Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: IYx0ST73PHxAbA5nFHBV3ckw4Rz98Wv9gwQARNuC+Kg=
Subject key identifier: BB:68:B5:29:30:0E:7B:00:4C:7E:BC:82:F8:16:F8:5A:EE:B1:35:61
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 0199FC21384FCED520FEDBCC18C6BD08B2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 11E1
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: 9fqntHhFaOs+39iA8yj12Cm2ifX5j3OUbqZNm6Oa7BE=)
2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:38:4f:ce:d5:20:fe:db:cc:18:c6:bd:08:b2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=bb68b529300e7b004c7ebc82f816f85aeeb13561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:3b:21:30:4f:db:fe:61:7c:15:0b:88:1d:
18:09:60:c7:49:37:f9:ed:e9:09:62:e8:9d:09:59:
95:d1:a5:ec:33:80:1f:82:34:9c:5e:bc:9f:8f:5b:
d5:22:06:8d:5e:27:0e:57:da:86:e1:a1:6e:84:b2:
f8:cb:c1:e0:53:b7:a2:0e:96:35:f8:7a:50:e1:1d:
44:42:5e:fb:4e:48:3d:8e:5c:0c:d4:9f:d3:ff:ce:
60:0d:42:34:34:c2:49:9e:81:5c:15:6a:6c:b6:96:
66:35:9e:2d:4a:fa:e2:2d:f7:5d:db:f7:4b:4c:32:
fc:3e:22:5d:2e:30:05:ac:24:5f:ba:82:9f:4c:2f:
c0:7d:66:d5:21:e3:03:c1:6d:9f:73:c2:51:94:69:
1c:eb:62:1a:a6:e1:20:f3:1c:85:ea:6a:92:fa:92:
f2:56:6e:83:e4:56:c5:4c:b4:02:79:24:45:04:28:
da:7c:60:55:48:0e:d8:c5:ca:b8:27:04:53:00:ee:
63:3f:88:f3:4f:01:82:8f:c6:66:c8:6f:0f:58:ac:
9d:3e:14:17:3b:b6:73:c7:24:ec:2f:c9:b7:d6:c8:
b8:56:8e:e8:59:38:ec:b7:63:2a:63:d3:24:e0:d3:
e9:c4:97:53:a7:42:2d:78:4b:4f:1e:7d:d6:5b:3d:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:B5:29:30:0E:7B:00:4C:7E:BC:82:F8:16:F8:5A:EE:B1:35:61
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e1:d0:6f:6e:9d:55:fb:a9:f8:ea:eb:bc:58:aa:d1:4e:30:
84:58:6e:a4:4f:9d:94:ef:9b:8b:41:01:48:5e:40:e5:0e:e6:
44:dd:2e:05:fb:a9:8f:a6:eb:9e:82:c3:31:15:a9:c0:6f:1d:
d1:da:03:9d:27:42:2a:9e:7c:f6:80:90:7f:35:45:94:ff:b6:
bb:68:d1:3c:6b:9d:2f:b0:03:b9:10:1f:1a:2c:38:3b:72:52:
80:95:62:a0:e1:52:e7:9c:a2:8e:48:5e:1a:cb:46:38:56:49:
58:f3:4d:14:6b:1f:30:13:93:39:3a:1c:fb:61:fe:57:1c:8e:
86:3d:3b:49:09:e3:15:67:4e:01:52:e6:99:1a:6b:80:53:c0:
29:5d:2c:55:2a:f0:11:ae:c1:d0:6f:b4:01:c8:5a:e8:b9:3f:
f4:84:ed:e1:ea:9e:ec:90:f7:a3:43:5a:04:98:e8:0c:4d:19:
8c:9f:10:e7:9d:cc:bb:58:fe:56:cd:4e:f3:f1:8c:66:bb:55:
8e:9f:60:68:b2:58:f8:d8:49:04:d5:b4:51:18:fe:25:da:57:
99:9c:41:c1:cf:ee:5a:c5:d0:9c:ac:90:61:55:f5:a2:4f:47:
ef:59:35:b0:dc:cb:fc:bd:a5:8f:78:dd:ec:eb:2e:9e:a7:6b:
bc:ea:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:18 2025 by rpki-client