Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: +aJiotx5Kd/SGc9GGMHVpB6rfXn3fiXUZ3mc0W6Rygc=
Subject key identifier: 49:D4:0F:80:22:EC:E2:4B:63:6C:F4:D1:52:D4:84:DB:F4:48:81:F3
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019A71B904ABE07B0E8EFD5CC0852A1A722E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0DFD
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: piSy3iv0r3pnJ9dhgOT6Jdu2u6Amja3AaD2IS7aY3Pw=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:04:ab:e0:7b:0e:8e:fd:5c:c0:85:2a:1a:72:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=49d40f8022ece24b636cf4d152d484dbf44881f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:46:06:d8:0c:6a:61:2f:f1:22:7c:fd:05:
89:bd:c8:f5:2e:d3:67:25:3e:e5:ef:66:c5:d4:87:
c6:2f:35:39:20:10:bb:5b:ee:40:5b:7c:72:df:3a:
e7:e6:18:37:f3:d6:36:8b:71:03:df:6b:c6:56:e3:
ca:9f:f1:ba:a4:28:f5:f0:bf:bb:f0:5a:ba:cf:4d:
66:55:0e:a6:55:64:ca:cf:6d:3d:08:24:e7:04:02:
86:c2:cb:1e:03:27:f6:ba:70:30:c7:33:e0:78:15:
bd:bc:43:de:e5:fc:a9:59:75:95:5b:0e:11:a5:b4:
ab:4f:75:07:68:16:ee:9c:b6:f0:15:a5:61:72:a2:
57:11:06:8a:58:0e:7a:32:b9:74:d2:d7:49:4e:29:
54:d0:1d:22:67:83:29:c0:8a:5e:e8:22:7c:45:ef:
ab:7e:c7:38:3d:3a:57:51:97:f2:23:5c:26:b1:95:
19:75:8e:6d:4c:bf:7a:19:62:f9:84:51:fb:f5:41:
7d:8b:52:23:1e:3b:7f:2a:fd:ad:d6:ee:4a:28:c2:
ef:1e:e2:8b:09:da:53:fb:7e:67:b1:b6:49:95:c3:
db:d5:60:23:a2:98:82:ee:31:63:cf:a2:b3:54:13:
87:ac:86:c6:87:7f:7c:ae:31:60:5b:ae:ca:62:5f:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:0F:80:22:EC:E2:4B:63:6C:F4:D1:52:D4:84:DB:F4:48:81:F3
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e3:13:14:f5:9d:d4:49:d6:c6:69:17:5e:b0:ab:7f:0f:08:
4d:98:30:bf:d2:12:86:1a:55:bd:13:f1:6a:30:ef:8f:c3:3b:
5f:94:69:43:dd:b4:56:64:f5:c8:e9:dc:e3:6a:30:86:42:0e:
1f:ea:17:66:59:42:47:9d:b8:71:30:6c:06:d4:2b:d1:d2:7b:
ab:27:3d:34:f7:20:b3:4e:51:0a:64:0d:49:6e:8e:23:60:04:
fe:fa:fb:7e:be:3a:24:d2:72:61:8c:17:2d:61:18:b8:90:8a:
14:a1:61:6a:12:2e:d4:f6:d1:5b:f5:12:40:f2:75:f1:86:1c:
c4:32:26:6b:8f:6a:75:d6:96:e9:cb:b6:1f:78:ac:c2:3b:e8:
37:d8:38:70:dd:d9:b3:c6:e1:cf:bd:8b:91:b7:51:c4:07:b5:
eb:c9:73:11:20:e2:f6:ea:b8:88:7f:a8:e6:03:f2:5c:5f:07:
cf:11:6d:76:40:c3:78:13:8b:61:e2:f8:30:2d:6f:7b:8f:e9:
16:c9:08:9c:1a:cb:6d:93:59:78:c5:a3:09:f2:4e:96:dc:0b:
94:fc:ed:4a:db:7c:89:ef:18:82:e2:ba:ee:e5:c8:19:1e:33:
95:35:8a:96:07:6c:e5:c0:e4:33:fa:c3:16:1f:92:5e:a9:a2:
7f:f1:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:58 2025 by rpki-client