyZWY0NWMzYWI2YzMyMDI5MDY3OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkq5qn92MkjlARtl/pBlvpIriNXW
Gpk5UO7I9EhJ5FyhaEuLieXcSzzQnr+ID4DCBjXRiB27pbbAZAhFVr9++Kos2l3/
27SA0wkKKY2TVTYtiCRKehU1gMOXqj+BBgGWdYSRIUrYQSp/wYWRtv/kLzXTaRlJ
pS/reJeIZCzzO4Y5fvzo/IRdI87l5w+uACsl8ymT6sVMpYsPRhYChCEsS71D1j73
7v05wPDSVoY5MJeku5orrHbdC9BJprU44JhMuejoMrDomOCFMmy/uCj++3V9wQzt
K6hhp9b11Tf+Q4nG+FIzwhr+driD+Qj9ucJgFVJQnwH02hY1MinoImNO4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaYTOj2hwTpji70XDq2wyApBnlNMB8GA1UdIwQY
MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt
MzE5OTlmM2FkZDM2LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2
LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDZSRA4v
22SDz4wqan38YybLrJFo6qpwdBrPgvufuSTVV7PtQdfOFCLwhz7srwhgWm3Bx6uY
JbNbpCzZDxZRJmT/ESVztzL2MbfTnzsWK8oIVHZ01siYnKp8DpZOQjpWHNyyTUki
9XTgCV+s2rnHixC+T6/W2pIACHrs9JsyyYwNCVix3gfyl9/Ui0sjjNERTnLCGNT/
CKPApCkdfD0SO8VAGnw9WXFvJ+ren8gTvNl6dYOc/kIVoPrsRTj6L9aPFfzKUSiK
87JAHQEfSYQwrMYiGiXgxe3cXfU0EJP3MPV1OxjoPvY9iPZaJdIyldO1MjMy+z85
FvWP2pECEzlIeQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:23 2025 by rpki-client