Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: zD1k9YEXyK/OG6tD+VXn09yPkfnC2edtzLqMukTp/X0=
Subject key identifier: 97:49:30:0E:9B:4D:60:D4:6C:3F:FC:12:3F:76:48:CB:73:6C:EE:98
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 0198D473F4403DB6EADF35F3EEBB92539DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:45 +0000
Manifest this update: Sat 23 Aug 2025 01:03:45 +0000
Manifest next update: Sun 24 Aug 2025 01:03:45 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: hZ014rG/9Flbd9gHBD0TjkV+nKU0PobN/MuBZRpkanQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f4:40:3d:b6:ea:df:35:f3:ee:bb:92:53:9d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Aug 23 01:03:45 2025 GMT
Not After : Aug 24 01:03:45 2025 GMT
Subject: CN=9749300e9b4d60d46c3ffc123f7648cb736cee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:b9:4e:d4:db:be:0e:0c:96:58:93:27:c7:
88:da:d4:45:09:a9:3a:d0:fe:11:75:2a:85:26:d8:
68:15:8a:b5:9f:68:c1:ae:58:dc:84:0f:1d:ec:55:
21:06:2d:71:3b:6d:7f:bd:f0:33:cf:6e:ba:4c:42:
6b:c1:28:75:2e:a7:66:96:d5:ca:78:d3:0c:0e:a0:
19:da:48:ee:d6:c2:87:91:4f:02:b5:e8:21:95:c4:
60:58:8c:ec:cd:b2:c8:5d:91:9e:c8:02:aa:b7:b8:
2e:64:48:aa:cb:72:d7:f4:a8:18:c1:9c:37:f0:ff:
ce:f5:96:54:47:32:cf:25:19:16:ce:dc:dc:be:ce:
05:72:1a:2c:78:be:16:2b:10:49:ac:98:f6:55:19:
d4:63:92:f8:7a:93:05:f2:84:8f:af:19:4e:b3:0b:
7d:63:3f:6c:e2:f7:dc:2e:c8:93:d3:58:79:25:23:
48:41:99:76:08:cd:b6:ff:7f:51:c4:43:f4:70:40:
aa:45:d7:9f:22:f1:eb:21:f1:5c:e7:66:06:90:77:
e1:77:57:a3:7a:c4:5f:24:63:51:bc:75:0e:e3:91:
94:9e:1c:07:52:1e:46:65:66:fe:90:bf:09:4d:c1:
97:5c:48:90:cf:b4:cf:07:1f:0d:f8:4f:29:df:1e:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:49:30:0E:9B:4D:60:D4:6C:3F:FC:12:3F:76:48:CB:73:6C:EE:98
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:99:a5:bc:aa:75:57:ee:b6:22:d7:b2:20:92:1d:f0:78:e1:
02:99:45:da:2c:72:d5:ab:dc:3d:1c:9b:d6:fc:5c:7d:47:9b:
e4:99:d2:99:cb:a0:a0:a4:ba:c0:a2:cc:c3:ae:12:51:d6:c9:
74:0e:66:58:9e:11:77:2a:ae:3d:50:c9:3e:3a:53:f2:70:d4:
a2:33:bc:7d:b9:ee:89:6c:b3:b4:84:f1:72:ae:00:53:f1:62:
34:83:38:66:1e:49:c5:0b:96:da:6a:67:06:23:69:0c:49:88:
41:0d:9f:ff:16:54:86:f1:14:38:34:a3:0a:39:4f:23:9c:db:
09:79:bb:24:0f:0d:4b:ba:6b:ab:5a:05:d5:34:70:ca:e8:a3:
12:96:f1:74:f0:28:b8:fd:4d:6f:56:9e:82:40:8b:b6:06:56:
aa:2e:67:ce:fd:6e:92:09:fe:e5:c2:55:3e:4c:7d:65:3c:05:
77:1d:cc:fb:2f:72:bc:e1:11:f9:2a:82:ed:05:60:0f:1d:98:
16:9e:e9:79:5a:96:85:9c:66:ea:69:f0:7e:91:8d:4f:fe:27:
4e:0a:13:59:2b:dc:70:76:02:8f:12:ec:28:b7:90:1d:96:a3:
5a:a5:3f:20:ab:8e:be:22:28:83:8a:9d:4e:b0:ff:bf:c3:12:
fb:66:99:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc/RAPbbq3zXz7ruSU52yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGYwNTNhNmRiNTRiMWJmMzk2Zjg1MDYzYTZmY2NhMGEz
NDZlYzMwHhcNMjUwODIzMDEwMzQ1WhcNMjUwODI0MDEwMzQ1WjAzMTEwLwYDVQQD
Eyg5NzQ5MzAwZTliNGQ2MGQ0NmMzZmZjMTIzZjc2NDhjYjczNmNlZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnum5TtTbvg4MlliTJ8eI2tRFCak6
0P4RdSqFJthoFYq1n2jBrljchA8d7FUhBi1xO21/vfAzz266TEJrwSh1LqdmltXK
eNMMDqAZ2kju1sKHkU8CteghlcRgWIzszbLIXZGeyAKqt7guZEiqy3LX9KgYwZw3
8P/O9ZZURzLPJRkWztzcvs4FchoseL4WKxBJrJj2VRnUY5L4epMF8oSPrxlOswt9
Yz9s4vfcLsiT01h5JSNIQZl2CM22/39RxEP0cECqRdefIvHrIfFc52YGkHfhd1ej
esRfJGNRvHUO45GUnhwHUh5GZWb+kL8JTcGXXEiQz7TPBx8N+E8p3x5AHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdJMA6bTWDUbD/8Ej92SMtzbO6YMB8GA1UdIwQY
MBaAFBEPBTpttUsb85b4UGOm/MoKNG7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81M2QxOGUtY2FjZS00ZWE0LTlhMDgt
MzhiZmJkMzQ3OTllLzEvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81M2QxOGUtY2FjZS00ZWE0LTlhMDgtMzhiZmJkMzQ3OTll
LzEvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpmlvKp1
V+62IteyIJId8HjhAplF2ixy1avcPRyb1vxcfUeb5JnSmcugoKS6wKLMw64SUdbJ
dA5mWJ4RdyquPVDJPjpT8nDUojO8fbnuiWyztITxcq4AU/FiNIM4Zh5JxQuW2mpn
BiNpDEmIQQ2f/xZUhvEUODSjCjlPI5zbCXm7JA8NS7prq1oF1TRwyuijEpbxdPAo
uP1Nb1aegkCLtgZWqi5nzv1ukgn+5cJVPkx9ZTwFdx3M+y9yvOER+SqC7QVgDx2Y
Fp7peVqWhZxm6mnwfpGNT/4nTgoTWSvccHYCjxLsKLeQHZajWqU/IKuOviIog4qd
TrD/v8MS+2aZmA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:33 2025 by rpki-client