Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: IkTKiVgyUW3IqEyrxys2qn7KeyMT/H02UnNjTdEHI6o=
Subject key identifier: A8:80:DF:A8:0B:B6:74:52:B3:5B:07:78:EE:C7:B7:C5:2F:F6:6D:61
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 0199FC21765631092C5B0FD95843C12B8457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: 81IAATbOwQmm1upQs/234Bl4H/g+U4Ed76W3hYhmSzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:76:56:31:09:2c:5b:0f:d9:58:43:c1:2b:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=a880dfa80bb67452b35b0778eec7b7c52ff66d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:df:7c:be:b0:5c:4f:7b:7c:dd:fe:ad:9c:
c5:fe:1f:3a:6e:1d:87:95:9e:bd:38:58:ce:d8:c7:
14:69:09:5c:a3:d2:13:5e:21:bc:4e:ce:30:b0:4a:
55:a2:31:62:57:18:74:10:67:b7:c1:d7:99:f1:2e:
89:55:d4:97:95:1d:12:a2:d1:a8:7e:1a:73:c0:19:
f2:7a:4e:c6:d8:42:fe:99:69:ac:60:c9:88:80:38:
44:e3:f8:63:a1:61:b8:e7:a8:97:4a:aa:54:0c:27:
06:e0:cf:7a:23:a8:3e:be:ea:d1:63:0d:e1:a5:62:
ee:c8:df:3c:e7:20:72:8f:85:ac:9a:52:9f:bc:a3:
b0:d8:6c:2d:91:4d:b9:8d:28:c5:da:0c:28:21:a3:
ec:4e:4c:8c:82:0b:97:e1:83:0a:2d:e0:04:95:52:
e5:68:ca:bf:b6:46:5a:c4:fd:69:a6:06:4d:5b:ab:
01:50:54:d9:b8:fb:9d:35:61:3c:f7:e3:bb:08:0f:
d4:fe:1c:34:19:d5:03:13:aa:d0:f4:6e:f4:74:a5:
e8:03:d7:a2:4e:b2:03:68:e3:e3:b0:f7:6a:02:1c:
b3:c7:6b:06:7f:7e:08:09:98:d9:d7:d4:c3:6b:b5:
29:9e:24:82:07:3a:25:01:41:21:6f:f9:c1:54:9c:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:DF:A8:0B:B6:74:52:B3:5B:07:78:EE:C7:B7:C5:2F:F6:6D:61
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:92:50:4e:f3:f2:08:64:43:57:e2:e9:b6:04:36:4c:ab:4f:
5b:de:a4:be:5b:ab:2c:2b:a3:73:8c:96:55:2b:9f:1a:71:35:
a4:22:05:65:e4:2b:06:8a:19:89:28:39:fd:f8:e5:87:84:f6:
aa:14:6d:c8:d4:af:d6:bf:88:05:ee:9f:00:41:7f:f1:71:96:
d8:0d:dc:65:ac:8b:a9:96:20:61:ac:9e:38:dc:ad:2e:bc:c5:
cb:39:21:bc:50:0b:4b:59:c4:45:03:83:ca:cf:fb:a2:8b:cc:
a3:68:23:c2:04:a9:25:3b:17:ba:69:03:57:c5:9b:ae:10:06:
50:be:5a:99:3c:3b:06:5e:0b:82:1c:98:15:4a:18:da:71:a0:
e6:5a:89:fa:75:22:ca:d1:c5:1b:d8:4d:4c:92:df:af:d4:ed:
0a:5a:8b:f2:ad:9b:d6:3f:68:ab:1d:11:28:8c:8f:fa:ef:eb:
f1:9a:39:20:37:33:33:18:91:96:0d:84:dd:ef:e1:83:f0:80:
bd:a6:2b:15:65:ee:c2:ae:5f:03:dd:c3:00:9f:8f:b4:e3:21:
b6:a4:09:61:7d:e5:88:78:8f:df:e7:31:22:6c:02:29:20:49:
25:85:48:87:4c:2f:fa:3f:59:dc:40:ff:de:b6:74:59:08:6e:
51:98:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:41 2025 by rpki-client