
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: Mj98J+3VsGzXVISn2lBvWwtyBH+pOBGIbg/JrsdPPVk=
Subject key identifier: 1C:A4:11:E8:5F:0A:68:38:A7:A7:12:76:31:E2:42:C0:F7:26:CB:FC
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 0199FBEB2B73028265554E35ADBF43CA5063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0DC0
Signing time: Sun 19 Oct 2025 10:01:57 +0000
Manifest this update: Sun 19 Oct 2025 10:01:57 +0000
Manifest next update: Mon 20 Oct 2025 10:01:57 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: amWmMYuX4B/l3lJtu8TwG3ili11xxW7aXnS5Qg/tHQs=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2b:73:02:82:65:55:4e:35:ad:bf:43:ca:50:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Oct 19 10:01:57 2025 GMT
Not After : Oct 20 10:01:57 2025 GMT
Subject: CN=1ca411e85f0a6838a7a7127631e242c0f726cbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:97:cc:8e:67:6d:41:c1:1a:c1:66:36:09:
ce:72:44:c7:be:3a:d5:26:71:61:89:f6:bb:1a:7f:
10:c2:f6:fd:4c:0f:c4:7a:92:62:01:ca:0b:9a:2f:
08:fe:8f:e1:70:89:58:e3:23:8a:54:e0:6c:db:ad:
56:1d:22:40:f1:96:93:fc:16:a5:1f:13:bf:15:00:
7b:ba:e5:71:cf:55:86:33:9c:87:41:98:86:19:af:
6c:93:5c:cf:bb:02:69:65:12:af:e5:9b:32:6a:1b:
5d:a6:6a:30:89:44:5a:a2:23:5e:56:72:1e:d2:e6:
b2:50:03:f6:e1:62:7b:c2:71:1f:62:a6:bd:e0:0f:
fe:1a:a5:50:18:5e:9f:a6:af:a9:84:fe:e6:5f:08:
09:7e:3f:5e:bf:0f:61:15:3d:45:d3:6c:1e:37:1a:
4e:96:f7:30:fd:8e:df:59:98:4a:91:06:92:cc:c0:
a2:ef:a8:e4:5e:44:7d:c9:38:ec:dc:24:6a:b1:00:
2f:dd:b6:05:d9:58:8c:cc:24:58:2a:22:4c:62:c4:
71:a5:0d:c9:45:6c:e2:02:fb:a3:8c:55:cb:a3:af:
42:02:cf:6a:37:97:9d:fe:ae:dd:35:d2:e3:c7:ef:
d0:ed:a3:0e:4d:1f:b2:cc:e2:ca:3f:63:dc:82:3e:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A4:11:E8:5F:0A:68:38:A7:A7:12:76:31:E2:42:C0:F7:26:CB:FC
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ea:2a:e7:94:54:c8:75:ea:e4:36:3d:a3:5a:1d:48:00:8f:
29:34:ea:dd:57:ad:82:4b:0d:c5:08:12:1a:8c:b9:c7:35:ef:
e7:86:9e:39:6a:82:bd:ec:c4:8d:9b:23:41:9e:d3:24:c6:8b:
ce:99:e7:e4:69:33:d8:cf:55:f3:e9:42:0d:a7:2c:a9:e7:b4:
34:05:88:fb:73:59:1b:ff:7d:ad:21:d8:bb:d1:ee:f9:86:24:
af:b4:2b:3b:80:48:7b:2e:44:e6:bf:01:2b:d1:07:a6:8d:c9:
66:f0:67:b2:c5:ed:8d:00:17:ae:68:24:ff:f0:47:93:3e:f2:
f7:55:70:19:1f:2a:d4:04:aa:ac:d5:32:0a:43:43:ea:2f:e3:
d1:2c:3c:0b:15:71:7c:41:bd:27:0a:5a:69:32:56:46:6d:13:
6f:1d:97:39:e6:1c:c6:40:fb:6d:6a:18:26:5c:04:99:b4:96:
4d:59:44:94:26:d7:12:e6:32:fa:05:b3:77:69:ba:b7:40:01:
75:a9:88:8f:4a:b1:ed:e8:94:61:fe:db:e4:ff:56:d3:61:d5:
e1:d6:53:f9:b9:e5:ee:83:f5:0b:33:b7:10:45:0a:78:ad:16:
c4:09:00:f8:1d:51:a4:7b:56:c2:f1:b0:9f:a3:c7:32:ec:23:
32:d4:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:12 2025 by rpki-client