Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: RZj37GpNfDZonuOllpoSwn66fQhMznWn+cPJQIxKtRs=
Subject key identifier: 56:24:7B:7A:D1:98:76:7D:49:67:9B:61:95:DA:C4:69:3C:63:DA:20
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 019A71EE6F1EE50953B29E38F9EFC036BEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: 0fLy2/bKJCE7vCmnU2NQHZ7WhxFIfAflfnLBN4CRnNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6f:1e:e5:09:53:b2:9e:38:f9:ef:c0:36:be:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=56247b7ad198767d49679b6195dac4693c63da20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:3f:f3:48:be:1c:b1:de:ec:92:25:3d:ab:
02:af:8f:19:42:94:9f:ed:a2:fe:a3:0a:9f:e2:8f:
5d:5c:f9:c5:04:58:1f:17:83:0a:90:65:bb:8c:2c:
38:c1:fd:f0:3d:00:dd:b1:0e:76:52:fe:19:ae:bb:
29:f9:2b:e6:22:33:93:6c:10:a6:87:ab:97:c8:5f:
fa:9d:7e:91:19:ff:75:63:93:b7:ac:05:60:57:69:
46:cb:c2:22:f0:1d:1d:2f:97:49:69:d0:38:87:82:
a5:13:79:d4:20:97:98:a7:26:ff:7f:67:18:c2:8f:
70:4d:04:6b:03:45:f7:22:e8:f4:7b:c3:98:a0:7b:
20:ec:90:f4:8f:bb:2b:da:59:30:1a:8e:e6:43:fd:
84:64:6c:d2:26:c3:fe:9d:cf:3f:fe:8c:97:6d:61:
ce:d6:3e:68:df:e3:c8:bf:fd:b1:c4:af:f4:ef:13:
f8:ca:c0:05:23:e0:6b:59:ad:41:44:f4:10:87:ed:
79:be:e3:a9:04:59:db:82:f5:08:28:93:6a:db:e1:
09:93:b4:06:96:f7:53:0f:fc:56:3a:84:1b:8f:0c:
1a:a9:2e:85:86:59:79:e3:9f:41:93:32:61:c1:33:
1c:eb:ad:1b:59:1c:8b:26:59:41:6c:4f:ac:dc:5a:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:24:7B:7A:D1:98:76:7D:49:67:9B:61:95:DA:C4:69:3C:63:DA:20
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:be:b1:12:a5:f6:00:64:5b:28:d2:c4:32:83:e1:5e:8b:14:
da:36:05:37:72:c0:49:5b:30:75:2c:ed:6a:a0:92:38:22:83:
9a:ac:95:0b:d6:85:a5:bc:11:35:79:88:d7:17:1d:e9:62:f0:
bb:ad:87:cd:25:59:2a:2b:c7:1b:62:3a:ef:4b:5b:f7:1c:24:
69:de:d2:6b:6e:2c:4e:6b:01:33:57:8d:a1:f8:62:a5:8d:82:
50:f2:f7:7c:53:39:50:48:db:9a:c1:e1:1a:d6:ec:4f:c0:fc:
0e:7d:13:53:5b:30:44:6c:b0:95:b6:2d:63:9a:7f:45:39:2c:
b9:a5:40:a5:13:23:26:95:27:c7:cf:65:f1:22:52:b1:4f:46:
cc:80:2a:7b:0b:e2:54:ca:a7:68:2f:b0:f5:5a:85:22:02:d0:
4f:b0:8d:71:be:ea:ad:31:d1:72:5f:14:e7:e3:62:3b:f6:4e:
68:de:a4:da:51:c3:c5:ad:47:11:2f:98:8c:e2:73:ba:f5:d0:
7d:82:ed:6a:00:e6:7c:e9:d7:55:f0:46:38:a2:1a:c1:92:a1:
98:64:f7:85:c4:46:a9:aa:2a:85:98:2e:12:65:09:fd:6e:90:
41:84:d5:cb:b9:b1:42:8d:6f:12:e8:09:e3:8e:57:02:e1:8b:
e6:9a:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:47 2025 by rpki-client