Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: Lzw6RcXIuLO6Jxr2WUnt2CWN3mutVBUOb4Rx3O4U2xg=
Subject key identifier: AF:38:B1:77:29:0E:86:15:38:F0:21:FA:F7:18:C8:01:13:C2:05:51
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 0199239FC0CAA8B308C910AB473185AE1883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0D50
Signing time: Sun 07 Sep 2025 10:01:36 +0000
Manifest this update: Sun 07 Sep 2025 10:01:36 +0000
Manifest next update: Mon 08 Sep 2025 10:01:36 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: LQvwHUegK2tLNcycJN9OJMIGa3NT6wTpvhJep80uJsc=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c0:ca:a8:b3:08:c9:10:ab:47:31:85:ae:18:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Sep 7 10:01:36 2025 GMT
Not After : Sep 8 10:01:36 2025 GMT
Subject: CN=af38b177290e861538f021faf718c80113c20551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:ac:12:26:c1:15:e3:8a:d8:56:84:89:aa:
a9:e2:54:1b:e6:48:62:2c:44:a3:eb:42:90:1a:18:
94:96:fa:92:71:f5:2b:94:c4:4c:59:36:d9:bd:12:
07:8c:c1:36:2e:aa:65:d2:14:ee:0b:b3:aa:fe:3d:
3c:46:f3:17:f3:72:15:22:8d:6b:ef:b6:15:0f:91:
69:d7:8a:5c:0f:0c:67:ff:96:33:2e:ea:c9:6d:d3:
55:ea:e3:f1:d9:02:35:1c:d3:48:21:7e:fc:be:73:
d8:de:cb:a1:a7:0c:ff:2a:79:96:07:98:e7:11:38:
9e:17:ed:a7:ba:ba:e1:e0:40:fb:34:02:43:a2:18:
05:de:b1:6e:d5:27:fb:06:76:e5:5d:b8:75:08:6c:
1c:80:c3:5b:0f:19:f8:55:a0:e1:6b:06:02:4e:77:
79:97:15:48:d7:18:00:62:88:35:91:5a:e0:e6:c6:
f9:e7:33:8b:2f:96:99:34:09:74:84:1f:04:d6:e9:
3e:5b:f8:05:50:bd:ca:83:1f:c6:e2:3b:de:39:4c:
a2:9e:35:be:c2:50:05:7f:bb:5e:fa:f4:7b:36:e6:
36:9d:78:2f:9b:51:5d:0b:a2:a2:ea:87:14:63:bd:
a6:47:eb:ed:85:4d:38:82:58:0b:ec:f4:31:d8:75:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:B1:77:29:0E:86:15:38:F0:21:FA:F7:18:C8:01:13:C2:05:51
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:90:8e:fe:d7:a4:bc:26:e0:8f:73:7b:77:bb:be:c0:5a:d5:
00:7b:ca:b9:c9:1e:e0:7f:3b:78:02:26:07:8a:50:f1:e1:f1:
7c:a7:37:56:12:29:f3:c8:ab:e8:f8:c1:40:d8:ff:34:a8:6e:
e6:eb:db:a5:9e:aa:ac:45:63:2f:91:70:d2:36:c5:3a:b1:c4:
37:9f:8e:56:ef:d8:35:eb:ff:49:b4:dc:4d:e5:05:ad:f6:41:
ed:bb:a6:c3:93:01:1f:6c:73:87:4d:d5:60:ab:ac:ae:ed:8c:
65:8f:dc:6a:a6:9d:73:b0:77:34:c2:be:cc:8f:d8:07:af:8e:
1e:b2:d5:82:4c:ce:4f:1a:a0:03:4e:52:76:b2:08:4f:b8:10:
b5:ab:3e:70:ad:c6:1e:89:cb:c5:f3:bb:c5:b9:d3:28:07:c8:
76:7e:a1:b3:ce:74:cd:f2:e3:c5:21:c4:82:9a:0d:61:93:fe:
3b:da:d2:10:c8:6d:09:7f:1a:4d:66:83:06:4d:6a:5a:95:c3:
3d:d6:d6:05:da:ba:cb:a7:18:35:e4:ee:25:6a:d7:17:7e:eb:
96:e6:92:dc:08:4b:db:14:92:6c:1b:ed:f9:be:f1:c5:20:ba:
17:ed:aa:d0:99:bd:d7:2b:11:49:0a:43:d0:bc:de:b4:88:7a:
9a:3b:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:39 2025 by rpki-client