Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: Rg5f1YreoiLfaq+0Bd89PAmJBO7tS3TVRuKBzp+z0m8=
Subject key identifier: E5:CC:62:2A:30:81:3E:7C:3D:76:38:3A:75:97:2A:CB:B8:25:A0:DE
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 0198D92B8716653D3C5A1A82D7CAF0DBD6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 23:02:45 +0000
Manifest this update: Sat 23 Aug 2025 23:02:45 +0000
Manifest next update: Sun 24 Aug 2025 23:02:45 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: 5vsFdq4WLTbWiznYd/XKmH7HlvvjWb78K7PtYi+6R20=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:87:16:65:3d:3c:5a:1a:82:d7:ca:f0:db:d6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Aug 23 23:02:45 2025 GMT
Not After : Aug 24 23:02:45 2025 GMT
Subject: CN=e5cc622a30813e7c3d76383a75972acbb825a0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:62:9b:7c:e8:6f:88:8e:ce:10:a2:92:31:
28:8a:05:58:75:4b:4c:ac:67:a3:b0:9d:1f:b7:e2:
1a:cd:bf:d1:34:da:8c:2e:63:c3:c1:a3:aa:1b:fc:
c3:f3:1f:26:7e:ca:3d:c6:04:6a:0f:fa:7a:15:15:
86:cf:ea:01:8f:26:e4:b6:f1:cb:48:f1:07:ed:dd:
6a:93:5f:98:c2:aa:85:3c:51:ce:b9:c2:0d:a6:40:
21:9c:63:fb:98:11:cf:12:28:28:d9:ae:3a:16:47:
ee:50:69:ca:9b:fd:cf:67:18:ab:0b:1c:d0:3b:ea:
5e:7b:3b:fb:59:7f:b9:2d:d6:04:63:4e:dd:f5:28:
31:5e:59:ae:fe:a2:ae:8a:5b:a5:8d:a0:02:80:ca:
c4:1e:2c:19:f2:c0:8c:f0:f2:a0:60:5b:4d:f0:4f:
06:0d:07:80:07:0f:86:ec:a7:b1:4f:3a:05:89:55:
50:50:a2:a8:ca:7a:fb:a8:9e:6d:8a:06:f5:49:cb:
0d:24:73:69:67:9a:0b:e8:dc:ab:77:72:74:94:8b:
80:a3:1b:1e:70:92:48:f9:89:ea:d5:65:b5:48:f5:
27:19:9f:67:00:36:d4:ed:6f:2d:12:30:2a:85:86:
b2:af:9d:76:b4:9c:11:7e:23:64:26:4e:1f:4a:86:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:62:2A:30:81:3E:7C:3D:76:38:3A:75:97:2A:CB:B8:25:A0:DE
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:ee:72:2f:78:2b:10:51:0a:da:49:2b:5d:36:ae:c1:8e:
8f:7b:94:0c:c5:5f:6e:86:e9:a2:a5:82:4c:9e:ee:74:af:fc:
73:51:24:1f:c8:fe:5b:bd:e1:d2:80:0e:92:79:9a:dd:80:76:
01:61:67:8e:fa:9e:6a:22:0c:61:d1:8a:5a:58:6d:1f:ba:aa:
7d:8c:0c:ef:0d:74:df:c6:5d:c6:44:cf:42:19:d7:a5:e8:c7:
86:06:a9:cb:ed:35:73:f0:96:38:31:6d:eb:95:84:8b:95:41:
7e:ca:cb:c5:63:fb:4b:f5:ed:82:ce:dc:9d:08:8c:ab:76:d8:
87:28:43:04:c2:6e:3c:16:07:45:b3:b9:f5:7f:89:dd:a7:6c:
92:63:1a:71:1f:9d:21:7d:ed:9b:0d:b0:5b:fb:17:2a:05:f8:
13:23:6c:6d:d1:96:96:d3:aa:dc:e1:c9:0a:db:6d:96:e8:53:
63:38:72:58:66:5a:fa:75:9a:ca:5b:36:e6:6e:ad:17:2f:9b:
b3:03:8d:0f:1e:f5:93:0f:c8:b6:fe:6b:96:dd:79:0b:63:51:
41:56:cc:09:28:18:90:a5:a5:b6:54:f9:21:5d:c7:cf:2b:a8:
64:d6:7b:71:d7:a5:30:fa:f7:6b:3d:1e:6d:ee:e0:68:a1:1f:
e0:08:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:57:00 2025 by rpki-client