Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: sLY+OM0+LnR8a00zkB/sJWI7cxN+G0my9zRBI2YQMtM=
Subject key identifier: 7F:98:D1:76:10:93:B6:10:97:45:62:DF:1D:B4:FF:FB:A9:EC:C3:48
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 01984A41336E063BA417CDFBFC4CB2280DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 1123
Signing time: Sun 27 Jul 2025 05:00:43 +0000
Manifest this update: Sun 27 Jul 2025 05:00:43 +0000
Manifest next update: Mon 28 Jul 2025 05:00:43 +0000
Files and hashes: 1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: Wnr2K5i/CS3I1aVpGFw2mh/JqDW7f6fl6F2P8jDlJPI=)
3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:33:6e:06:3b:a4:17:cd:fb:fc:4c:b2:28:0d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Jul 27 05:00:43 2025 GMT
Not After : Jul 28 05:00:43 2025 GMT
Subject: CN=7f98d1761093b610974562df1db4fffba9ecc348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:47:90:40:7a:ef:43:ef:f0:a3:74:a3:c8:
05:a1:d9:fb:cc:5e:79:d3:46:ca:b1:49:e0:3a:5b:
12:eb:f2:f2:9b:56:d4:5e:19:88:e2:8f:f6:bf:53:
ba:a9:5d:3a:32:50:64:3d:f5:c0:13:05:5b:22:b0:
ba:02:4a:92:49:0c:d0:78:16:69:a7:90:71:9c:d0:
1c:a5:f8:5e:d5:64:ef:14:71:ab:d0:01:9f:00:3a:
56:10:a5:3d:b8:b3:43:52:7b:63:91:8e:82:88:d0:
9d:5b:76:8c:d7:30:28:5e:f1:06:a8:28:43:bd:13:
1b:87:66:d2:14:59:42:c7:64:a6:be:e5:48:03:02:
24:97:9d:8f:75:13:3e:8b:54:e8:dc:13:56:fa:16:
ec:d6:43:6f:0c:ed:00:e5:75:19:a5:dd:b3:13:ec:
8c:c9:64:93:9c:66:46:89:4d:08:4c:94:18:c2:96:
5c:49:3b:b3:56:fe:1a:d9:3a:78:92:a0:db:ec:d6:
ac:19:9c:2b:b5:58:02:fc:a2:07:65:a7:4a:66:e3:
64:6e:87:53:c9:53:e2:4f:a0:82:cc:98:95:c3:d4:
eb:ed:29:60:cb:cf:25:19:44:62:9c:1d:67:a3:c4:
93:7a:33:17:83:19:d4:4a:a8:d6:24:5c:9c:2d:e2:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:98:D1:76:10:93:B6:10:97:45:62:DF:1D:B4:FF:FB:A9:EC:C3:48
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e2:b6:8d:15:1b:59:d2:0b:f5:f8:14:36:9d:f8:1b:93:b2:
7e:a1:c4:c9:35:57:94:75:35:53:6c:db:7e:3e:a3:e1:d4:a1:
ef:f2:be:5c:4a:02:e9:1d:be:85:1a:b2:98:45:10:17:db:2d:
16:cb:28:d4:06:12:d5:64:4c:c6:a8:de:52:25:8e:70:91:60:
ec:f8:94:71:ea:2e:1d:50:23:54:3d:59:cb:b2:72:db:41:dc:
f2:09:be:89:67:96:78:4a:08:d4:9d:71:d3:5b:34:e1:ec:38:
36:02:31:67:61:bf:48:19:1b:41:68:21:bf:a4:96:bc:74:76:
41:43:2c:3e:19:05:a9:09:40:af:64:07:b7:f2:e0:94:2c:17:
86:fb:8d:59:9b:60:f1:2f:31:57:55:d6:0f:8e:78:67:c0:d9:
3b:b1:28:d8:8f:3a:d9:22:03:26:78:f3:f9:fe:bf:81:00:33:
6e:38:1a:d4:f7:a9:26:04:54:f6:c8:fe:d0:c1:eb:0c:14:34:
16:5b:33:d5:a0:20:37:b8:b2:7d:b9:3b:a9:bb:16:9b:7d:d6:
f9:96:b0:3f:74:36:01:88:65:d3:c1:b4:08:be:1c:f6:c9:be:
9b:bd:0f:b6:72:ca:8e:85:36:99:f5:1c:b3:6a:ec:12:01:b1:
e5:b9:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:09 2025 by rpki-client