Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: MMhD6Tsa5HHMGD4CZjAEEx5MUZp4dF+YIGfx38SGOtw=
Subject key identifier: 80:0A:F9:A8:83:61:37:71:DB:4F:A4:1F:8C:1B:16:55:63:90:28:C0
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 01992E909B5ED6C61AB26C14FF76989BA597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 0FDD
Signing time: Tue 09 Sep 2025 13:00:52 +0000
Manifest this update: Tue 09 Sep 2025 13:00:52 +0000
Manifest next update: Wed 10 Sep 2025 13:00:52 +0000
Files and hashes: 1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: y+5MAxpaJjKIXY8YJeRQqeDirWQHApShM6M8pHUBZaM=)
2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:9b:5e:d6:c6:1a:b2:6c:14:ff:76:98:9b:a5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Sep 9 13:00:52 2025 GMT
Not After : Sep 10 13:00:52 2025 GMT
Subject: CN=800af9a883613771db4fa41f8c1b1655639028c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:6a:82:20:1c:a9:17:2e:8b:df:00:64:e3:
1d:f2:d9:21:cd:65:68:28:2e:89:86:5c:66:a5:cf:
a6:f9:aa:f4:a1:4d:20:07:6b:a4:85:6a:3a:ed:86:
d4:32:a7:68:cc:10:a4:1b:49:63:35:e9:a6:07:5c:
69:d6:3d:97:7f:e9:04:93:5b:de:69:fe:4b:72:aa:
a0:8d:9f:60:e2:21:1a:37:97:b1:13:73:f4:28:b3:
c8:30:51:63:04:ca:06:a0:c6:86:f5:a6:f7:33:3c:
09:d3:2c:53:ab:51:cd:96:60:a8:51:30:c5:5a:67:
01:ca:e0:b2:63:c4:04:86:55:43:28:a9:e1:82:bf:
fe:bb:13:d8:76:b7:15:c4:c3:13:d7:ae:4d:e3:9b:
c3:3f:d9:68:b5:54:59:27:1e:e9:33:a1:31:a4:1e:
3d:08:68:61:98:04:2e:ce:8e:ab:a2:b7:60:76:3a:
49:d3:3c:1b:06:70:d9:22:f2:4d:e4:f8:ad:66:0f:
c4:08:6f:a2:e5:b0:5e:a8:e6:d4:22:01:53:74:a7:
56:ec:21:de:6b:21:39:08:1b:de:cf:66:a0:23:5e:
77:57:e2:cd:e0:9e:8a:4d:67:41:1c:5a:2d:0f:4b:
c2:6f:ac:06:ae:1c:3f:90:e4:da:06:f6:b1:be:66:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0A:F9:A8:83:61:37:71:DB:4F:A4:1F:8C:1B:16:55:63:90:28:C0
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:34:0e:b0:b9:09:fb:b3:d1:92:46:54:f9:26:72:3f:5a:2f:
8e:0b:ad:7f:f3:0c:5e:7a:73:39:31:c4:ce:0b:43:ae:a4:4a:
00:57:78:3e:fd:62:76:de:7f:23:67:8d:96:43:a6:fd:6c:1b:
61:29:32:a2:33:79:f0:1a:39:39:19:ce:e0:a8:a9:e9:5b:50:
e6:60:8a:9c:5e:0f:9d:3a:6c:e4:f0:30:b8:59:0e:fa:6e:70:
ba:ed:17:0f:71:77:14:cb:fa:54:40:4b:bf:e2:ad:ab:ab:9e:
13:11:86:de:5d:20:2e:5d:74:6f:55:57:5c:bd:b7:2f:64:f8:
e3:84:0f:d9:33:c1:cf:5d:7e:29:be:e2:3b:fe:59:c7:a5:be:
d3:83:52:5c:5e:2c:2c:14:9e:ac:3d:7c:1d:eb:ea:94:89:d0:
17:cc:27:18:24:ff:58:20:11:de:78:13:07:52:32:14:cc:60:
e4:53:b0:e3:43:3d:91:8c:46:fb:f2:7d:5e:d6:14:66:32:61:
06:bb:e7:a4:09:4a:00:ea:ca:26:ac:85:4d:0d:f6:a6:23:23:
18:61:d1:eb:23:40:1a:f0:75:43:2a:ee:30:42:d6:31:17:2f:
c5:22:25:45:c2:88:96:81:9d:e3:79:60:50:9d:b3:6f:37:c1:
09:7d:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:09:35 2025 by rpki-client