Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: l00RIwzI6+CiDEOBoyktdh8otGHCtErCftNXaC8B3s8=
Subject key identifier: F7:C5:7A:BE:7C:4E:0D:30:47:F6:89:9C:9F:DE:89:92:E7:71:18:25
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019A22C0C891A1EE209C49EA48F084827C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 23:00:50 +0000
Manifest this update: Sun 26 Oct 2025 23:00:50 +0000
Manifest next update: Mon 27 Oct 2025 23:00:50 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: 4m3KMTF6mpETUk3g0elE2Y3EmI5IjYEsaGAelaoLhOM=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:c8:91:a1:ee:20:9c:49:ea:48:f0:84:82:7c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Oct 26 23:00:50 2025 GMT
Not After : Oct 27 23:00:50 2025 GMT
Subject: CN=f7c57abe7c4e0d3047f6899c9fde8992e7711825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9d:61:96:5f:2e:c2:92:0a:ab:ec:01:58:2b:
a7:b1:9a:0e:3c:3b:20:74:94:84:fb:d6:1a:ec:22:
28:e4:d1:80:e9:35:19:8d:48:74:06:b7:cb:b5:3a:
a7:6f:98:c9:f2:da:3b:6f:b2:8d:0d:8a:c4:cc:ef:
65:8c:ff:0a:b9:fc:58:21:59:21:58:5b:a8:b9:28:
6f:0a:20:32:61:92:3c:40:2f:f0:d3:04:b6:9f:50:
df:ec:79:05:fa:43:a7:d0:f0:ec:89:c8:46:22:68:
42:cc:f9:bf:4d:ce:d3:f9:a8:04:22:dd:d9:79:72:
1d:61:fe:8f:08:25:ca:d7:52:54:15:0b:80:61:26:
09:ec:cf:f2:7a:9e:cf:28:d1:2f:1e:82:6a:17:be:
a1:1d:8e:42:7a:13:cd:35:c7:d0:22:85:73:13:11:
ab:22:23:62:eb:84:6e:58:c3:0a:25:ab:5e:c6:72:
21:76:e9:6d:90:be:7e:a0:42:bd:b2:d7:a3:bb:fc:
25:c4:fd:a6:cd:54:2d:b9:89:4a:f9:f0:c8:f2:3a:
a8:4c:11:e8:63:2d:1b:56:09:5a:d4:db:38:43:b5:
64:50:a3:fb:d7:4e:4f:ed:e7:e1:a7:fd:b0:3a:67:
8f:33:c0:82:e6:90:15:d1:bc:71:be:a6:83:79:7a:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:7A:BE:7C:4E:0D:30:47:F6:89:9C:9F:DE:89:92:E7:71:18:25
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c2:cb:24:33:2d:45:ca:a3:35:3d:35:5b:e3:ba:ba:7e:88:
fc:82:49:ed:87:32:d4:f5:a8:a1:36:81:56:7e:63:bc:da:d8:
ee:07:f9:32:e0:d1:1a:fc:67:86:a7:94:e3:57:37:67:10:ca:
a3:73:4a:55:8f:21:f4:0e:b0:6d:34:b9:26:fb:f9:ee:6c:42:
4d:81:56:29:cc:09:78:db:dd:de:fc:fa:a4:d2:be:0b:2c:eb:
93:97:1c:36:f3:66:bf:e1:17:31:31:02:cf:a6:e0:25:7a:c4:
d7:86:ee:e5:52:7b:8e:c4:6c:6b:86:fe:45:89:d0:ed:96:82:
46:3f:68:e0:e2:cf:40:cb:40:e6:f7:5e:86:82:ec:48:4a:39:
77:6f:d4:0b:71:88:15:67:1b:a6:fa:b8:f0:b9:47:9d:36:cb:
40:31:c9:0d:1a:df:21:c6:54:34:53:e7:a6:63:61:6c:9b:ce:
43:48:db:0f:67:87:ea:89:46:bc:db:f0:68:08:97:20:47:1d:
77:d6:27:e0:d8:e3:03:0d:73:e9:39:e4:71:3d:ff:b6:f9:c6:
1c:d4:c5:11:96:5f:86:67:73:f3:a6:74:80:6c:f2:9f:23:4b:
ee:29:94:11:38:f0:ab:60:71:7b:40:8e:a5:e0:16:56:d3:2c:
11:2e:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:51 2025 by rpki-client