Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier: /XragFD0l3AuGGbNhyuCC4+Dpx9+KpU+E3OYwiRjgQI=
Subject key identifier: DE:C8:A9:31:0B:56:B0:1B:E1:7B:D1:DA:C9:67:EC:B6:0D:40:47:F4
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 019916F68DD95FEE233852CFA020FD450D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number: 166F
Signing time: Thu 04 Sep 2025 23:01:20 +0000
Manifest this update: Thu 04 Sep 2025 23:01:20 +0000
Manifest next update: Fri 05 Sep 2025 23:01:20 +0000
Files and hashes: 1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=)
2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=)
3: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: nTsCmWG8qzcTjm7vm7VB/oZffTbUMl2yXH9drAT2+VQ=)
4: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=)
5: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:8d:d9:5f:ee:23:38:52:cf:a0:20:fd:45:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Sep 4 23:01:20 2025 GMT
Not After : Sep 5 23:01:20 2025 GMT
Subject: CN=dec8a9310b56b01be17bd1dac967ecb60d4047f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:03:2d:ff:0b:9f:3f:8a:5f:b6:5c:89:07:
c0:49:bf:7e:a8:6d:a9:d4:df:db:89:25:3f:4f:60:
25:ee:12:2e:66:fd:9e:3e:65:fd:f9:ce:97:32:56:
b8:92:19:31:22:c7:e0:e6:9f:78:67:ba:18:c9:3f:
79:c1:74:c5:ff:d8:44:4b:aa:3a:de:ba:6f:f8:1c:
cf:4e:f9:24:9c:d2:f7:17:0c:84:40:4d:81:44:76:
17:53:3b:80:00:3c:4e:40:27:7c:90:cb:41:50:71:
cd:49:64:51:1f:57:1e:57:65:ba:01:92:4b:cd:f5:
19:e3:1c:79:17:22:9a:0e:43:ad:45:73:30:1c:3d:
d9:88:8e:9a:88:b5:39:35:4b:e4:8b:38:e6:c9:6a:
ab:6c:4c:9c:fd:68:19:36:90:9f:d1:8e:a7:5e:fa:
78:4b:9f:b7:36:39:0e:5d:ac:76:9c:97:ce:03:68:
a5:52:32:42:1c:8d:b0:df:ef:4f:d4:2a:e2:3f:91:
34:4d:9b:10:71:b6:7f:bc:e3:3e:72:29:62:09:4e:
cf:d9:ae:a3:9f:aa:53:3a:5f:da:24:2c:ac:a2:3e:
f5:3a:8c:4f:c8:7a:be:d0:65:94:4c:e4:e6:b1:54:
7a:e6:af:10:21:80:76:e0:a1:bb:e1:54:54:85:6a:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:A9:31:0B:56:B0:1B:E1:7B:D1:DA:C9:67:EC:B6:0D:40:47:F4
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e3:9f:00:50:ba:40:c3:71:10:ef:2d:bc:0f:bd:a0:66:47:
ba:e2:90:83:df:64:33:dc:57:68:d3:11:4a:24:3e:76:aa:ff:
02:09:3a:d1:d4:9c:47:e4:53:02:93:dd:c4:3b:ab:10:a9:7a:
2d:4c:ff:fa:1d:11:87:08:43:c4:ab:7c:12:c7:bb:ac:7e:c2:
0b:47:d6:29:3f:06:2b:f2:b4:e8:6e:91:57:c8:fa:63:64:98:
fa:98:96:14:d7:a8:f1:78:65:ed:d5:1e:a0:a2:e1:dd:4d:e0:
6a:99:9d:ae:f3:48:2e:d5:6d:17:58:8b:cd:59:64:dc:b4:6e:
05:79:86:fc:6d:dd:76:7d:45:dc:21:b5:bf:a9:55:01:b1:ae:
b4:25:14:67:63:5e:62:79:b7:9c:07:40:55:57:6b:f7:32:e5:
2b:a8:1f:3a:9e:ea:ef:58:f7:04:e8:48:69:57:4f:0b:12:8e:
a9:a3:0e:a3:b7:48:33:e2:38:01:d2:48:4a:20:c8:41:ff:8b:
8a:6c:f3:2a:8f:fe:46:18:fa:1c:53:3b:bd:15:c4:fd:64:d6:
bb:3e:23:e2:e1:cb:23:c3:1e:51:78:62:fb:52:b6:19:ae:c3:
a6:c0:37:ae:5f:2b:1d:28:3a:86:03:c6:2d:85:23:65:8f:8f:
f0:8f:6b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkW9o3ZX+4jOFLPoCD9RQ2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjFkMGRiZTA5M2M3MjIzNTA2MThmNDA0NWMyNWJhOTQz
MTdmODcwHhcNMjUwOTA0MjMwMTIwWhcNMjUwOTA1MjMwMTIwWjAzMTEwLwYDVQQD
EyhkZWM4YTkzMTBiNTZiMDFiZTE3YmQxZGFjOTY3ZWNiNjBkNDA0N2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04IDLf8Lnz+KX7ZciQfASb9+qG2p
1N/biSU/T2Al7hIuZv2ePmX9+c6XMla4khkxIsfg5p94Z7oYyT95wXTF/9hES6o6
3rpv+BzPTvkknNL3FwyEQE2BRHYXUzuAADxOQCd8kMtBUHHNSWRRH1ceV2W6AZJL
zfUZ4xx5FyKaDkOtRXMwHD3ZiI6aiLU5NUvkizjmyWqrbEyc/WgZNpCf0Y6nXvp4
S5+3NjkOXax2nJfOA2ilUjJCHI2w3+9P1CriP5E0TZsQcbZ/vOM+ciliCU7P2a6j
n6pTOl/aJCysoj71OoxPyHq+0GWUTOTmsVR65q8QIYB24KG74VRUhWrO2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7IqTELVrAb4XvR2sln7LYNQEf0MB8GA1UdIwQY
MBaAFBDx0Nvgk8ciNQYY9ARcJbqUMX+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYt
MmYwYTZiZGJiZTUxLzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYtMmYwYTZiZGJiZTUx
LzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeOfAFC6
QMNxEO8tvA+9oGZHuuKQg99kM9xXaNMRSiQ+dqr/Agk60dScR+RTApPdxDurEKl6
LUz/+h0RhwhDxKt8Ese7rH7CC0fWKT8GK/K06G6RV8j6Y2SY+piWFNeo8Xhl7dUe
oKLh3U3gapmdrvNILtVtF1iLzVlk3LRuBXmG/G3ddn1F3CG1v6lVAbGutCUUZ2Ne
Ynm3nAdAVVdr9zLlK6gfOp7q71j3BOhIaVdPCxKOqaMOo7dIM+I4AdJISiDIQf+L
imzzKo/+Rhj6HFM7vRXE/WTWuz4j4uHLI8MeUXhi+1K2Ga7DpsA3rl8rHSg6hgPG
LYUjZY+P8I9r7A==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:33 2025 by rpki-client