Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File: ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier: QNCevDh9O9KwYA82Xbb/xo0tG4wWWLQM2EGGLJgaIMQ=
Subject key identifier: 00:23:62:32:D0:C0:EE:7A:CE:59:D3:C6:DB:77:9D:6D:5A:1B:64:42
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 019A71130DDD6A84D285D7E44C833397DD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number: 0E7C
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: OJTbvvzGPXknTcn0a0PisGO6RMs.roa (hash: uuBkvJW42/0DIxeQ/apWNWGffvOofFBXJM//FCrkhBE=)
2: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: tD0T0yruGZZeDpi0ZH9TAhLy/HL9Y1BXF0cVI+MZB5Q=)
3: nArRHp-4C_xfVc5I0xzODMyX0Wc.roa (hash: unbAaPNeb8ss923AiSBNv55C1f+CW+UAKQwmAnYXVMU=)
4: ykzqitomWOX9VDgPXh0lfRNIPGs.roa (hash: sexKwZGXJqgH8EP0OUhLDrGvQUeJF4VTHV0LtWwcjpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0d:dd:6a:84:d2:85:d7:e4:4c:83:33:97:dd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=00236232d0c0ee7ace59d3c6db779d6d5a1b6442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:99:a2:d7:1e:ea:28:3d:c6:d2:bc:f7:a2:
a4:c7:90:13:17:d6:88:85:e5:f7:69:23:d0:b5:f5:
31:b1:3d:f7:55:a2:f9:93:a7:0b:ff:ce:35:92:66:
b1:6c:c0:9c:2d:63:9d:d6:8d:83:40:c9:8a:71:66:
c3:6e:1c:f0:55:96:91:00:cc:c2:c8:23:91:b3:af:
b5:a8:ee:64:ff:64:da:d2:52:00:08:ac:4b:0f:f1:
15:44:8e:33:36:ee:a8:45:b0:b8:bb:ab:91:a8:f8:
aa:63:df:70:56:19:f0:a2:80:14:30:f0:83:d1:a3:
81:8c:ea:b3:04:27:94:45:48:22:f5:8c:39:35:ca:
c6:c8:a9:2e:49:09:85:08:e0:94:93:ed:ec:02:9c:
c8:c1:41:c9:79:0f:96:7f:31:bb:2a:a2:d3:df:30:
95:cc:cb:1d:7e:69:36:b6:40:9c:1c:b4:22:f8:47:
c2:b3:02:9c:fa:3f:b6:11:38:fd:ad:c4:ea:22:b0:
33:9f:38:8b:9c:3e:0d:5f:ed:b2:a9:30:9e:2a:da:
44:ed:b3:6f:11:11:3c:25:a8:be:d2:cd:0a:93:57:
50:62:c3:f1:a3:ee:a4:d0:dd:be:6e:8b:07:8c:15:
43:ac:82:11:f0:5e:40:47:3b:fe:c5:cb:fb:d5:07:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:62:32:D0:C0:EE:7A:CE:59:D3:C6:DB:77:9D:6D:5A:1B:64:42
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:86:ed:b6:46:13:a3:04:bb:ba:b9:eb:0d:6f:49:bc:25:ab:
c7:7e:76:0e:77:7f:4e:48:99:74:f6:35:46:4f:cb:41:8b:d8:
09:c2:c6:46:49:ec:3a:18:0d:5f:6b:20:7f:99:71:9e:41:93:
b9:84:1d:c3:2b:8b:ea:8a:25:9e:c0:ef:ef:f9:0d:1b:e0:e6:
17:38:4f:0d:0a:08:69:66:3d:5c:7b:6d:24:c1:e0:3d:1b:68:
cf:76:84:d1:47:d9:81:0e:5d:81:fc:ef:31:2d:dd:ee:cf:31:
89:5b:8b:55:c4:bb:e3:25:03:62:71:62:b7:e9:ef:2b:2f:db:
3d:45:2c:ce:2f:ab:a0:63:09:a8:42:23:8c:0a:67:da:77:aa:
c9:2e:fe:0b:5f:8e:ac:1a:9f:dd:c6:e9:d7:40:83:8c:3b:89:
0f:56:64:c0:e4:49:3e:ef:98:09:d5:71:48:91:81:d8:2c:71:
fa:2f:38:54:a3:b7:80:86:09:33:99:8d:ed:15:26:0f:22:2a:
17:b0:e0:e7:11:2b:c1:d0:74:ab:8b:08:42:79:db:4b:48:c2:
a5:64:37:16:42:5c:74:d9:38:49:96:df:4b:88:64:c4:4e:a4:
36:51:41:38:37:6a:55:e0:0c:64:e6:b7:e7:25:bf:e0:a7:35:
cf:c9:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:09 2025 by rpki-client