Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: v/jEhmVtsyDlSKiImnM/Hkg8J5sNcB6uMbY8P1dRUGs=
Subject key identifier: 4E:30:DB:24:B0:2F:44:34:10:37:0A:85:E7:3F:52:95:96:BA:8A:B3
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 0199394B90AA003FB5316AA606F3C75BB727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 0DA1
Signing time: Thu 11 Sep 2025 15:01:17 +0000
Manifest this update: Thu 11 Sep 2025 15:01:17 +0000
Manifest next update: Fri 12 Sep 2025 15:01:17 +0000
Files and hashes: 1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: GTM7xUYD8rFIuUlCHXiPlRDwGD83th9CbUJSLemOYOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:90:aa:00:3f:b5:31:6a:a6:06:f3:c7:5b:b7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Sep 11 15:01:17 2025 GMT
Not After : Sep 12 15:01:17 2025 GMT
Subject: CN=4e30db24b02f443410370a85e73f529596ba8ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:e9:ce:66:87:8e:99:42:6a:35:bd:a1:41:
68:0d:95:9c:8c:20:4a:f6:b2:1a:4d:7f:c5:97:2b:
b0:3a:a7:19:dc:f0:fc:20:ab:11:7c:fc:63:54:4a:
bb:ed:0e:47:6a:2d:a2:61:74:41:9e:20:91:f9:a3:
7a:48:ac:c7:f7:28:8d:33:9b:bd:5d:ce:b7:13:fe:
db:cf:6d:72:fd:42:1b:38:6b:76:52:a3:5e:ee:1e:
27:d9:c4:74:23:09:85:ff:04:bd:c3:23:12:f1:62:
4f:a3:fd:cc:71:65:22:6f:a4:3d:f4:cf:ca:66:ef:
9d:fb:9a:59:c6:0f:72:98:5a:23:64:93:ed:4b:ac:
c2:d2:b7:b7:13:bf:ac:7a:73:ff:64:06:21:dc:a6:
0d:53:f4:8b:ab:7e:79:f2:a9:a7:69:b9:6c:62:22:
19:38:7c:4c:a4:02:52:a8:a7:54:6c:12:73:d0:6b:
ea:42:70:0c:75:ac:fc:6d:26:48:49:4c:43:64:75:
48:d5:9a:68:b9:2f:eb:ed:57:86:5c:c5:cc:cb:86:
de:e8:dc:f5:11:dd:9e:e4:e0:5a:ae:e6:2f:a5:1a:
0a:7c:e0:5e:3e:13:06:b6:cc:ad:6e:aa:4c:0c:26:
6f:2d:67:eb:9e:ae:00:ed:e6:5c:61:1d:ee:b5:e4:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:DB:24:B0:2F:44:34:10:37:0A:85:E7:3F:52:95:96:BA:8A:B3
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a4:a0:7e:5d:2b:45:0b:fe:b4:c6:ad:95:6e:c9:b4:41:f6:
fc:e8:fc:0e:fb:84:ee:aa:ac:d8:77:86:c4:d1:98:cd:65:19:
cd:b0:bb:49:4b:48:97:19:11:ef:8c:57:5d:cb:c5:85:58:54:
df:1d:8b:36:53:20:93:3e:4e:6f:26:64:e4:70:82:6e:c2:2b:
a0:49:d2:9c:0c:2e:92:f1:e6:8a:d7:79:a1:59:fa:d5:1a:79:
b6:6b:73:d1:91:2d:39:4d:6b:c4:37:01:39:b1:f4:01:d0:aa:
cb:08:e4:ef:7d:01:87:14:3c:70:32:1e:9e:7f:aa:a9:0c:ed:
01:d9:49:d9:b8:13:b0:82:34:ae:90:01:55:63:98:e2:43:cb:
0b:f0:d3:0a:ce:5c:5c:41:1e:d9:36:cf:13:d3:71:16:24:dd:
9e:b1:24:f8:91:fd:9b:67:29:86:a6:1e:df:05:54:da:c1:57:
f0:61:9b:59:ec:e7:53:97:c8:f3:21:ac:ce:fc:40:67:ac:6e:
e6:fe:b8:d9:87:5e:45:4b:ef:db:ce:35:45:32:a5:86:14:bb:
8f:93:ae:b4:50:2c:5a:65:20:3e:de:8a:37:be:3d:f3:45:83:
04:f9:37:77:cd:96:e5:8a:ae:6e:98:51:02:8f:bd:39:93:20:
63:eb:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:43:16 2025 by rpki-client