Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File: EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier: RSJ6dpYTxlFQey0c8nHHzbjuSy6AsnOfgU2Hud2VRqY=
Subject key identifier: 1C:39:06:69:7F:CC:EF:6A:34:BA:E3:32:8D:48:8D:84:1C:D1:19:32
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial: 019A7149B0B3364F684110C94DE3092E239D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number: 0CD4
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: Fx+KZBGf325Ui8luf0uNWAFmD+YAbvMAEBfjidKjlxA=)
2: hMWp2eYYKaaUSIum5EmKLwWKUa4.roa (hash: 8+yLsr+nQz8cs8V3LX83Tse1Iso+npvbmYLm0xnhp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b0:b3:36:4f:68:41:10:c9:4d:e3:09:2e:23:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=1c3906697fccef6a34bae3328d488d841cd11932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:fb:16:f1:47:5e:33:94:8b:97:5f:fc:1d:
2e:35:dc:cf:30:f5:7f:57:5d:44:e2:2a:4d:75:56:
01:3f:6b:ca:37:ce:b4:a4:3a:33:e9:88:88:13:af:
a7:71:6a:db:9c:77:02:ce:d8:37:e7:28:5f:51:c6:
15:3e:69:c7:3d:6e:e1:d1:54:d7:e5:0e:cf:f1:51:
6f:7a:d6:6a:6c:77:e7:f6:79:5b:99:00:04:13:00:
b9:9d:4a:ea:ca:e2:59:fd:f6:82:63:4b:a1:bb:21:
1c:88:5e:d9:15:2f:34:ad:7c:70:52:02:07:b4:23:
e4:00:c3:39:f9:0d:8b:d4:f7:7d:59:b9:d7:4c:b8:
99:2d:7e:73:be:03:84:09:08:c3:4b:5a:ea:01:f6:
7b:85:ea:8f:49:90:31:b6:ab:95:b1:b3:7f:8a:5a:
7a:5e:eb:95:8a:de:27:e9:c1:82:9d:08:67:89:b1:
0b:b1:30:61:de:e3:7a:32:aa:15:0d:d0:3f:88:e2:
23:c4:ec:0b:32:32:87:f3:48:ca:01:8d:95:a0:fe:
eb:fe:c1:b3:a6:bd:2f:af:b3:87:49:08:71:6d:59:
68:1f:23:ca:5d:e8:9b:d0:4a:de:42:25:e4:89:e9:
1c:e6:a2:91:3c:50:f6:30:24:45:f7:2f:9d:e4:6c:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:06:69:7F:CC:EF:6A:34:BA:E3:32:8D:48:8D:84:1C:D1:19:32
X509v3 Authority Key Identifier:
keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fa:ff:40:48:b5:67:04:ea:f0:b9:62:35:d7:2b:b1:9d:e0:
71:91:ac:e9:2c:c3:7a:6e:e2:96:c5:6d:6f:42:b1:38:29:61:
9a:c1:53:7b:98:a8:37:eb:10:fa:e1:36:05:93:8b:e4:f1:ab:
97:51:dd:8a:b7:23:7e:d5:0c:c4:a4:89:5c:6b:37:34:cc:09:
f1:7c:7d:12:e9:63:b1:a1:7e:ea:fe:3d:0c:81:78:99:42:d7:
42:52:a9:99:79:31:74:1e:b9:2e:2c:26:95:cd:0b:b9:e7:8a:
07:c1:32:c4:e9:6a:42:b9:19:f9:54:e5:6e:29:bf:3c:92:da:
42:4b:bd:e9:2d:c6:4d:91:4d:bf:c1:98:4a:8e:89:70:8e:ee:
f5:f4:d2:49:82:06:2e:57:7a:bd:62:f5:e0:b9:3d:3b:4f:6b:
2e:3d:9f:10:ee:a0:39:47:08:f5:df:78:f9:c3:c7:5c:f2:0a:
c6:2d:a1:b8:34:4a:bb:d6:28:a5:47:51:ee:a4:7f:16:e5:47:
d2:52:66:b1:01:20:57:e2:b4:38:f4:52:cc:d0:a2:91:8b:c9:
00:84:f1:5a:ea:d3:59:76:65:19:d1:9d:9d:b3:f4:f6:7a:e3:
68:ab:68:e6:ee:94:ea:4c:eb:45:15:dd:36:10:e7:f9:6e:a7:
d4:f8:e4:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSbCzNk9oQRDJTeMJLiOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTIyMTY0NThiZDc2MDVmZjk1NTQwZmQyMDRlYjkzYTQ3
N2YzOTMwHhcNMjUxMTExMDUwMDQ2WhcNMjUxMTEyMDUwMDQ2WjAzMTEwLwYDVQQD
EygxYzM5MDY2OTdmY2NlZjZhMzRiYWUzMzI4ZDQ4OGQ4NDFjZDExOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIb7FvFHXjOUi5df/B0uNdzPMPV/
V11E4ipNdVYBP2vKN860pDoz6YiIE6+ncWrbnHcCztg35yhfUcYVPmnHPW7h0VTX
5Q7P8VFvetZqbHfn9nlbmQAEEwC5nUrqyuJZ/faCY0uhuyEciF7ZFS80rXxwUgIH
tCPkAMM5+Q2L1Pd9WbnXTLiZLX5zvgOECQjDS1rqAfZ7heqPSZAxtquVsbN/ilp6
XuuVit4n6cGCnQhnibELsTBh3uN6MqoVDdA/iOIjxOwLMjKH80jKAY2VoP7r/sGz
pr0vr7OHSQhxbVloHyPKXeib0EreQiXkiekc5qKRPFD2MCRF9y+d5GzQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw5Bml/zO9qNLrjMo1IjYQc0RkyMB8GA1UdIwQY
MBaAFBASIWRYvXYF/5VUD9IE65Okd/OTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWIt
MDlmZWFhMTRlMzFlLzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWItMDlmZWFhMTRlMzFl
LzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvr/QEi1
ZwTq8LliNdcrsZ3gcZGs6SzDem7ilsVtb0KxOClhmsFTe5ioN+sQ+uE2BZOL5PGr
l1HdircjftUMxKSJXGs3NMwJ8Xx9EuljsaF+6v49DIF4mULXQlKpmXkxdB65Liwm
lc0LueeKB8EyxOlqQrkZ+VTlbim/PJLaQku96S3GTZFNv8GYSo6JcI7u9fTSSYIG
Lld6vWL14Lk9O09rLj2fEO6gOUcI9d94+cPHXPIKxi2huDRKu9YopUdR7qR/FuVH
0lJmsQEgV+K0OPRSzNCikYvJAITxWurTWXZlGdGdnbP09nrjaKto5u6U6kzrRRXd
NhDn+W6n1Pjkug==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:23 2025 by rpki-client