Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: +EM8aepdvMBlDPow2UFQU36RSdWbyMjfO7ZxSjkHJ2U=
Subject key identifier: B0:89:49:2F:D8:DF:EC:CB:3B:BE:62:15:68:45:DA:52:E5:BD:8D:2B
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 0199FBB3712236D8604AA8B9C9A287329C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: PGZvSlIVdqGYrCcTvZrI39vNPqj3SgQRzpNBgmmN0f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:71:22:36:d8:60:4a:a8:b9:c9:a2:87:32:9c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=b089492fd8dfeccb3bbe62156845da52e5bd8d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:95:25:8d:0f:a0:ea:86:a6:08:a5:d3:89:
e9:95:e7:be:db:3c:e2:f0:4c:70:d9:92:11:a7:37:
50:9a:0a:b3:c2:ab:af:2c:80:e3:51:59:f9:69:ed:
c2:0e:ab:ef:ed:2e:7c:61:f2:f4:e2:86:e5:8b:f8:
0e:63:60:b3:c4:1b:ad:54:8f:73:7b:9b:d3:f0:ad:
1c:6f:99:65:06:f6:55:3b:a6:55:77:0e:ab:20:17:
34:bb:79:e9:6d:8f:7f:b6:05:58:46:dd:64:13:b7:
76:c2:62:a6:67:c2:dc:ff:0d:72:2b:0f:26:66:d4:
48:ef:a6:5a:9f:26:e2:b7:ca:f7:9c:f0:9a:8f:4d:
f5:69:20:26:29:f1:5e:b9:6e:3f:a2:8f:50:61:4b:
b4:a7:fe:8d:cc:d8:17:5b:be:4b:d8:76:63:ea:2c:
50:01:60:cd:b0:1a:48:e7:f0:c7:24:59:1e:9d:4e:
d2:c5:db:9e:f2:88:1a:44:9e:ee:4b:a6:88:fe:cf:
93:08:43:61:f3:a1:3e:79:df:8e:90:82:4f:3c:79:
13:b2:2f:f8:da:d0:6d:c2:94:08:89:e4:3c:92:54:
96:32:53:b3:5d:d1:fd:7e:1d:2b:48:cb:1f:ce:7f:
0d:1d:41:71:01:11:ec:09:92:4c:07:5f:d5:77:d7:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:49:2F:D8:DF:EC:CB:3B:BE:62:15:68:45:DA:52:E5:BD:8D:2B
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1f:45:77:35:aa:e7:a0:3c:55:cf:af:ab:79:5c:0c:36:5a:
43:d1:04:19:1c:7c:56:9f:ad:fb:6a:21:fa:df:00:ce:60:9b:
75:f8:3a:99:06:51:b7:d7:ef:f8:32:fb:48:96:48:8d:e3:bc:
3d:25:f4:5b:6c:b6:41:9c:79:db:73:c5:17:6b:61:01:49:08:
e5:fe:4d:f7:43:dd:a1:87:e1:78:ef:71:c5:01:b1:28:be:a6:
b8:e7:23:e5:5e:00:8e:72:f3:1a:a0:df:87:61:a1:66:3f:d3:
43:90:f8:d1:4f:14:93:ff:1f:9e:f4:46:fb:cd:38:25:27:52:
d8:86:87:5b:15:41:2f:30:a6:1e:f6:3d:a7:e0:d0:d0:e7:ea:
a5:82:d7:11:5d:e2:4d:3b:1a:b8:cb:4a:6b:a8:5c:01:28:ac:
84:f8:e2:73:f4:d8:bd:cf:2d:de:0b:20:ee:6f:0a:91:c7:07:
68:38:95:c4:fc:d9:25:26:4f:9c:1e:e8:22:e9:9a:32:46:16:
89:ec:82:ae:d0:21:38:a1:0a:eb:4f:c5:d1:5c:fe:d8:b2:94:
0f:99:7a:96:f3:d6:84:c6:ac:55:5b:b2:52:47:38:11:45:9e:
fe:ce:72:5a:db:68:6c:d0:0c:ef:96:74:57:38:3f:79:0f:e0:
f4:31:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:39 2025 by rpki-client