Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File: EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier: 9WZBHlAykEk5e+PVTcbprVai6uQ+5rlGlpDfn2VyIAA=
Subject key identifier: 97:F8:D5:9D:53:6F:36:27:42:30:93:77:97:EC:93:98:06:B7:3B:5A
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer: /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial: 0199228C76D8D81B41D4272DDF3EFE6DA671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number: 0AA5
Signing time: Sun 07 Sep 2025 05:00:54 +0000
Manifest this update: Sun 07 Sep 2025 05:00:54 +0000
Manifest next update: Mon 08 Sep 2025 05:00:54 +0000
Files and hashes: 1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: XcVEQ/odXxzkk8eGou1CNBf38O8J/TX9SYKOGELfUPI=)
2: m05UFQfMUkm8RmzIuHOsksJMdP0.roa (hash: yGsV8HL3U4MAtVDLG2EGnsRjRnklyUH2zR9pUN6kEek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:76:d8:d8:1b:41:d4:27:2d:df:3e:fe:6d:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
Validity
Not Before: Sep 7 05:00:54 2025 GMT
Not After : Sep 8 05:00:54 2025 GMT
Subject: CN=97f8d59d536f36274230937797ec939806b73b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:4d:77:1e:9a:a7:cd:c3:11:fc:4b:dd:24:
62:d0:98:72:22:57:e0:d3:a0:42:42:6f:d8:ff:a5:
57:c0:5a:7c:a7:e2:8f:4f:a8:48:b5:2d:d1:fb:68:
b7:a5:13:1f:13:fe:62:c4:82:9c:9c:ec:b9:1d:1c:
63:ca:94:83:b2:94:97:00:c3:16:96:62:51:99:9b:
7c:0c:e5:ce:75:02:97:6a:1b:b7:35:6e:c0:a8:77:
64:c6:76:9d:f5:c8:30:62:5e:54:9d:30:c8:0a:d1:
20:9c:db:4e:4c:24:5f:43:c4:f6:b9:4b:fa:4e:18:
90:0d:fc:48:e0:a2:38:33:09:bf:ad:43:dc:76:29:
80:1e:e4:bb:28:93:30:42:71:5c:95:9d:09:20:ae:
2a:80:e0:d8:ba:fa:df:d3:20:ea:9f:dd:8d:a0:45:
b3:12:2c:5a:68:0b:62:fb:19:13:57:5e:9f:bb:dd:
f3:84:d9:c8:68:40:84:bf:ae:8d:12:da:f2:4b:80:
8a:cb:c5:b0:79:92:b9:00:6f:09:02:e4:0b:44:63:
72:c0:0a:99:63:67:1b:c5:3e:6e:a6:7b:e3:fd:d7:
78:a9:8f:5e:4a:58:f3:4f:bb:56:f7:f6:eb:f9:a1:
02:19:85:65:5d:59:52:f5:13:4d:0a:b6:dc:f5:43:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F8:D5:9D:53:6F:36:27:42:30:93:77:97:EC:93:98:06:B7:3B:5A
X509v3 Authority Key Identifier:
keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:59:3f:2a:98:f5:98:b2:31:de:67:5d:42:4e:33:85:3b:92:
ba:2a:82:36:39:ca:f8:ce:59:a7:0c:a4:8f:fb:2a:e2:04:07:
81:dd:45:ad:ba:43:46:c5:a1:b1:f1:2e:91:30:80:2d:a0:23:
57:8f:1f:68:f6:39:a6:53:9e:78:0a:f7:a7:08:0b:8f:20:cf:
ba:95:6e:46:9b:37:c1:10:3d:fc:80:bb:f0:b1:6b:c6:35:d9:
69:ad:b8:f9:c3:98:6a:d0:6b:05:0e:5e:94:09:62:b0:8c:a6:
9f:69:a1:0a:6f:d7:a2:e0:03:07:77:08:8e:ea:79:e5:da:de:
52:ec:02:a1:6c:47:3a:bd:ea:e9:17:b4:61:02:02:d5:b4:e2:
60:34:3a:92:4b:6e:4e:36:bb:38:17:df:33:68:f2:bc:18:58:
27:c7:7b:39:26:a6:6f:c9:d4:7b:8b:58:52:4a:4d:8e:7b:99:
7a:f6:06:0f:4d:ed:3e:29:bd:9d:a2:72:ef:1a:a6:2b:7f:df:
60:f4:a7:55:a0:4e:b6:c1:72:8f:58:c2:f3:28:23:16:7e:dc:
c6:5d:0e:14:18:18:ee:35:40:08:6a:35:99:66:a1:1e:19:03:
79:cb:ba:44:73:6f:68:e7:a3:26:f0:37:a7:50:7f:dc:e7:91:
85:da:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:41 2025 by rpki-client