Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: AvtRpwSks1eevCb/oc3KInctCjew4obIyKXVCbpqyKQ=
Subject key identifier: 9C:DA:0D:8E:2D:5D:A0:74:B7:E1:57:05:37:52:DF:29:7A:CB:4B:60
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 0199FBEB322ADAF7FBB330001A923C02ECFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 0FB5
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: meR4sCTfRHEdGAnE+WddK1L33pg9qatf6AM1eu4NbBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:32:2a:da:f7:fb:b3:30:00:1a:92:3c:02:ec:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=9cda0d8e2d5da074b7e157053752df297acb4b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:55:cb:af:3e:0f:88:62:63:1c:4a:8e:07:
95:44:94:73:a6:b4:21:08:ce:64:63:42:1f:b4:41:
a4:9c:54:93:ae:11:ea:db:aa:6f:fe:f3:61:4c:74:
37:95:54:5f:2f:1f:38:9f:10:49:15:aa:c1:44:85:
99:70:a2:c4:b5:5a:57:1c:a0:35:ba:09:4b:1a:be:
84:b9:7e:0e:e8:80:d0:66:9e:9e:b4:f7:c9:2a:bb:
4a:3b:ff:8d:1f:99:00:d4:8c:e4:64:ae:f5:dd:de:
ea:6a:c7:ff:39:85:72:ad:0b:7c:e5:61:53:04:06:
32:fc:a2:30:67:17:3d:b4:4a:34:bd:42:17:31:12:
5b:1e:67:e9:67:51:5f:40:41:35:d7:68:89:02:11:
37:0f:46:48:48:39:90:5d:a3:21:19:b6:6b:e3:67:
2d:67:1a:7c:64:43:26:1a:92:8f:68:c5:00:32:08:
ac:42:62:af:6a:9a:9b:7c:62:54:2e:28:c5:31:c2:
ce:da:b1:c0:10:8d:cd:85:cd:6e:6f:4e:a2:03:53:
c6:8c:91:ce:99:07:2d:36:3e:28:04:7b:43:09:6d:
03:6b:e7:e7:b0:46:a9:0e:a5:93:97:d9:06:d7:da:
13:0f:be:64:be:cf:75:87:ff:21:b3:88:b7:29:0e:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:0D:8E:2D:5D:A0:74:B7:E1:57:05:37:52:DF:29:7A:CB:4B:60
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:91:2b:b6:a8:14:ee:6d:1f:67:81:4b:97:5f:66:69:af:2b:
ca:fe:09:23:89:cf:03:3b:67:18:0b:89:81:89:23:09:bf:98:
5c:58:d2:c4:eb:70:06:8f:53:ec:d7:b4:4a:00:52:7a:c4:6d:
68:71:ef:3e:a8:b3:66:c8:5f:04:25:76:14:b8:34:00:e1:cc:
f7:6b:f7:04:d4:fb:4b:a8:95:2b:f8:8e:50:d9:b3:c8:cf:b6:
5a:8f:34:b3:7f:ec:51:97:58:24:cf:b4:3d:db:a4:07:d1:45:
d8:66:da:af:57:9a:08:18:d3:df:e4:7b:79:b2:2d:b9:6d:4c:
25:f6:58:dd:34:cd:79:fb:24:f0:84:00:25:0f:6c:9c:db:5f:
eb:5b:ac:44:93:59:9b:11:5c:4a:11:a3:8b:a7:b6:fc:15:c3:
4c:03:2f:e6:19:60:b9:d9:54:58:de:f3:4e:89:33:1c:98:f2:
05:26:e9:85:b3:1e:67:82:6b:49:22:78:00:a3:9b:f1:39:25:
41:13:fd:4b:f6:29:6a:6f:62:0c:88:22:19:cb:d2:d5:5d:dd:
da:a2:5e:30:69:6c:8a:f2:08:e1:8a:06:2c:0b:b5:18:8c:22:
8d:3d:8f:fc:71:ca:03:59:a1:9c:8f:3b:bb:03:d5:2d:b6:5f:
99:16:95:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zIq2vf7szAAGpI8Auz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzhkN2EyOTU0YTMyZDJhZmQxNmI4OGIzNjNiMzkwNjgx
Y2Q1OTMwHhcNMjUxMDE5MTAwMTU4WhcNMjUxMDIwMTAwMTU4WjAzMTEwLwYDVQQD
Eyg5Y2RhMGQ4ZTJkNWRhMDc0YjdlMTU3MDUzNzUyZGYyOTdhY2I0YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNFVy68+D4hiYxxKjgeVRJRzprQh
CM5kY0IftEGknFSTrhHq26pv/vNhTHQ3lVRfLx84nxBJFarBRIWZcKLEtVpXHKA1
uglLGr6EuX4O6IDQZp6etPfJKrtKO/+NH5kA1IzkZK713d7qasf/OYVyrQt85WFT
BAYy/KIwZxc9tEo0vUIXMRJbHmfpZ1FfQEE112iJAhE3D0ZISDmQXaMhGbZr42ct
Zxp8ZEMmGpKPaMUAMgisQmKvapqbfGJULijFMcLO2rHAEI3Nhc1ub06iA1PGjJHO
mQctNj4oBHtDCW0Da+fnsEapDqWTl9kG19oTD75kvs91h/8hs4i3KQ7EqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzaDY4tXaB0t+FXBTdS3yl6y0tgMB8GA1UdIwQY
MBaAFBA416KVSjLSr9FriLNjs5BoHNWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82Mjc1NTctNzhhOC00YjRlLWEzYjgt
OWE4MThkZGQxNTU4LzEvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82Mjc1NTctNzhhOC00YjRlLWEzYjgtOWE4MThkZGQxNTU4
LzEvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZErtqgU
7m0fZ4FLl19maa8ryv4JI4nPAztnGAuJgYkjCb+YXFjSxOtwBo9T7Ne0SgBSesRt
aHHvPqizZshfBCV2FLg0AOHM92v3BNT7S6iVK/iOUNmzyM+2Wo80s3/sUZdYJM+0
PdukB9FF2Gbar1eaCBjT3+R7ebItuW1MJfZY3TTNefsk8IQAJQ9snNtf61usRJNZ
mxFcShGji6e2/BXDTAMv5hlgudlUWN7zTokzHJjyBSbphbMeZ4JrSSJ4AKOb8Tkl
QRP9S/Ypam9iDIgiGcvS1V3d2qJeMGlsivII4YoGLAu1GIwijT2P/HHKA1mhnI87
uwPVLbZfmRaVjw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:06 2025 by rpki-client