Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: TZjzvdTBHSv3dPzEUNzofASIx/Few3EbXbUWQHUBB7A=
Subject key identifier: 92:C5:C5:DE:FE:45:EE:81:CF:F3:CA:E1:C4:75:51:95:9D:9A:34:92
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 0199FCC60B035AF5406397FEB2F8565A0510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:01 +0000
Manifest this update: Sun 19 Oct 2025 14:01:01 +0000
Manifest next update: Mon 20 Oct 2025 14:01:01 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: gvQgpISVAgCQZjymLdVXAWRlY/YYy+KuA/LEOuZUCLg=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0b:03:5a:f5:40:63:97:fe:b2:f8:56:5a:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Oct 19 14:01:01 2025 GMT
Not After : Oct 20 14:01:01 2025 GMT
Subject: CN=92c5c5defe45ee81cff3cae1c47551959d9a3492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:2f:0f:97:13:5d:d0:82:98:19:70:7f:fe:
32:68:a9:fc:6b:fc:ff:17:61:11:78:92:a2:20:39:
07:6c:c4:9b:ae:d4:d9:28:5d:54:ea:28:66:d1:4a:
01:fb:0d:df:25:9a:10:1c:24:22:1d:bb:88:f3:58:
0c:b9:6f:5a:e8:bc:b0:f7:f7:8c:36:95:39:b1:82:
f9:5f:db:c7:db:25:da:0b:ff:be:11:d8:1e:d7:18:
de:aa:0b:e5:d5:02:18:fe:26:16:1e:c1:a7:8a:28:
0e:a7:92:9a:70:95:42:ef:31:fc:74:76:2a:04:82:
14:9a:58:de:fa:bd:3a:82:0d:4e:72:25:fe:c9:b8:
cd:91:dd:47:c7:7e:a8:3d:07:b5:be:05:c4:7e:61:
22:f9:7a:47:74:b8:82:26:85:3b:1a:86:a5:42:a2:
7c:12:91:a6:b9:c4:b3:23:05:56:5b:55:94:f7:77:
cf:90:d2:12:58:05:0c:29:1f:c6:73:80:04:b4:75:
92:06:d9:5f:66:2b:10:54:53:7a:c2:4e:50:cb:51:
ad:00:6a:09:6e:85:42:d5:62:c7:c8:67:9c:6a:c3:
07:30:26:c5:1c:14:9d:07:69:16:87:5e:11:35:20:
ab:eb:88:53:77:91:ae:ac:99:ea:b8:ae:3a:ba:f6:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:C5:DE:FE:45:EE:81:CF:F3:CA:E1:C4:75:51:95:9D:9A:34:92
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:77:01:0c:e0:56:68:d1:28:2e:f8:cd:44:70:36:fe:f6:53:
1c:54:27:5a:d7:ff:2d:51:91:28:78:fa:f6:ce:72:80:02:98:
c9:e0:50:69:ed:59:1b:fa:97:55:88:10:f5:d6:2a:b7:fb:2d:
e3:1b:9d:a6:bc:e7:f6:69:c3:d0:32:92:2f:32:c6:55:71:91:
6b:8b:df:0a:ce:df:ff:f7:c4:e6:c2:9f:72:a6:7c:25:8f:c5:
ab:36:aa:a4:c8:d5:76:dc:17:bb:ad:78:fa:68:67:1a:3b:bf:
c3:33:09:c2:eb:80:6b:b8:20:e0:3b:f7:dc:c1:5e:54:30:2c:
22:ca:0d:b4:47:60:58:ad:1b:ee:ac:0c:b1:e8:20:2e:9b:05:
2c:08:a9:41:3d:75:59:f9:ad:27:b9:b0:47:67:84:27:13:a2:
86:80:14:93:f9:dc:b6:af:c5:87:45:7e:22:88:c8:bb:63:c8:
c5:b9:ec:a4:4d:cb:b0:eb:9e:85:20:43:ec:eb:d0:7e:13:19:
69:9d:3e:5a:b5:d5:82:1a:94:1a:b8:45:eb:9d:74:85:89:2f:
59:c3:04:44:75:43:e5:1f:60:88:7a:d9:97:82:ed:ac:eb:20:
48:05:c3:2d:51:fb:e7:54:1e:53:b5:aa:cd:d8:53:82:d4:60:
c2:0f:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:24 2025 by rpki-client