Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File: EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier: IJ0MV2bWF5PIdGHTAHe/yTLTH5vYNH75Qx6JvGWZTnc=
Subject key identifier: 28:40:31:B5:B8:7C:90:A0:24:5D:6F:65:BB:C3:53:EF:B2:0F:C9:09
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial: 019A71B89E67B8A275CCC3A201D69F5723CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: 8rzEm2RNhB6ZS1lnUjFjv44lJoTrUQD3f8lDeQNxzUo=)
2: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (hash: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9e:67:b8:a2:75:cc:c3:a2:01:d6:9f:57:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=284031b5b87c90a0245d6f65bbc353efb20fc909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:3c:95:98:63:a3:05:23:3f:92:9b:42:f6:
fe:f1:e7:c3:3d:6c:05:ad:48:28:75:ff:48:8b:e5:
1a:a6:84:00:a3:a3:54:b8:38:85:d6:b7:5e:75:14:
dc:86:3e:2c:b1:5a:a8:27:1b:1e:73:9e:48:ca:32:
7b:3f:e9:ea:b0:22:a5:77:27:18:d0:c9:20:d7:75:
9a:5a:e1:b5:15:8f:b9:c9:02:8f:d6:fd:8f:f3:f4:
29:dc:67:54:12:0e:4b:40:d1:4a:9d:57:ab:8c:8c:
74:d5:06:aa:42:8a:a5:29:58:71:77:70:a6:6c:17:
4d:3f:d3:00:f2:e2:0b:04:85:79:9a:d8:bc:64:0c:
bd:59:f7:79:fb:62:2b:dc:d3:1e:54:e8:b2:a4:95:
ed:07:41:0a:23:3d:d7:87:09:24:85:b5:b9:f2:b1:
4c:e9:95:a9:d3:f9:62:9c:6c:8a:95:a1:e1:f0:91:
1e:f2:2b:5d:4c:ba:d9:42:af:db:b9:1e:6f:47:ed:
ad:23:43:ce:1b:96:bc:a3:bb:d5:9a:7f:34:ed:91:
5f:eb:90:fc:7b:26:c5:3f:57:a9:9e:38:55:00:0b:
23:ee:6e:6e:58:1e:7f:f9:5b:b5:8b:7e:bb:ab:43:
de:16:7f:78:2c:a0:29:5c:02:75:fb:3f:37:cc:d5:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:31:B5:B8:7C:90:A0:24:5D:6F:65:BB:C3:53:EF:B2:0F:C9:09
X509v3 Authority Key Identifier:
keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2d:5a:8c:b0:6f:0f:1d:87:69:c9:6a:ff:2b:02:08:88:6b:
b3:4e:d9:ec:65:eb:b1:08:55:8a:46:7f:ba:ab:c2:8b:3e:be:
c8:3b:96:ad:25:bb:45:df:82:33:a2:7f:5e:2b:08:4c:a5:22:
74:66:7c:57:c3:67:c6:0a:41:a8:fe:c3:a9:73:aa:9e:26:4c:
00:76:56:e8:18:2a:f4:66:bb:92:be:e2:20:a8:09:85:b0:f8:
06:db:d3:a9:df:6b:dc:c3:f7:4b:07:e8:ca:aa:c7:9f:33:76:
b0:ab:42:82:45:a5:34:2c:c7:9d:4a:f9:e0:fc:3c:23:73:33:
f0:51:19:85:d6:10:93:c5:01:22:0d:85:9f:8d:6d:43:65:d1:
0c:59:77:bc:b4:8c:55:f1:69:ef:46:74:30:17:7d:35:2a:a9:
e2:23:b0:81:1b:ed:d8:6f:d7:3b:de:ab:a5:c7:1f:e3:eb:55:
b9:44:af:3a:5d:cb:91:42:1d:8e:66:db:37:27:fd:32:54:50:
44:f5:e9:22:51:6e:12:a9:97:4b:9a:5e:5b:c0:50:46:7e:98:
ae:b8:21:be:1a:38:f8:0c:9b:c6:65:d4:a4:a6:ef:4a:ae:83:
13:13:b6:5d:d8:f5:ac:5f:8a:fb:3d:99:a5:96:6f:ac:43:64:
4c:b8:fa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:47 2025 by rpki-client