Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier: rlCkIlQYiQjrsWiCtipJPsRIP1J+2yCMImcLUfnnLME=
Subject key identifier: DB:D7:58:17:CA:1D:B6:E2:C0:F3:AE:A8:92:FF:AF:36:5F:6A:6E:44
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial: 019A7225EE944A679495AEFB533A573FD29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number: 095D
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: wyGDquZigpyn0l+jy87xEK37j1uJn2BUDbph1vLmbj4=)
2: Rm4G8KwJAms34HdBJGkkvyGyVeo.roa (hash: /H/EXJlnlnkPcjJyZSTq8hc9wXqmJ/nwbv9HzKcNsm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ee:94:4a:67:94:95:ae:fb:53:3a:57:3f:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=dbd75817ca1db6e2c0f3aea892ffaf365f6a6e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:da:03:ca:a6:b5:6f:65:60:7b:0c:85:b2:
4d:c7:81:ac:dd:76:75:74:f0:43:6b:5e:5f:31:bd:
aa:42:87:fb:5a:43:5b:51:d4:e4:79:e0:9e:f8:db:
9d:43:f9:1a:e7:2e:30:2c:e4:3b:bc:00:36:b1:03:
76:1b:2a:3b:55:03:20:03:70:c5:f9:a5:21:3a:07:
8e:7f:6b:5a:75:d7:7f:fd:9c:43:9e:1f:be:1d:70:
63:2a:31:fe:4e:b4:36:a1:1f:28:92:b2:4c:7a:55:
9a:22:ab:5f:e6:9b:02:9c:bc:2d:ae:65:67:98:05:
36:56:71:3f:e6:b9:73:30:0e:51:1c:c7:2c:50:e3:
a9:e5:32:88:45:aa:a9:0d:5c:b5:69:ba:43:ca:43:
e1:cb:22:d8:09:ee:ff:2f:fc:83:f9:5c:2b:ab:eb:
20:06:55:29:b9:9c:71:15:37:5e:08:d2:37:04:b0:
c6:bc:3e:7d:0d:69:75:c0:df:c0:f2:18:36:35:ec:
d6:b7:e8:8c:eb:bc:16:a5:df:3b:f8:1a:c0:c2:96:
42:de:e6:5c:cd:5f:e7:8b:b5:1f:2a:a9:ac:60:52:
e1:79:b8:22:d2:71:80:68:cf:7f:fb:27:c3:95:85:
92:5f:f3:58:20:34:9b:f9:a0:2b:c2:76:6a:d1:ea:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D7:58:17:CA:1D:B6:E2:C0:F3:AE:A8:92:FF:AF:36:5F:6A:6E:44
X509v3 Authority Key Identifier:
keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:40:02:e9:6e:32:ec:7d:63:0d:37:d7:05:2e:21:f3:18:a9:
ba:b4:79:94:c9:ed:7c:c0:b2:57:ab:95:3a:ee:ea:2d:4a:e5:
9a:12:3d:b2:73:82:1a:8a:2b:ce:40:79:66:cd:5e:44:83:43:
9a:25:3c:8e:6b:e4:1b:4e:eb:d8:05:c6:42:3e:d0:ed:c1:df:
84:1a:03:2e:2e:86:7e:48:78:f6:30:b5:9a:cb:63:71:aa:5b:
40:78:41:26:fb:c3:f8:49:c6:8a:a3:b5:7c:6f:89:f2:d9:7c:
e7:ff:1e:95:17:bc:96:de:94:b7:23:d2:07:ab:d3:22:c8:cf:
27:06:15:a1:31:18:ad:df:ab:b0:fc:b2:71:c3:13:99:7f:70:
2b:4b:6f:2a:50:02:c3:1c:7f:2c:74:1f:08:c0:7f:fe:7b:0b:
7f:ae:a7:e9:fb:2a:a7:58:8a:78:71:ce:b5:9e:63:07:45:09:
c4:cd:44:fc:96:e6:86:49:9a:1d:f6:26:45:27:fb:c3:bb:47:
07:fc:ea:40:12:b9:de:d9:ab:9c:ef:0c:8e:b1:8a:bb:8d:cc:
0b:b5:49:9c:ff:39:91:9f:ee:3f:e7:5e:c2:18:4e:66:11:bd:
3b:9b:4f:e4:c5:f9:3f:8a:96:0f:7f:80:86:dd:3b:50:4a:a5:
c2:56:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:40 2025 by rpki-client