Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: cTq/immHuQwzXWly1426w6E4NlmllerLCmkGnssNsn0=
Subject key identifier: 87:6E:9C:EB:65:12:52:FD:23:99:26:E3:B9:78:6E:D2:2B:F9:3D:3E
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 0199FFFE6C704103EF49674C62FFE687FAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 1592
Signing time: Mon 20 Oct 2025 05:01:27 +0000
Manifest this update: Mon 20 Oct 2025 05:01:27 +0000
Manifest next update: Tue 21 Oct 2025 05:01:27 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: 0qn/BthswHoLSzhb+nfWFKMmZUObuMlTjFgFsmg6lBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:6c:70:41:03:ef:49:67:4c:62:ff:e6:87:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Oct 20 05:01:27 2025 GMT
Not After : Oct 21 05:01:27 2025 GMT
Subject: CN=876e9ceb651252fd239926e3b9786ed22bf93d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:cb:c7:cf:5b:ba:c0:18:2c:d1:e3:5c:31:
b4:5a:90:3e:67:ef:53:c9:aa:0a:b7:1e:2c:0b:f0:
a8:4a:61:1f:bf:0c:9a:16:5d:be:1e:dd:cb:85:34:
da:cf:d4:92:a8:2c:ce:4b:0b:91:3d:90:16:af:b9:
fb:20:81:db:d7:ef:00:a1:b8:1f:8a:7a:fc:03:7a:
d1:bd:4d:9a:cd:ac:4f:3f:f5:38:04:5c:74:ad:28:
40:bb:22:d7:fa:4c:e6:9d:63:80:28:72:35:c9:75:
24:c3:a4:36:95:46:d7:42:70:83:fd:23:ad:36:1e:
2b:74:19:ce:d5:25:a5:d3:c5:5f:d3:d5:df:f2:e4:
af:54:a6:d9:0a:2b:01:0c:83:10:ca:59:ec:03:8e:
b5:67:30:3d:f8:a2:5c:27:c8:24:12:76:2e:ce:01:
b8:6a:7f:b0:7a:3e:5d:e9:a0:20:f8:ad:8a:4b:dd:
dd:f4:73:7a:1c:34:7e:bd:ab:16:b4:b7:ea:a5:7c:
be:1b:91:f3:b7:76:dc:72:de:f0:8f:c0:1a:61:2c:
a7:d9:a8:4e:10:1f:b9:8c:15:21:0a:cd:b5:87:13:
8c:8b:83:04:f2:d4:39:a0:ea:9d:d4:39:bc:28:bf:
d6:b7:a3:d8:c7:1e:5f:45:3a:25:df:c9:a9:57:7c:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:9C:EB:65:12:52:FD:23:99:26:E3:B9:78:6E:D2:2B:F9:3D:3E
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e9:df:cc:eb:88:7a:a6:c1:d6:97:61:f1:34:99:09:63:94:
cd:6e:b0:aa:db:54:d8:92:6f:42:a1:5e:3b:27:c9:f9:f7:5e:
5b:52:a0:99:92:4f:80:ba:cd:22:5c:fc:4d:6d:f3:ad:d5:2f:
2c:c1:da:f2:ff:40:20:54:4d:74:96:28:14:e6:75:27:26:aa:
d2:92:6f:ad:c6:44:cb:08:a7:4c:a7:ca:a3:c4:3b:f3:bb:54:
fd:f4:53:12:18:9b:65:46:39:f5:29:80:6b:6e:f9:f9:51:7d:
2d:46:87:be:fc:09:36:6a:7e:48:57:7d:e3:ae:72:3a:e2:19:
fe:03:86:c3:a6:0f:49:51:48:d8:6c:41:d3:98:57:cd:87:92:
74:b1:31:96:d3:1f:25:f4:c3:9f:b7:d7:77:06:4e:7c:ba:0b:
d0:9f:09:51:80:68:f8:82:ce:ed:f5:a6:6b:35:17:8f:41:3d:
22:d4:44:b8:3d:bd:0e:26:c3:bd:d7:cd:5f:bc:80:cb:10:33:
45:3d:22:91:61:16:69:4e:42:28:4c:01:43:d6:6b:34:24:6a:
f4:61:b9:d8:a1:08:15:53:45:57:d4:67:6f:d0:ac:74:08:ba:
54:5f:10:6b:1e:a0:51:ec:9f:e8:cf:ab:c6:d2:91:34:c8:3e:
80:4e:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:32:40 2025 by rpki-client