Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
File: EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft (raw, json)
Hash identifier: 1VVOM1oP5FwMXXUuI7I4UogI9mhNCIDFHEP6BKNN/f0=
Subject key identifier: 22:3C:7E:9F:A8:C3:F6:19:96:38:FB:79:4B:85:51:77:70:70:DB:C1
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Certificate issuer: /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial: 019A722584A370BA3A6CE1BE7968AD01737E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
Manifest number: 04C2
Signing time: Tue 11 Nov 2025 09:00:52 +0000
Manifest this update: Tue 11 Nov 2025 09:00:52 +0000
Manifest next update: Wed 12 Nov 2025 09:00:52 +0000
Files and hashes: 1: EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl (hash: 2PJ0MXMLZb7fx1t9A8pqGSkAigSO3Gk12072k4LkMBE=)
2: sxJ4adnYKO7gli2y2qrSkbqN80g.roa (hash: zIiuKl1GBABWNnrsEF/02SPcAT6HuQK8fZBVndJMElk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:84:a3:70:ba:3a:6c:e1:be:79:68:ad:01:73:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
Validity
Not Before: Nov 11 09:00:52 2025 GMT
Not After : Nov 12 09:00:52 2025 GMT
Subject: CN=223c7e9fa8c3f6199638fb794b8551777070dbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:ce:9d:bd:4c:a6:1c:e4:b8:d3:91:07:55:
10:51:99:13:12:91:df:2c:b0:5f:26:0e:8e:75:29:
fb:de:0e:7b:8f:ff:cc:41:e2:8b:fb:1d:8b:8f:bc:
96:60:df:d0:81:78:4a:5d:dd:f0:c9:f4:37:73:98:
25:51:56:fa:35:6c:06:16:f8:03:06:5a:40:cd:4d:
1d:f4:49:9c:e7:69:85:5e:7e:48:30:6f:e5:8e:c3:
c8:4e:7d:24:b6:9a:4a:9e:5c:34:ea:3f:a2:fb:31:
21:a5:25:6e:6d:0f:ee:0d:78:4f:8a:62:fa:14:1b:
42:b2:2f:a5:7d:54:e4:80:82:46:f6:27:0e:01:4a:
eb:b6:59:35:e3:c5:bb:ad:b3:53:c3:36:c7:8c:ff:
01:f4:e2:e4:2d:48:31:a9:13:64:31:c4:b6:da:f5:
0c:11:30:64:06:6c:8f:e7:44:88:ee:3f:d2:20:63:
27:f1:74:76:56:c5:78:8b:1f:17:2c:e1:3f:f6:37:
45:7d:0e:76:12:e0:b3:ad:27:24:d8:55:1d:0b:a9:
d6:72:37:de:49:e2:f7:47:ad:c1:9d:1c:0e:cb:45:
1f:71:08:58:7d:9b:4d:18:25:18:1c:c9:88:7b:b1:
dc:d9:52:42:9e:f6:38:d0:44:53:5b:66:2b:ba:18:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3C:7E:9F:A8:C3:F6:19:96:38:FB:79:4B:85:51:77:70:70:DB:C1
X509v3 Authority Key Identifier:
keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2e:5c:51:de:be:d9:fb:80:ea:0b:03:69:1c:22:cf:5e:74:
1f:f6:f4:c2:d6:bb:ee:5a:b2:79:94:77:fb:b6:55:76:d1:c0:
2b:e6:21:9b:00:87:39:91:d0:2c:13:7f:6c:3b:d0:88:3c:fc:
3e:65:d6:f4:56:74:b5:28:90:9a:0c:df:7b:b6:9c:8f:11:16:
02:53:23:57:ea:2e:9d:67:19:87:72:b7:90:78:0e:b8:2b:a8:
b0:0a:9d:da:fc:e8:15:c8:a2:de:81:5d:ea:d8:2e:51:cd:85:
6e:54:44:0a:4a:0a:62:4d:6b:f1:c4:01:18:53:45:dd:56:37:
56:26:a3:78:26:d8:e6:1e:7f:75:d5:31:5a:98:59:ff:db:f1:
eb:93:a4:8f:85:ce:27:5c:10:e3:49:f4:ae:90:92:3b:eb:75:
b6:53:7c:b6:8a:df:bc:cc:37:c4:e2:68:c3:f2:54:0e:7c:ca:
d0:7b:04:90:01:22:29:0d:00:6c:d9:8a:ac:2c:38:ce:f3:b1:
c1:c3:02:e4:46:99:08:8b:e8:ab:ab:ea:45:69:6f:cf:d7:e5:
f7:0a:0c:11:b4:e9:44:7b:b4:d9:f2:de:60:25:d8:15:75:c5:
a2:b2:79:14:02:92:2e:cc:52:74:17:b0:e8:c6:42:0d:fb:04:
49:35:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:07 2025 by rpki-client