Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: BMnwP01voJQNRKzb1oALNAJv2TT4BYW9/Th92si6BSo=
Subject key identifier: 5D:E8:57:0E:3B:52:24:38:7C:05:44:97:3E:7C:C2:B0:29:4E:D4:AA
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 0198D697FB8144EC9E5A07E297F652FFB81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 14F8
Signing time: Sat 23 Aug 2025 11:02:21 +0000
Manifest this update: Sat 23 Aug 2025 11:02:21 +0000
Manifest next update: Sun 24 Aug 2025 11:02:21 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: DQO2YUhvEUGW7cR3KXZ1kx0oB2UiNVp/twqNPhvpNYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:fb:81:44:ec:9e:5a:07:e2:97:f6:52:ff:b8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Aug 23 11:02:21 2025 GMT
Not After : Aug 24 11:02:21 2025 GMT
Subject: CN=5de8570e3b5224387c0544973e7cc2b0294ed4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:1d:45:c9:1e:8e:2d:0b:24:17:8b:e6:23:
2f:32:3e:19:84:22:fd:00:1c:21:78:1d:e9:8c:64:
61:17:21:51:df:10:90:76:9d:20:32:1b:02:1a:b7:
9b:43:7f:a5:12:21:e6:fd:eb:6f:cc:f8:be:10:a9:
89:41:88:46:35:20:24:65:92:12:a8:93:91:0b:52:
0a:96:32:bf:78:56:72:51:ed:ef:e3:c5:c0:1c:8a:
e5:ae:99:f2:8c:cc:3b:ae:f9:7f:13:b8:7a:0a:2a:
c7:50:bb:d5:8d:e1:b3:11:e0:4d:cf:fd:df:18:2c:
cd:a1:0b:e1:b6:89:71:36:50:70:ca:bb:39:10:1e:
48:9c:94:cd:98:44:45:6c:3c:42:f8:13:68:46:cd:
60:eb:1b:7d:48:3b:0a:dc:6a:6e:b1:60:9f:2f:89:
f3:63:08:6c:81:7c:68:28:72:17:b3:9a:8b:06:82:
e3:0a:8e:d4:ac:92:1d:72:c7:3f:3c:e3:ab:70:93:
ed:90:10:75:22:7c:57:bb:f3:f1:71:15:f2:7a:ac:
6b:16:c2:4c:86:90:35:2d:d7:c5:6e:81:66:49:de:
30:92:50:b5:cb:c8:29:28:d2:9d:ff:58:6f:5f:83:
59:bf:87:a6:66:2a:42:c9:d2:7a:a5:db:78:e4:f1:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:57:0E:3B:52:24:38:7C:05:44:97:3E:7C:C2:B0:29:4E:D4:AA
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:55:c0:fd:fe:1c:f7:21:9b:01:39:34:6e:05:ea:da:32:48:
59:b2:48:37:75:85:3f:8e:21:d9:56:60:9e:46:1c:96:20:a4:
1f:47:c4:4f:f6:bc:77:42:d5:70:9f:6c:14:bb:fb:e1:d2:8d:
93:21:e5:e4:fc:6f:d3:91:6c:49:a2:35:ce:f9:87:a1:f4:a3:
bc:62:f8:bb:13:d3:b5:4e:3d:0a:96:bb:25:84:bc:88:b3:6a:
78:86:18:6d:06:96:44:4f:46:05:1a:40:ae:9b:f8:dd:b1:53:
7b:98:55:56:0c:ed:67:50:c3:d3:a2:ba:41:f1:b4:e2:b1:af:
2d:68:00:6a:98:dc:d9:a7:64:0f:ae:60:4e:41:cc:ff:2e:cb:
3a:97:97:aa:a7:23:1e:f3:d0:3a:5e:5c:2d:85:58:a6:35:1f:
34:0a:a4:03:b9:83:ba:14:f6:01:4c:a9:8c:c7:fe:24:54:b7:
6c:97:bd:63:0e:73:7c:5b:30:d8:d8:b5:fc:39:9e:bc:12:cd:
71:f7:03:66:e5:b8:54:68:50:92:29:69:67:d9:10:e9:07:58:
21:01:87:17:1d:cf:1a:32:c1:ee:42:28:ed:e0:7b:6d:04:76:
6e:6e:b8:18:cf:96:70:60:8a:b1:ab:eb:a7:fb:c8:f5:c1:6f:
0a:8e:fb:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl/uBROyeWgfil/ZS/7gaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGU1NjE3NzMwOGMyMGM0MmZiZjQyZjMxMGY0YzBlZjZi
Mjc4OTAwHhcNMjUwODIzMTEwMjIxWhcNMjUwODI0MTEwMjIxWjAzMTEwLwYDVQQD
Eyg1ZGU4NTcwZTNiNTIyNDM4N2MwNTQ0OTczZTdjYzJiMDI5NGVkNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmYdRckeji0LJBeL5iMvMj4ZhCL9
ABwheB3pjGRhFyFR3xCQdp0gMhsCGrebQ3+lEiHm/etvzPi+EKmJQYhGNSAkZZIS
qJORC1IKljK/eFZyUe3v48XAHIrlrpnyjMw7rvl/E7h6CirHULvVjeGzEeBNz/3f
GCzNoQvhtolxNlBwyrs5EB5InJTNmERFbDxC+BNoRs1g6xt9SDsK3GpusWCfL4nz
YwhsgXxoKHIXs5qLBoLjCo7UrJIdcsc/POOrcJPtkBB1InxXu/PxcRXyeqxrFsJM
hpA1LdfFboFmSd4wklC1y8gpKNKd/1hvX4NZv4emZipCydJ6pdt45PEfAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3oVw47UiQ4fAVElz58wrApTtSqMB8GA1UdIwQY
MBaAFBEOVhdzCMIMQvv0LzEPTA72sniQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYt
NmY0ZTY1ODViNTRiLzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYtNmY0ZTY1ODViNTRi
LzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVXA/f4c
9yGbATk0bgXq2jJIWbJIN3WFP44h2VZgnkYcliCkH0fET/a8d0LVcJ9sFLv74dKN
kyHl5Pxv05FsSaI1zvmHofSjvGL4uxPTtU49Cpa7JYS8iLNqeIYYbQaWRE9GBRpA
rpv43bFTe5hVVgztZ1DD06K6QfG04rGvLWgAapjc2adkD65gTkHM/y7LOpeXqqcj
HvPQOl5cLYVYpjUfNAqkA7mDuhT2AUypjMf+JFS3bJe9Yw5zfFsw2Ni1/DmevBLN
cfcDZuW4VGhQkilpZ9kQ6QdYIQGHFx3PGjLB7kIo7eB7bQR2bm64GM+WcGCKsavr
p/vI9cFvCo77Ig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:08 2025 by rpki-client