Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: YJLaQbSvhfv0wM0Nf34pm2+hKBH7hOhnB+nfeAEp1B0=
Subject key identifier: BF:09:94:0E:B6:6C:A7:09:03:FA:27:E5:CF:0C:1A:3F:97:59:D5:7F
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 0199FBEBD2BD3CF6EA3A44E83ACD007C57C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 13ED
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: 1TNEccQ/1Em5LtssvZEGd2MPhhgoGobAI5Xh4WE983k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d2:bd:3c:f6:ea:3a:44:e8:3a:cd:00:7c:57:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=bf09940eb66ca70903fa27e5cf0c1a3f9759d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:5a:f7:e7:01:d4:a6:10:70:60:6c:57:20:
c6:4f:e7:61:91:8b:bd:5a:94:b7:81:cc:4a:ea:19:
0a:25:66:48:66:e4:24:64:cf:32:d2:63:f0:e6:6d:
35:13:5b:33:94:ac:97:fc:40:f5:cd:95:33:47:8a:
70:cf:a3:eb:a7:dd:1a:4c:87:fc:0e:c7:c9:45:e0:
32:bf:cd:b3:a5:a1:81:09:6e:1b:f3:77:ea:a2:c6:
fa:7f:43:5a:fb:47:75:0b:14:27:fb:2c:5b:8b:f5:
28:34:ab:a5:23:ce:1d:b3:97:7c:e1:d5:de:44:9f:
d5:3f:96:97:5b:8b:3e:05:c5:59:6e:ff:a2:17:38:
0c:2f:fb:0d:08:3d:ac:d9:34:e8:ad:7b:7c:88:22:
30:5a:47:02:51:79:96:5f:60:d5:a3:ed:06:6a:46:
ee:eb:a7:37:6c:23:94:6f:1f:89:c9:3f:92:57:97:
83:79:72:b6:ef:a8:01:9e:98:ea:cf:80:4c:17:fd:
c1:d4:e6:a0:57:64:f0:a1:85:82:e6:d4:03:34:0f:
a4:7a:94:c7:66:50:ae:c5:28:ca:c4:2a:78:94:65:
3b:46:e6:98:d6:08:54:0e:1a:b7:64:59:d5:7c:a7:
a4:f7:2c:ab:58:3c:76:9a:88:25:3b:ef:4c:d8:9c:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:94:0E:B6:6C:A7:09:03:FA:27:E5:CF:0C:1A:3F:97:59:D5:7F
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:e1:71:40:7a:b6:07:d0:4f:13:f1:5d:9b:1d:fd:51:fb:
b6:0c:14:7a:da:0f:19:77:ce:64:28:10:ed:44:f9:cc:45:ba:
b6:d6:b3:40:0a:21:a5:95:b6:cc:58:ce:a2:6b:fd:77:d4:48:
34:15:b0:7a:06:22:9b:5b:85:44:f6:fd:81:ef:7a:88:cb:03:
74:30:15:78:d6:ad:65:e4:18:ba:dd:c0:bd:b1:94:61:ba:a2:
05:7f:5f:9b:aa:34:13:0d:9c:3c:d7:9d:19:e1:05:a0:70:76:
3e:55:51:bf:90:06:e7:2b:2a:f4:50:14:3b:91:73:78:b6:c0:
68:ab:26:3e:c9:33:f7:61:ee:cb:68:b4:33:79:1f:74:06:a3:
ad:d2:06:78:f4:19:85:d7:60:50:2b:ed:65:95:52:94:bd:f1:
29:0d:81:37:75:5d:b6:5e:5a:f0:1f:4a:56:b7:0e:51:dc:52:
f6:8d:35:54:ad:f2:0c:29:cb:df:86:0d:24:5a:f2:d3:5f:e8:
8c:64:8e:7f:32:27:2a:04:8e:11:37:f3:b1:35:79:aa:15:1e:
b4:e9:ad:c5:13:f3:60:e4:48:bc:9f:26:16:e1:5c:99:1d:d5:
e0:ae:98:f5:a1:94:2f:96:97:f6:bb:33:e4:46:b4:f4:51:3b:
c6:82:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:32 2025 by rpki-client