Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File: EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier: hWRZ++GyQ2cA7wbuz//j0WpQjFyNhasXc6fPduZ7aqc=
Subject key identifier: E2:47:FD:57:46:FA:F0:73:B8:A5:B7:CC:BA:B1:B0:8D:1F:24:FA:5B
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer: /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial: 0199228C27F4A345933D46328DAAB9165ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:00:34 +0000
Manifest this update: Sun 07 Sep 2025 05:00:34 +0000
Manifest next update: Mon 08 Sep 2025 05:00:34 +0000
Files and hashes: 1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: i+PdueV56cWuZGysY+hy8CC7WA/6EiS4X0ICrzX5dPw=)
2: WTVR86vnYs7BPStSbSDyoGuvJtI.roa (hash: +qhM9WKUBA3B9KCtQwGX3HjXjyrEypbbBCjk+fK/rjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:27:f4:a3:45:93:3d:46:32:8d:aa:b9:16:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
Validity
Not Before: Sep 7 05:00:34 2025 GMT
Not After : Sep 8 05:00:34 2025 GMT
Subject: CN=e247fd5746faf073b8a5b7ccbab1b08d1f24fa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:b7:81:2b:39:5d:7a:d0:08:2c:58:74:d2:
79:0f:74:b9:1c:39:d5:75:08:29:74:49:b2:5d:0d:
42:07:6c:2c:fc:8c:f9:db:f5:8c:ea:db:4a:23:70:
ad:28:4e:e7:b9:86:7b:48:73:d0:e6:83:39:80:14:
54:15:bf:7a:04:7f:af:fb:36:49:67:d3:02:29:f4:
00:cd:a0:50:9c:79:71:3d:e5:5e:37:45:fd:b6:b1:
74:de:0d:94:a8:cb:09:e6:72:04:ae:4c:51:67:f9:
38:6d:63:c8:87:d1:b5:8f:b4:be:2d:9f:f7:bb:a9:
d4:c2:b7:e5:82:34:f8:9c:61:00:05:e4:f2:1d:15:
9f:f6:93:a5:79:78:5c:86:d0:db:da:9f:3e:0f:d5:
53:9a:7d:57:d9:c9:9c:8d:e1:6f:8b:dd:51:fe:52:
3e:de:a7:84:df:f0:a9:88:77:f8:60:7d:fd:16:f3:
1b:0b:a1:93:c4:73:da:86:e1:51:87:16:6b:70:72:
83:2b:32:02:6d:18:f3:bd:68:3b:8b:4b:3e:f5:d4:
a1:47:d3:7d:db:78:3a:aa:6c:0d:da:d0:b3:52:29:
c0:4a:a5:22:0b:69:56:af:c5:d4:54:eb:b3:e8:0e:
e8:e5:bf:20:1b:aa:9e:33:fa:fa:9e:94:dc:c8:9c:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:FD:57:46:FA:F0:73:B8:A5:B7:CC:BA:B1:B0:8D:1F:24:FA:5B
X509v3 Authority Key Identifier:
keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b9:a2:93:f9:ad:2c:e5:c1:f6:ff:cf:92:2a:53:53:7d:32:
ba:cd:44:49:17:dd:45:0a:2a:e1:be:75:fa:da:63:8e:3d:3f:
e7:96:86:7d:7d:98:14:76:4a:8f:d7:c4:02:28:6b:c0:66:b9:
05:24:a8:68:42:26:91:66:a6:f6:f2:91:e2:14:39:a3:88:4f:
76:96:cd:a1:79:cd:1c:57:8b:23:e6:98:5c:78:2a:24:86:76:
58:12:55:04:26:59:07:ac:25:ba:ef:24:34:14:d5:67:15:aa:
90:55:89:96:ac:73:0f:f0:96:3f:92:68:9a:68:d4:4a:f9:56:
3d:70:10:f8:13:97:fb:3d:98:ea:b1:4e:88:19:ba:c3:c5:47:
39:60:40:56:5a:4f:c8:05:26:5d:61:11:2a:2d:99:f2:0f:07:
79:dc:23:1b:be:5a:22:76:38:c3:de:76:15:35:85:f9:d7:9b:
8d:e7:d3:43:45:5b:43:c7:cf:aa:9b:4d:ec:51:07:79:af:bd:
d2:61:ed:1a:fd:f7:ef:55:1a:22:b7:83:30:a7:28:15:03:95:
28:1d:fd:0c:7a:99:5b:2b:8e:c0:e2:61:d1:1a:0f:80:f4:31:
d8:09:93:8b:74:50:cb:bb:ec:75:98:a2:7b:e1:ad:b9:dc:37:
cb:ca:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:19 2025 by rpki-client