Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File: EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier: YcJq1WjjgkKECFtQ+f0jTS7SFWB7TwSglZKethci3Ro=
Subject key identifier: 91:33:FF:8A:80:D3:9C:40:72:AA:0C:15:B9:CB:74:33:26:14:C7:C6
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 019A70A559993445AC3A17567E9E2962B130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number: 0A24
Signing time: Tue 11 Nov 2025 02:01:15 +0000
Manifest this update: Tue 11 Nov 2025 02:01:15 +0000
Manifest next update: Wed 12 Nov 2025 02:01:15 +0000
Files and hashes: 1: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: XOQUi0CQBIsKhI8zux0gk704rf3v97krIJ7c9D1KmuI=)
2: oWV04MIM-RKhpL3iCBPxMNYdvNg.roa (hash: y5jWD0UHuDBxNvyztj9K4XUOWYfO7oJMHZUIIkVTcM0=)
3: oswo9YKLg0u3JC1IbA7Gj8m0msI.roa (hash: iMLKS98/HXnStabev/m1xnD9F47lNw2WEBo8S/dBQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:59:99:34:45:ac:3a:17:56:7e:9e:29:62:b1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Nov 11 02:01:15 2025 GMT
Not After : Nov 12 02:01:15 2025 GMT
Subject: CN=9133ff8a80d39c4072aa0c15b9cb74332614c7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:d6:7c:d5:9a:7c:e3:df:7c:c9:6a:5b:7a:
4b:09:52:c4:37:b4:57:04:60:00:65:d9:cb:c3:59:
6e:1c:cb:8b:7a:9a:8a:3f:a4:6f:7a:86:11:7a:be:
2e:f7:16:47:dd:c7:97:65:02:43:0a:52:da:a1:b5:
63:ea:89:6f:d2:60:83:ce:23:cb:a6:be:9b:8b:a3:
ed:50:47:6a:0e:9b:54:b8:7c:01:0a:5d:6c:cf:e9:
ee:0c:59:ab:e8:25:9a:19:0e:51:63:00:ce:72:18:
7c:cb:66:c6:15:a0:30:cf:d2:db:5f:a1:00:81:2c:
63:87:f4:4c:c0:2a:dc:df:61:a9:0f:23:b7:27:e5:
1d:69:c0:95:b6:04:57:1d:6d:ce:be:2a:ce:8e:12:
55:5d:8e:99:54:4c:67:d2:2f:33:09:01:33:9e:99:
bc:4f:51:b0:6e:4b:73:c8:d3:5e:23:37:a2:d0:43:
2b:5f:05:83:5f:76:8c:a6:09:97:5a:fc:9d:05:5c:
65:4c:c7:26:8d:b2:05:c8:15:b4:45:ee:9c:80:bf:
44:0d:e2:57:dc:2b:ef:0f:95:28:c4:10:13:9a:cd:
b8:21:3a:68:79:42:6a:29:06:bb:16:02:dc:46:8c:
eb:33:1e:d0:76:c0:44:14:64:2d:aa:44:ea:72:09:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:FF:8A:80:D3:9C:40:72:AA:0C:15:B9:CB:74:33:26:14:C7:C6
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:85:67:f5:1f:5a:c4:0c:e0:1c:33:55:d4:ca:dc:da:3b:d5:
62:24:b0:aa:60:cb:8a:21:9f:6e:0b:4d:d0:7a:65:f5:dd:78:
0e:d8:af:04:1a:f9:bc:84:c2:81:2a:44:0e:3d:b3:82:80:ff:
6e:ba:ec:cb:52:59:3c:5a:f5:bb:e7:b6:9d:cd:26:79:5c:94:
1c:d5:33:94:fe:f4:5e:a8:e5:b9:51:5a:6d:1f:d0:c3:23:38:
9a:b2:34:11:76:c9:e3:a9:b5:4a:59:5a:38:3e:0e:5a:e3:1c:
60:d2:bd:d2:d7:3e:37:39:97:53:5e:a9:63:4f:df:88:22:d5:
17:2e:38:a8:5b:94:9f:98:0f:37:2a:c3:df:af:6c:7c:4b:92:
30:d0:ff:97:2a:3c:f6:b3:d8:be:b1:fd:b2:77:1b:8c:4b:b7:
1c:b7:d3:48:60:c2:27:7b:d2:3b:1c:47:6d:d0:89:f3:ea:e1:
dd:12:99:5d:fc:06:da:cd:80:23:9a:32:7e:bf:fb:2e:fc:e6:
a7:72:85:56:8b:3b:7c:a3:ef:ce:95:8e:c2:fa:44:53:f4:36:
8c:44:42:51:3b:00:18:07:5f:43:39:1b:9b:0c:de:91:66:16:
07:b1:2e:d6:e9:7b:84:51:b1:8c:71:81:7c:fd:ec:ce:43:d2:
ae:17:d6:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpVmZNEWsOhdWfp4pYrEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYTY1N2YzNDI0YzhkZDU1MjE1YWY4NTNiOTMzMDdjMzY2
YzUzOGEwHhcNMjUxMTExMDIwMTE1WhcNMjUxMTEyMDIwMTE1WjAzMTEwLwYDVQQD
Eyg5MTMzZmY4YTgwZDM5YzQwNzJhYTBjMTViOWNiNzQzMzI2MTRjN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B7WfNWafOPffMlqW3pLCVLEN7RX
BGAAZdnLw1luHMuLepqKP6RveoYRer4u9xZH3ceXZQJDClLaobVj6olv0mCDziPL
pr6bi6PtUEdqDptUuHwBCl1sz+nuDFmr6CWaGQ5RYwDOchh8y2bGFaAwz9LbX6EA
gSxjh/RMwCrc32GpDyO3J+UdacCVtgRXHW3OvirOjhJVXY6ZVExn0i8zCQEznpm8
T1GwbktzyNNeIzei0EMrXwWDX3aMpgmXWvydBVxlTMcmjbIFyBW0Re6cgL9EDeJX
3CvvD5UoxBATms24ITpoeUJqKQa7FgLcRozrMx7QdsBEFGQtqkTqcglmTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEz/4qA05xAcqoMFbnLdDMmFMfGMB8GA1UdIwQY
MBaAFBKmV/NCTI3VUhWvhTuTMHw2bFOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMt
MDVmMDkzMzg1YWM4LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMtMDVmMDkzMzg1YWM4
LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYVn9R9a
xAzgHDNV1Mrc2jvVYiSwqmDLiiGfbgtN0Hpl9d14DtivBBr5vITCgSpEDj2zgoD/
brrsy1JZPFr1u+e2nc0meVyUHNUzlP70XqjluVFabR/QwyM4mrI0EXbJ46m1Slla
OD4OWuMcYNK90tc+NzmXU16pY0/fiCLVFy44qFuUn5gPNyrD369sfEuSMND/lyo8
9rPYvrH9sncbjEu3HLfTSGDCJ3vSOxxHbdCJ8+rh3RKZXfwG2s2AI5oyfr/7Lvzm
p3KFVos7fKPvzpWOwvpEU/Q2jERCUTsAGAdfQzkbmwzekWYWB7Eu1ul7hFGxjHGB
fP3szkPSrhfWBw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:00 2025 by rpki-client