Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: 98uAP2siSpIDVeme0hbzAfUmzOjfwQkvjpgyv1S1Bu0=
Subject key identifier: DE:04:7A:35:30:E3:2C:FE:5C:E8:CB:A0:00:63:A6:6D:24:59:C2:78
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 0198D7A8E5DE7D71B25BE84C1B7769F97CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 16:00:26 +0000
Manifest this update: Sat 23 Aug 2025 16:00:26 +0000
Manifest next update: Sun 24 Aug 2025 16:00:26 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: OepK1De48v7YuJOq2lmKQr+LbxQuMFEErOurGLiqtd0=)
2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:e5:de:7d:71:b2:5b:e8:4c:1b:77:69:f9:7c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Aug 23 16:00:26 2025 GMT
Not After : Aug 24 16:00:26 2025 GMT
Subject: CN=de047a3530e32cfe5ce8cba00063a66d2459c278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:27:06:e4:0a:2d:52:04:dc:9c:2c:3e:78:
d3:d2:f6:cd:2b:2f:13:f4:d2:6f:38:ba:69:1d:ec:
03:34:2f:31:9c:79:7f:71:57:20:0f:27:f9:ef:21:
6d:51:bd:e2:1d:83:c4:d2:36:52:b1:5f:77:07:1c:
3e:37:63:4f:7e:56:55:ea:7a:69:f3:4c:46:aa:47:
ef:4d:45:52:6e:c5:c1:99:30:40:5a:2d:74:b1:05:
05:d8:49:35:23:9a:1c:ee:00:ce:07:90:29:2f:ed:
c2:11:1b:d5:8d:49:af:1e:b0:8c:f9:19:74:28:9a:
8c:48:7b:b6:b7:0c:e3:31:8b:44:ef:b1:6a:e7:78:
a4:6d:1d:5a:d8:31:55:0b:01:d6:e6:75:82:94:b7:
19:0f:06:57:f7:db:81:6e:a1:ec:0b:ef:88:9e:a1:
51:ad:b1:0a:96:8b:dd:ee:05:ed:ef:ba:dc:a5:2f:
0f:15:d5:7a:71:18:43:14:30:77:7e:4a:df:62:39:
5a:8e:b7:35:8f:fa:ff:5a:84:ae:86:86:91:8b:08:
03:26:70:49:39:29:b4:c2:b1:72:fe:ee:e9:73:c7:
22:b5:3b:bf:b7:69:d6:fc:32:fa:70:7c:20:e9:13:
9a:c4:45:8c:8a:b9:6a:de:3c:15:dc:24:bc:b7:a6:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:04:7A:35:30:E3:2C:FE:5C:E8:CB:A0:00:63:A6:6D:24:59:C2:78
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4d:6f:26:d3:1d:7c:0b:2c:5b:bd:44:6b:76:e8:35:6b:97:
8d:75:04:a6:69:59:71:4b:08:2e:3f:e9:e0:db:96:39:dc:b0:
c2:6e:3d:3d:67:3f:58:44:24:b9:09:55:3d:8d:23:0c:8e:01:
2a:19:74:66:d8:f3:76:ed:f3:0a:da:50:7c:e2:68:f5:e7:c0:
08:97:27:3d:cc:b3:cd:80:98:72:35:c7:48:a4:b3:e2:ca:a0:
8b:df:eb:ca:df:e2:9f:1b:b4:ea:63:da:19:a1:8b:97:29:1f:
74:a2:19:53:12:09:80:bb:e9:9d:4a:96:82:8b:bc:09:39:ca:
23:4e:f3:7b:13:f9:f9:d1:81:5f:d8:b9:bc:d6:82:28:f2:6d:
f2:71:33:58:c5:28:73:7e:79:be:56:7b:44:70:24:7f:30:aa:
90:e9:3e:f8:3a:1d:ae:3c:91:1b:08:8e:65:6a:e2:e9:4d:b7:
f7:24:05:f2:2a:05:dc:45:e4:7e:98:a1:eb:7a:98:bc:ce:1b:
1e:a3:6e:9c:e6:52:e7:2b:33:5c:27:3b:af:3c:c9:97:1e:28:
bf:b0:b8:e9:23:06:52:e6:3f:70:c8:42:22:a6:11:3e:30:73:
b1:f7:6b:f4:f1:b7:8a:02:8f:55:a3:3a:2c:12:44:97:8e:08:
c8:92:c9:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqOXefXGyW+hMG3dp+XyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYTk2NTBkNzIxN2RkYjk5ZjNiYzAwZWJkZGQ2YmIyMDI4
NTEyZTcwHhcNMjUwODIzMTYwMDI2WhcNMjUwODI0MTYwMDI2WjAzMTEwLwYDVQQD
EyhkZTA0N2EzNTMwZTMyY2ZlNWNlOGNiYTAwMDYzYTY2ZDI0NTljMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFknBuQKLVIE3JwsPnjT0vbNKy8T
9NJvOLppHewDNC8xnHl/cVcgDyf57yFtUb3iHYPE0jZSsV93Bxw+N2NPflZV6npp
80xGqkfvTUVSbsXBmTBAWi10sQUF2Ek1I5oc7gDOB5ApL+3CERvVjUmvHrCM+Rl0
KJqMSHu2twzjMYtE77Fq53ikbR1a2DFVCwHW5nWClLcZDwZX99uBbqHsC++InqFR
rbEKlovd7gXt77rcpS8PFdV6cRhDFDB3fkrfYjlajrc1j/r/WoSuhoaRiwgDJnBJ
OSm0wrFy/u7pc8citTu/t2nW/DL6cHwg6ROaxEWMirlq3jwV3CS8t6Yj4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4EejUw4yz+XOjLoABjpm0kWcJ4MB8GA1UdIwQY
MBaAFBCpZQ1yF925nzvADr3da7IChRLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEt
ODA2MmYyNDFkZDk2LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEtODA2MmYyNDFkZDk2
LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP01vJtMd
fAssW71Ea3boNWuXjXUEpmlZcUsILj/p4NuWOdywwm49PWc/WEQkuQlVPY0jDI4B
Khl0Ztjzdu3zCtpQfOJo9efACJcnPcyzzYCYcjXHSKSz4sqgi9/ryt/inxu06mPa
GaGLlykfdKIZUxIJgLvpnUqWgou8CTnKI07zexP5+dGBX9i5vNaCKPJt8nEzWMUo
c355vlZ7RHAkfzCqkOk++DodrjyRGwiOZWri6U239yQF8ioF3EXkfpih63qYvM4b
HqNunOZS5yszXCc7rzzJlx4ov7C46SMGUuY/cMhCIqYRPjBzsfdr9PG3igKPVaM6
LBJEl44IyJLJnw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:16 2025 by rpki-client