Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: f8hfpIrEn26/5ACl7sRdrfkGT+7ct5YiGfR/KcK9tVE=
Subject key identifier: 94:80:8D:29:92:3E:75:F5:39:62:E5:B4:44:6B:D9:05:F8:18:4C:BD
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 0199C4C4D51173EF92EEB0DBB910B6EF4015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 11E7
Signing time: Wed 08 Oct 2025 17:00:57 +0000
Manifest this update: Wed 08 Oct 2025 17:00:57 +0000
Manifest next update: Thu 09 Oct 2025 17:00:57 +0000
Files and hashes: 1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: x9jVNBx3dAH33wmFMzDG9jNHEE4dcOYMhzG+kio30qY=)
3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:d5:11:73:ef:92:ee:b0:db:b9:10:b6:ef:40:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Oct 8 17:00:57 2025 GMT
Not After : Oct 9 17:00:57 2025 GMT
Subject: CN=94808d29923e75f53962e5b4446bd905f8184cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:28:b7:79:66:30:47:eb:f1:79:8f:65:37:
82:1b:b6:d0:48:43:37:7d:60:a7:e2:f3:71:be:d3:
0e:4c:4b:18:ad:dd:bb:ea:ab:08:6f:13:5c:9c:d5:
b5:7e:80:84:32:19:19:30:78:11:97:99:66:15:a9:
ba:f4:b6:25:f2:af:52:30:15:22:04:b0:b6:b8:57:
02:e0:e1:c5:16:14:21:94:c4:af:40:cf:3f:5d:2a:
5f:c4:db:72:79:17:96:8a:87:ef:ea:ed:f8:2a:4d:
8d:8f:9b:25:1a:7d:ce:50:e8:da:db:4b:5c:fe:88:
22:28:53:62:20:5a:4a:84:e2:2f:9d:fd:69:c4:26:
00:5d:cb:75:b5:2e:d8:c9:44:38:6d:c4:06:22:0b:
e3:88:db:90:37:ed:7f:b8:44:8f:e9:40:00:b0:cd:
4f:c5:61:e7:9e:70:7f:7e:55:a8:b0:40:c0:cc:ef:
cc:70:ed:6c:7e:e9:83:9c:e8:27:6b:08:1c:1d:e6:
93:0a:80:51:f3:c0:dc:7a:20:5c:f1:de:fd:67:27:
d9:73:90:91:9e:4b:ac:40:a9:15:cd:3f:2b:48:e7:
de:3f:cb:55:94:1f:f7:3b:1c:85:98:11:6a:fe:c6:
29:47:1d:6f:58:48:d6:dc:35:00:bd:81:74:14:5a:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:80:8D:29:92:3E:75:F5:39:62:E5:B4:44:6B:D9:05:F8:18:4C:BD
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a4:36:72:bf:bc:da:6d:e5:98:d8:a9:45:61:c3:48:5d:2e:
4d:57:fa:d5:89:58:f5:9a:cf:76:fa:c8:99:c1:48:22:30:03:
d6:f8:51:37:43:99:d0:c3:40:72:a5:06:5e:8c:a8:8a:ca:6d:
9b:4d:5b:20:3f:99:a2:7a:9f:49:ce:67:6f:f4:b6:d2:41:52:
13:13:80:e2:c4:58:29:ee:ad:71:66:df:9c:8b:65:a1:3a:07:
5a:60:e2:5b:1c:2c:83:67:20:b7:64:4c:c5:f1:c5:7a:8f:5b:
cc:58:48:97:c1:62:d3:8d:5a:f9:52:39:1e:a7:d4:7b:10:0d:
36:0e:74:36:1e:f6:ae:8b:66:21:67:79:27:bb:9b:c1:a5:f0:
42:9a:08:8d:64:86:68:c0:7c:86:ff:fc:3b:d2:22:b2:3c:df:
ad:ce:97:e6:fd:f5:b3:38:ca:1e:2c:d8:d3:c7:95:ff:d2:ac:
57:20:79:66:59:f2:35:25:12:25:b1:7c:2d:8e:f8:a0:dc:02:
23:2f:b9:25:f6:ea:6f:82:cc:ad:32:ef:84:53:ac:54:79:b8:
d1:f9:63:b9:ab:d5:66:d4:1e:5f:17:5c:33:51:d3:76:6d:44:
f2:6a:03:fa:22:78:c2:8e:9c:ec:de:86:c3:32:41:32:d7:e5:
ff:93:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:59 2025 by rpki-client