Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: QlXRKAYRJYaaNOijyZuOwgqjpOBAwMUfrCSuMP1KiRU=
Subject key identifier: DE:68:04:51:41:5A:7A:B7:22:60:ED:CF:41:EC:F8:73:A6:BB:D6:EE
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0199353720CF8DD3482F0E7265CA123F5582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 20:00:29 +0000
Manifest this update: Wed 10 Sep 2025 20:00:29 +0000
Manifest next update: Thu 11 Sep 2025 20:00:29 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: UgIubQP50ekglA2SxBSjIPop3G14yE+sYD1ofVX4l+Y=)
2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:20:cf:8d:d3:48:2f:0e:72:65:ca:12:3f:55:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Sep 10 20:00:29 2025 GMT
Not After : Sep 11 20:00:29 2025 GMT
Subject: CN=de680451415a7ab72260edcf41ecf873a6bbd6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:6c:af:ad:3a:40:db:c9:ac:4d:53:98:89:
bf:aa:ab:1a:42:fe:a1:4f:3b:59:27:f0:b4:36:66:
71:72:e7:d7:d6:7e:3c:c7:bc:73:0f:7e:64:f1:44:
69:b6:21:04:a9:c8:25:58:d8:d6:8a:5e:83:a4:f3:
3d:c2:5e:f9:ea:b0:71:14:b7:fe:26:83:80:c4:46:
56:45:f3:f9:f6:14:ae:b2:3c:f1:64:4a:3d:30:d9:
b0:a0:1d:50:08:35:ce:a8:7c:14:f6:65:37:24:6f:
ec:ff:60:15:86:d5:03:94:f4:bc:5e:57:a9:90:5b:
8f:c6:ae:88:79:db:6f:5c:bd:47:8e:5e:ed:05:ab:
f5:a2:33:d2:16:a9:9e:a9:f8:bc:e2:30:10:89:29:
86:2a:dc:69:1e:4c:5e:43:66:3c:10:1c:60:d1:fe:
ce:e1:ec:ad:7d:17:91:5d:17:20:1e:17:19:8a:86:
b1:d0:02:02:32:5e:e3:9e:c8:96:da:e2:97:6a:1e:
5d:e9:2d:26:bf:bb:cd:2d:e1:6c:80:88:48:f0:81:
9d:fc:d7:e3:0d:63:1f:11:9a:8e:26:b6:da:9d:20:
7d:a0:13:fa:47:79:48:e5:6c:5f:72:71:cb:51:9e:
ce:bd:66:17:32:6b:76:b5:36:69:fe:aa:79:c1:29:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:04:51:41:5A:7A:B7:22:60:ED:CF:41:EC:F8:73:A6:BB:D6:EE
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6d:96:95:20:af:34:60:4c:4c:fc:fd:1b:a9:f9:8d:04:84:
ab:9d:25:e2:6f:53:77:09:27:d5:58:ff:ed:df:ff:04:77:0b:
36:cd:69:85:64:d2:18:88:69:96:75:98:01:07:77:7e:d0:a8:
a5:97:a5:4f:02:7b:a9:d8:35:fa:1e:b7:38:bc:0b:99:48:27:
58:5b:18:1c:bf:6c:a5:85:7a:b5:c9:9c:af:6e:dd:80:37:49:
97:af:39:2e:a0:d2:c0:2d:7f:42:a6:c4:6b:51:f8:13:ba:00:
5d:57:66:79:b2:a1:46:d5:7b:60:a0:59:37:77:d9:09:ec:41:
57:c7:87:4b:25:ca:84:02:e7:71:d2:ba:73:b0:34:29:5f:9a:
a6:85:39:34:5f:fd:9b:22:fd:0b:6f:51:b0:1b:0d:00:e3:31:
9e:f2:b3:ae:8a:8e:49:59:9a:f0:8e:56:fd:0f:d5:a2:7c:3f:
37:d5:f0:7d:f9:79:3d:26:12:24:30:40:82:1a:da:a3:d0:c9:
2b:5d:c1:40:79:e7:02:10:48:ea:bf:83:81:2f:72:c1:05:b5:
50:d3:af:44:96:55:34:31:b5:26:15:fb:5f:3b:19:fe:9f:67:
9c:f2:34:fb:33:e4:e5:9a:c7:e4:2b:cf:98:cf:38:f8:d7:6d:
64:14:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:51:47 2025 by rpki-client