Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier: ugdNK7uz+QOIPmTyHL8vatLQFxF/QEcbsA+k1VZaV+I=
Subject key identifier: 85:CC:92:01:6B:91:72:86:5E:95:BE:8A:D4:A4:18:8E:1B:3D:23:D3
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial: 01992255F923CDC07081446B5957E34A45CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number: 0C10
Signing time: Sun 07 Sep 2025 04:01:23 +0000
Manifest this update: Sun 07 Sep 2025 04:01:23 +0000
Manifest next update: Mon 08 Sep 2025 04:01:23 +0000
Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: RIJwIgYrHkVxsIQnvvPvbFmyR6gXl89RiR+XZSZ+oCc=)
2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:f9:23:cd:c0:70:81:44:6b:59:57:e3:4a:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Validity
Not Before: Sep 7 04:01:23 2025 GMT
Not After : Sep 8 04:01:23 2025 GMT
Subject: CN=85cc92016b9172865e95be8ad4a4188e1b3d23d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:61:75:bd:d9:2d:fb:66:38:77:8b:ed:07:
72:2b:99:be:86:82:83:bb:e2:b0:1a:e0:3d:9e:08:
21:5e:6c:93:2e:37:80:eb:99:63:a4:c2:bd:4a:c9:
c2:02:af:36:62:ff:7b:e6:10:f6:a1:c5:5c:b5:96:
c4:8f:b3:ed:e6:b1:83:76:b0:07:5c:02:de:ff:15:
15:83:59:5a:d9:a8:c1:16:d4:e3:e6:26:1e:a7:ff:
02:3e:28:dd:9c:a3:c3:e2:cd:77:6e:75:03:f0:38:
81:39:c6:95:69:0a:2b:78:28:ab:f3:a4:87:64:d8:
24:7a:f3:d9:dc:de:2c:2e:ef:ae:60:b3:f0:97:30:
4f:c0:36:59:52:d7:cf:b1:d2:29:e8:eb:ca:1b:e8:
b3:26:61:db:55:ae:c8:4a:f6:ea:35:26:35:6d:01:
12:9d:e0:99:6a:36:76:02:23:14:03:b6:28:2f:2e:
62:d5:e4:c8:49:7e:dd:7f:f1:de:93:72:09:1a:90:
5d:8f:6d:2a:06:8a:8d:cc:c7:94:c9:3d:09:69:b9:
db:30:0b:df:dd:3c:c9:74:3d:91:ca:8b:9f:87:8f:
fb:02:67:00:c1:ed:f9:5b:b2:ec:01:89:54:26:b6:
2a:88:23:0b:e9:df:a6:21:b2:c1:94:77:06:78:d6:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CC:92:01:6B:91:72:86:5E:95:BE:8A:D4:A4:18:8E:1B:3D:23:D3
X509v3 Authority Key Identifier:
keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cf:5d:b8:7a:50:7c:f6:13:c0:e7:af:4d:0a:41:9f:21:ec:
db:6e:82:62:ad:ae:fa:54:c6:65:77:c6:bf:48:92:bf:56:bc:
ad:08:85:8f:a9:3b:f0:73:2f:6b:96:d8:7a:55:64:ef:b9:8b:
d2:5d:2a:5f:dd:dc:be:93:03:dc:b3:de:82:c9:28:99:b0:30:
c8:b0:81:ed:61:78:a5:61:22:99:b9:a7:7d:9f:12:31:9b:07:
b4:cb:c0:ab:2f:67:4d:2a:a2:a1:f7:3b:23:ab:2d:96:21:28:
0e:5e:2a:b9:3c:73:16:95:e9:83:45:5d:03:45:7f:76:7b:a1:
e8:9b:10:f0:af:68:89:39:5f:1d:32:f9:f7:ef:28:36:3d:60:
79:b1:bb:8c:89:06:a0:5f:18:36:8e:45:35:55:c4:f6:f0:ba:
e2:6e:05:1f:f6:ad:f9:49:0e:0f:6a:41:66:23:ba:71:c9:c3:
0c:94:82:76:0c:f0:02:c1:22:fc:08:73:18:85:e7:22:8d:bf:
50:29:54:b4:b5:73:b9:e7:bd:8c:ab:dc:66:9c:f6:32:9c:59:
4a:76:4f:2b:e0:9c:fc:7e:dd:35:dd:e7:11:ee:e7:c1:48:8a:
59:8a:81:6c:b2:4f:63:fb:96:7b:df:bc:f1:a1:97:d6:02:0b:
cb:67:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:47 2025 by rpki-client