
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
File: EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft (raw, json)
Hash identifier: epADAbWtJdTvFmA1dUB/27XppjR9iPZ44AnDttEUb5A=
Subject key identifier: 8C:BA:64:63:B3:17:A3:64:61:F5:0C:0D:CC:BD:22:A7:15:ED:02:8B
Authority key identifier: 10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4
Certificate issuer: /CN=108ecb64ba2998b6c41501427238518922d630e4
Certificate serial: 0199FC213D7EE16BD40C4EE34FB1F6149EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
Manifest number: 17
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl (hash: mOOqn9OwCnW7jDoItO4qyfKlSz4d9yKTOo6tfFkoTG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3d:7e:e1:6b:d4:0c:4e:e3:4f:b1:f6:14:9e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108ecb64ba2998b6c41501427238518922d630e4
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=8cba6463b317a36461f50c0dccbd22a715ed028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:5d:4d:2d:05:13:d9:d5:e9:62:9d:68:d7:
9a:86:fc:18:18:35:f9:bb:60:34:c6:d0:7b:cd:73:
b8:78:45:a7:3f:21:69:c0:10:ab:be:a7:9d:53:98:
5a:73:a7:99:dc:a9:f4:45:9d:65:63:de:ab:97:17:
1c:ae:1a:2e:c7:de:77:e3:5b:7a:15:45:c6:86:b8:
b5:4a:5d:9e:2c:74:ed:18:1f:41:11:cd:b7:c5:7f:
1d:d7:f1:52:95:85:e6:fc:68:23:01:31:08:fa:8b:
31:b6:12:23:b1:e3:8b:6c:1b:ed:55:9f:b8:74:c0:
9e:83:d6:0e:2e:db:97:d2:3a:70:11:d5:b8:1b:78:
ce:d4:1b:13:6d:a8:d0:b1:25:27:22:97:49:5e:fb:
26:e9:d4:46:1a:21:f9:6e:71:38:07:59:95:14:8b:
3b:1b:9f:78:4c:7c:6e:97:af:37:fb:4b:e3:fb:cd:
30:d8:b0:89:ac:9b:ee:13:4a:c8:72:93:ba:b9:dd:
36:ca:d6:17:70:08:47:76:38:ed:10:18:bf:86:de:
93:c1:c8:de:8d:4e:5c:5d:b8:1a:ab:06:bf:63:cb:
8b:df:44:07:89:d9:02:d9:25:1b:19:5d:3b:eb:39:
22:7b:eb:b3:04:a8:f5:ae:bf:a6:3a:8a:93:19:c9:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BA:64:63:B3:17:A3:64:61:F5:0C:0D:CC:BD:22:A7:15:ED:02:8B
X509v3 Authority Key Identifier:
keyid:10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:f7:0b:8f:cb:9e:ee:aa:29:00:fc:71:1f:a9:af:7d:25:
bf:91:31:c4:dc:13:bd:20:3d:45:e3:08:a1:b1:fe:d7:cf:85:
56:0b:1a:65:b7:04:de:a2:9f:56:3f:fa:cc:53:62:80:1b:22:
ef:b8:87:b3:5b:74:3a:db:c5:78:f9:71:f4:d8:72:b4:73:fc:
99:da:c3:1d:ee:16:95:3b:0d:e5:0a:10:bb:8c:95:28:cd:25:
7b:ed:b0:9e:ad:57:5e:07:53:89:4e:96:4a:a1:0d:13:cf:2a:
0b:a4:76:3a:c2:c3:11:ba:98:4b:98:52:59:cc:c8:97:98:cc:
f4:fc:10:ed:d6:80:f2:68:41:f1:be:22:c9:d8:31:4a:ea:e8:
62:6d:95:1e:c1:9c:69:8b:b2:4e:2a:fa:18:96:2d:43:43:88:
a5:20:23:19:76:c3:49:ea:e2:ac:20:bf:20:b4:58:bc:fb:f6:
44:9d:81:2e:16:a4:1b:da:8b:bb:3c:29:d9:59:e1:65:8f:3d:
77:12:15:72:e6:4d:1e:28:73:d4:ee:2f:0f:74:16:a4:e2:58:
f8:25:3c:b9:3b:d1:6b:47:d0:91:9e:c1:55:c3:3e:bd:ce:d2:
8a:58:83:da:22:2f:ec:fe:17:2a:88:af:38:43:7f:8e:60:76:
95:f7:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:29 2025 by rpki-client