
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File: egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier: UOXebRQirZJYVJA2LVITvgF0QPmvyeuHGjGb5vn+P4U=
Subject key identifier: 38:65:F0:31:1A:B7:13:CB:11:4A:AE:87:30:32:2E:C2:AF:55:B8:BD
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial: 0199FBEAA1B9698DFAC69D3803947592535F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: opmAELDT326nDKTAeXfMasTU+qfqBHafnFZQnHwGwlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:b9:69:8d:fa:c6:9d:38:03:94:75:92:53:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=3865f0311ab713cb114aae8730322ec2af55b8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:12:3b:dd:81:81:25:2c:34:41:0a:bd:ff:
e1:63:bd:22:d8:63:59:0e:e7:84:21:fe:4f:df:ae:
4e:54:0c:81:1b:0f:32:2e:da:77:06:ad:25:3f:1c:
ee:80:31:ba:7a:1e:0f:db:20:3c:38:08:d3:a1:48:
a4:8d:91:e6:48:6d:4d:19:b6:bc:c0:91:4a:13:73:
97:f9:e9:77:9d:76:df:2b:5a:7c:80:fc:cc:aa:59:
4c:ae:28:36:27:04:c5:25:3e:c2:3f:6c:db:a7:90:
bc:d5:57:55:cc:be:a7:58:c3:66:a5:6d:0e:74:64:
78:6b:0e:4e:65:99:c4:8b:fb:ea:f2:86:ab:d4:73:
e7:52:11:d4:58:c0:c7:05:c8:c1:90:8e:44:13:c7:
d2:56:91:55:c0:fb:64:48:83:0c:e6:95:8f:c5:91:
0e:db:0b:4c:fa:3d:34:ba:dc:52:d0:51:5c:b2:49:
db:a0:75:11:62:20:fc:8a:d9:1a:7d:3e:1c:e6:8e:
d9:ed:1e:ef:fb:3a:b5:ee:5e:40:5b:f2:cb:a3:4f:
38:d3:e9:2d:d4:19:de:c1:65:5f:6e:08:76:c8:8f:
fd:cf:af:85:89:ec:64:2c:d4:cd:c8:eb:47:df:4a:
d1:19:5e:0b:00:6f:38:b7:7a:e2:b5:cb:ba:51:27:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:F0:31:1A:B7:13:CB:11:4A:AE:87:30:32:2E:C2:AF:55:B8:BD
X509v3 Authority Key Identifier:
keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e2:d7:f7:8f:a2:e4:d8:ec:95:1c:5c:49:d6:cf:01:e8:b6:
f0:eb:ba:96:48:04:01:a0:d0:29:12:9f:da:2e:9c:4f:75:76:
e4:2e:a6:25:fc:da:a0:c6:43:87:12:db:3e:c8:f6:a2:8c:78:
65:77:83:02:eb:f3:28:43:e4:e6:12:ed:75:fe:9c:13:69:2b:
cb:70:70:5c:eb:fb:ee:f0:39:ee:ff:46:eb:14:9c:6b:db:0c:
c6:99:12:1a:e8:98:c9:ea:49:f0:82:80:63:fe:0d:6c:8f:7a:
86:8e:7a:10:55:a2:a0:37:62:4e:c1:a4:08:1c:b8:94:6b:9a:
47:0d:84:36:05:11:96:b9:2d:8b:08:e9:bc:16:1d:0c:9c:69:
66:f1:5a:7e:14:7d:35:f6:cb:79:da:7b:15:db:7c:18:8c:9f:
e6:f8:12:b2:df:48:0f:ce:ba:c0:96:8e:49:ee:f7:00:4b:98:
59:68:9e:47:d8:2d:bf:6e:26:8a:7f:45:ba:52:4e:37:a1:46:
48:d7:b4:f4:a5:f5:7c:fb:83:8d:1e:22:c4:af:c8:c6:5d:9b:
33:40:84:4a:aa:b0:d9:20:8b:89:2b:6a:67:ae:0c:22:b1:21:
7e:be:c1:5c:49:0d:6c:de:48:f4:e5:35:c0:7a:80:82:4e:34:
33:a3:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:30 2025 by rpki-client