
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File: eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier: CLHOI2gqWSWg71gwNirq88vaSwHKqbU8HVngBVwPSBU=
Subject key identifier: DB:1F:50:FD:79:61:8D:61:81:4F:2A:9A:43:9D:B6:F0:1C:D4:7E:E2
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer: /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial: 019933134E235EAD54175A314AE63FAB0136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number: 0FE5
Signing time: Wed 10 Sep 2025 10:02:07 +0000
Manifest this update: Wed 10 Sep 2025 10:02:07 +0000
Manifest next update: Thu 11 Sep 2025 10:02:07 +0000
Files and hashes: 1: HFuTsAaQKossZYATTz-p-c6jBeU.roa (hash: vDxg03jTfF522AjdUgHK+erl11Ssj1V7Jm+QQMyJPLE=)
2: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: RufcdiHRbHKoM4eNA4MWmLOU5vmhbYW5XkKZMr4Zavg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:4e:23:5e:ad:54:17:5a:31:4a:e6:3f:ab:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Validity
Not Before: Sep 10 10:02:07 2025 GMT
Not After : Sep 11 10:02:07 2025 GMT
Subject: CN=db1f50fd79618d61814f2a9a439db6f01cd47ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:09:47:9d:1b:6b:4e:a6:4b:1a:1d:26:12:
f9:65:44:ba:fd:03:c5:0d:80:23:9f:fe:f4:d2:b8:
0f:ce:5e:d6:e0:20:c9:b1:f5:f2:b4:76:23:ff:db:
65:8f:52:cc:79:17:64:e6:a5:37:0d:49:34:6b:c1:
2e:fa:b1:39:19:21:0b:14:ef:d3:ab:47:fe:85:02:
48:88:66:8e:1d:f1:bd:d2:54:17:42:aa:d3:e0:9a:
46:c3:76:fb:ce:e8:0a:40:ce:30:5b:2b:ab:e1:fd:
d8:34:84:b9:b7:7f:be:81:ad:0f:49:ba:48:82:96:
7c:2a:96:0a:f2:43:5d:50:db:9e:71:87:6b:42:c4:
cf:95:59:39:0b:65:dc:08:87:8e:ee:bf:b2:6b:cc:
68:82:07:68:f9:c5:d1:32:ab:3a:7c:63:e6:49:48:
d3:d0:bd:87:1b:5a:44:97:c2:da:a1:b2:3e:06:a2:
c0:39:d7:24:cc:cc:43:2b:f4:9f:ff:ce:0a:f2:ba:
2f:b9:e6:42:94:52:2a:ff:ee:8e:6d:b9:10:d4:31:
dd:8b:9c:b0:72:08:69:38:2c:42:a7:a5:39:02:64:
df:3f:d1:b3:48:6f:42:0e:28:48:5b:6a:fa:d4:c2:
e5:0c:21:7c:63:71:f9:09:3f:5e:b8:6d:42:98:4f:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:50:FD:79:61:8D:61:81:4F:2A:9A:43:9D:B6:F0:1C:D4:7E:E2
X509v3 Authority Key Identifier:
keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7c:79:96:fd:ec:49:32:a0:db:2d:5f:1c:0c:f5:d5:c7:fb:
6c:7f:f0:13:54:a3:8b:94:47:84:74:b7:c4:0a:fd:36:45:a7:
51:3e:81:8c:6a:0b:6a:8c:eb:a0:90:26:a1:85:37:2b:cc:0e:
b6:37:e4:46:9f:8f:1e:6b:52:7e:44:a4:70:78:b6:5e:75:51:
82:46:7c:c7:7e:8f:bd:0c:a1:00:df:ce:69:75:cb:03:4e:c6:
1a:08:7d:95:c2:07:26:3a:dd:ff:36:72:ef:5a:d8:f6:3a:dd:
1f:e9:32:da:c6:b9:17:d6:7d:f7:40:c8:1a:66:19:e7:63:a4:
56:29:0a:32:bf:ed:7f:0f:4e:a4:17:1f:98:3a:fc:82:cd:c9:
35:99:ee:96:a0:39:29:ad:42:d5:28:2a:cd:fe:3a:1b:9c:5a:
ee:7d:24:1c:0c:83:c7:8d:87:c4:05:91:b8:eb:19:36:75:2f:
c4:7b:5e:7c:41:58:15:a7:d4:28:f7:49:58:95:1d:f0:7e:ca:
2e:ea:9d:b7:60:91:6e:45:99:6b:78:a2:12:c2:de:0d:ae:6b:
ac:fe:ab:1f:3c:01:b6:24:83:31:b0:60:c1:5a:d4:46:30:94:
4c:ff:8a:c5:33:88:1e:77:b9:11:1d:45:7c:21:00:12:22:e0:
47:5a:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:20:46 2025 by rpki-client