Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: pU3DMOzPVQMEgy3QvT/USQGcLmFtDVqbVAvgPLRdMd8=
Subject key identifier: 62:6C:3C:31:C0:EE:E8:1F:30:2B:D1:BD:D3:A0:4C:8E:AA:A9:51:A7
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 0199FB45D3CAAC3955A2864B21324CA68066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: pV9/9i87YFtGPu3CovuoWa1fbPySV52gHw0dOYyzM5s=)
2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d3:ca:ac:39:55:a2:86:4b:21:32:4c:a6:80:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=626c3c31c0eee81f302bd1bdd3a04c8eaaa951a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:d8:1b:52:91:bb:50:60:15:0d:76:77:80:
de:f3:25:4e:37:3d:5f:f8:33:16:f3:bf:6f:53:43:
a4:35:d0:d6:f8:1d:b4:e6:09:a1:63:69:99:4a:d9:
ea:de:8d:2b:64:e9:4d:57:08:fa:f7:65:f7:8e:93:
c6:e7:5d:d0:46:c4:0d:ee:b3:92:1f:09:1f:53:04:
59:b1:45:68:a5:d1:d6:0f:fb:90:b5:0e:48:95:fa:
f3:b6:b8:f9:41:7c:2f:7f:94:4a:3b:d8:ef:f2:03:
fd:06:54:c4:27:01:c9:f4:6e:49:bb:12:57:55:d6:
44:f1:52:bd:dc:2a:d2:3a:6f:e7:6e:30:34:1f:41:
39:2e:f7:63:61:fc:bf:b4:a6:91:53:00:22:1c:74:
48:5e:ed:ef:4c:55:1b:24:c8:4d:f7:b6:4f:a4:5f:
62:89:39:8b:1b:d5:1b:ec:eb:c9:c2:81:d2:57:7b:
e2:a5:4b:5b:70:64:de:37:d6:d5:bf:fa:f1:01:93:
c5:b9:a5:48:ee:b9:8c:55:85:13:bd:75:11:91:89:
be:21:ce:1f:93:19:8e:d4:12:33:21:a3:ec:ba:42:
95:00:af:a6:dc:88:29:b7:68:b1:76:6f:5c:4a:a4:
c4:b7:6a:98:f1:a7:35:a7:ac:13:2d:31:50:96:a7:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6C:3C:31:C0:EE:E8:1F:30:2B:D1:BD:D3:A0:4C:8E:AA:A9:51:A7
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2c:9b:74:d4:32:0c:75:97:43:b3:f9:de:39:d9:4d:86:2d:
bf:bf:db:4d:b4:2e:dd:d4:4c:ed:47:db:3c:d0:77:c3:60:50:
76:b8:1c:ea:d4:43:33:65:f1:f0:9d:e0:47:d6:8a:e8:d5:f9:
a6:8a:8a:11:bc:9c:db:87:d5:38:47:96:bb:5c:f9:c2:56:f0:
0e:5b:3e:07:28:79:af:97:37:d2:ea:79:35:c3:a4:94:3e:4d:
8d:76:2d:1d:d0:4e:c1:0d:a1:17:28:b9:8a:46:6e:04:8d:9f:
c2:78:f1:f5:17:d6:dc:c4:33:f0:70:fe:a7:89:f9:f7:3c:e8:
7e:d9:be:ce:dd:9a:12:ee:f6:10:e8:df:b4:01:c5:5c:67:d2:
56:2d:67:99:96:84:61:d9:dc:66:60:05:94:2e:b6:52:45:7e:
72:17:2e:25:ef:27:17:1e:d9:53:da:99:17:47:dc:71:5d:31:
82:89:ea:33:fc:bd:14:2c:96:3f:95:56:dc:40:de:25:66:e9:
5a:9f:2a:76:a0:31:be:f8:2b:91:1a:e4:b3:35:d7:a0:bb:03:
66:fd:7f:42:5c:73:98:7b:ba:8e:35:3d:90:04:5c:66:11:0f:
19:4d:06:9b:82:63:0a:ba:cf:19:5e:24:10:f9:5b:71:81:f4:
b3:dd:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:19 2025 by rpki-client