Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: oqQKluIvPolngLff1AQP9Nyf9mbUU23X5brwN26WkP4=
Subject key identifier: 00:C1:DC:46:8B:35:0F:05:D1:D7:48:DA:8E:C6:B3:DB:93:1D:11:E4
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 019A0110E878C88AD3BF90E2E5D777C4169E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 104A
Signing time: Mon 20 Oct 2025 10:01:16 +0000
Manifest this update: Mon 20 Oct 2025 10:01:16 +0000
Manifest next update: Tue 21 Oct 2025 10:01:16 +0000
Files and hashes: 1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: Vdpgmo0EWgkVF+A0MErr9Ro27LopiW5B79wLTmpiw08=)
2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:e8:78:c8:8a:d3:bf:90:e2:e5:d7:77:c4:16:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Oct 20 10:01:16 2025 GMT
Not After : Oct 21 10:01:16 2025 GMT
Subject: CN=00c1dc468b350f05d1d748da8ec6b3db931d11e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:64:e3:73:0a:c2:1d:b8:95:f3:29:04:ce:
d0:40:e0:e6:57:c5:5b:27:75:1a:90:d4:d2:aa:82:
41:03:c5:ad:4f:ad:db:ac:e8:6e:2c:31:e9:11:94:
0c:6d:c2:75:5e:37:3e:76:18:11:ac:8e:bc:1f:1d:
6b:1f:65:f0:3c:12:5c:55:90:ca:90:3a:2c:19:7f:
6a:63:78:c2:40:7a:80:d9:47:b7:6c:3e:dd:67:20:
22:a7:f5:df:54:2d:23:95:fb:5e:40:98:ab:35:08:
ea:45:3e:df:67:9d:c9:0d:ea:5d:6a:fe:1c:23:04:
de:1f:e0:73:d1:bd:d4:d2:e9:f1:0a:bd:da:0e:1c:
c1:15:f8:b0:33:f8:1d:d8:b0:de:f3:37:db:9c:7e:
5b:f9:46:00:10:94:7a:5f:46:fe:83:29:f2:3b:6e:
53:d9:30:e4:cf:97:6d:95:59:7c:44:01:12:d8:66:
d6:24:1e:0a:ea:8c:5b:12:aa:1e:b8:b1:32:c3:3f:
45:a3:27:09:98:ab:77:f4:b6:de:e3:23:da:15:b7:
9b:06:00:b6:2e:97:78:89:8f:4f:ce:d7:c7:53:df:
81:dd:db:3a:40:cb:16:b2:04:c4:a3:05:dc:de:e0:
53:61:06:1b:6f:6a:e0:0f:1a:3f:67:8b:bf:39:b6:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C1:DC:46:8B:35:0F:05:D1:D7:48:DA:8E:C6:B3:DB:93:1D:11:E4
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c9:06:d1:75:92:8f:23:8d:64:42:59:2e:ae:61:60:9e:e0:
a0:93:fe:6a:5f:11:d9:83:92:f0:23:2d:86:9a:f6:ca:e5:98:
bb:a4:57:d7:55:b3:ef:74:b6:89:d3:35:0e:c8:d4:5a:a4:ab:
f8:2e:6f:89:a2:13:7d:1b:ee:e0:fa:36:25:e3:49:e8:49:3d:
53:be:e1:66:f4:bc:8d:1a:28:aa:df:ea:60:7e:0a:e4:54:19:
b6:13:57:c0:f2:2c:2f:8a:84:1b:77:69:42:cf:dc:7b:7e:90:
97:72:9d:61:0c:b3:e7:ac:b0:3d:f3:56:36:f3:c9:48:e2:45:
36:fa:f2:a6:bc:62:6c:72:d3:88:ad:f9:9e:18:a5:fd:40:d9:
f6:9f:ba:0c:75:73:76:02:8b:ab:0a:bc:69:14:41:8f:a6:80:
ae:1c:03:ac:a2:2a:ac:d2:fb:10:be:46:80:2f:63:01:d1:ff:
9e:f5:ab:62:ac:36:34:ee:75:e1:73:4b:d5:11:40:af:71:d3:
ee:90:27:a1:b2:94:fc:e1:09:e4:9c:3d:c3:d7:cf:39:f4:e9:
80:89:76:fa:53:d2:d7:dd:19:c4:ca:31:94:87:96:bd:c4:19:
13:94:9b:9a:e8:01:2b:7a:2d:7e:7b:16:ec:47:49:78:a4:cf:
e4:a0:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:35 2025 by rpki-client