
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier: H6pojrLnmPqAqwLx77mHc1mKsrGjvhaOeQHJHBhuMeQ=
Subject key identifier: B8:C3:4F:DB:D0:C2:31:9A:64:2A:69:8B:14:C5:45:63:F1:E6:8D:2D
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial: 019921B24F6CCCC4495A6C0BDF7961EBE26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number: 0D18
Signing time: Sun 07 Sep 2025 01:02:37 +0000
Manifest this update: Sun 07 Sep 2025 01:02:37 +0000
Manifest next update: Mon 08 Sep 2025 01:02:37 +0000
Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: i/0JqXWgeJzoDC4VpS9LGmG3JADocH/RbGjbJIAWE7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4f:6c:cc:c4:49:5a:6c:0b:df:79:61:eb:e2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
Validity
Not Before: Sep 7 01:02:37 2025 GMT
Not After : Sep 8 01:02:37 2025 GMT
Subject: CN=b8c34fdbd0c2319a642a698b14c54563f1e68d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:3c:72:6d:34:ce:cf:a9:15:ff:e4:62:68:
69:09:8c:ff:c4:c7:a3:f0:03:9e:5f:01:f3:19:d6:
67:03:02:04:dd:a8:22:51:a0:82:4c:9b:13:4f:d5:
49:04:18:16:96:8d:72:3f:0c:e0:8d:04:3b:a1:35:
0d:dd:a6:c4:7e:16:c1:d1:51:89:cf:41:a0:fc:16:
3c:d7:85:3f:f6:93:3f:bc:2f:ae:b7:f8:a3:84:3c:
c9:8b:cb:80:ce:bb:1f:06:96:aa:0b:9a:2c:9d:6b:
2d:03:7d:cd:9d:c0:bf:d1:9f:5f:1d:af:8b:20:ce:
45:eb:2a:6e:2b:7b:32:3f:2d:42:03:22:50:67:7a:
5b:76:eb:e6:86:c6:44:e7:d7:dc:a5:82:a5:73:0f:
2f:3a:42:74:83:bc:d3:64:e5:45:ed:46:e1:a6:1b:
ed:ad:8f:94:a8:f7:84:b8:02:b2:f8:c4:d8:d8:fd:
80:0b:63:b8:21:ee:0e:fb:b6:0c:3f:ad:7e:33:4e:
f1:e1:0f:6e:d8:40:16:3a:4a:42:33:b1:5c:a4:8a:
c6:02:91:b3:50:82:0f:80:98:26:2b:1d:64:39:71:
dc:15:c6:d9:47:a6:90:7f:28:d1:fa:3d:82:c4:56:
80:61:72:a0:5d:b8:34:1a:e8:25:29:c7:d3:6a:18:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C3:4F:DB:D0:C2:31:9A:64:2A:69:8B:14:C5:45:63:F1:E6:8D:2D
X509v3 Authority Key Identifier:
keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c7:bc:b6:63:36:1d:18:88:c3:0f:17:4b:ce:cf:21:b2:13:
cd:d2:4a:d8:54:da:bb:16:74:c9:e9:c6:af:1e:14:86:1d:a6:
7f:3c:12:be:70:a0:fa:3b:fa:cc:c7:a7:ee:62:b3:16:c9:6b:
86:9f:90:9e:69:5e:1d:90:12:5b:34:0f:ba:3a:06:d9:f9:f9:
09:a1:83:3e:a9:4d:2b:56:9a:0c:8a:0b:8a:49:1e:51:ee:b9:
76:29:30:03:25:1f:74:07:48:a7:18:a5:97:4a:80:18:4c:26:
84:7b:88:c2:a9:2e:e3:cb:43:00:7b:77:7f:18:b7:e3:bc:7c:
ff:d0:6f:22:5e:26:45:f4:58:80:f0:6a:5d:b8:99:64:1b:41:
f5:dc:8d:2e:45:82:d5:7a:fc:fe:16:76:76:47:ab:15:02:84:
b2:e2:9a:52:26:5e:97:56:70:7c:ba:c7:fa:48:fe:92:c1:3a:
4d:d6:40:6e:03:1c:4a:b8:98:8a:bc:a7:2a:85:bc:25:9e:8a:
fb:75:e5:2c:6e:d8:e5:a9:14:e4:0d:4c:b3:52:50:c0:95:c4:
fa:12:09:8b:79:b1:e7:df:32:05:4e:a5:2b:4a:97:f9:90:17:
fc:3b:69:9d:5f:e1:ab:48:fe:91:1e:34:6f:02:21:bc:ed:65:
0f:50:66:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsk9szMRJWmwL33lh6+JvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTgyM2M2NDI3MWY3OTY5NDZhNDY4MjU5NmU3MzI4MzVj
YzRlYzgwHhcNMjUwOTA3MDEwMjM3WhcNMjUwOTA4MDEwMjM3WjAzMTEwLwYDVQQD
EyhiOGMzNGZkYmQwYzIzMTlhNjQyYTY5OGIxNGM1NDU2M2YxZTY4ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUw8cm00zs+pFf/kYmhpCYz/xMej
8AOeXwHzGdZnAwIE3agiUaCCTJsTT9VJBBgWlo1yPwzgjQQ7oTUN3abEfhbB0VGJ
z0Gg/BY814U/9pM/vC+ut/ijhDzJi8uAzrsfBpaqC5osnWstA33NncC/0Z9fHa+L
IM5F6ypuK3syPy1CAyJQZ3pbduvmhsZE59fcpYKlcw8vOkJ0g7zTZOVF7Ubhphvt
rY+UqPeEuAKy+MTY2P2AC2O4Ie4O+7YMP61+M07x4Q9u2EAWOkpCM7FcpIrGApGz
UIIPgJgmKx1kOXHcFcbZR6aQfyjR+j2CxFaAYXKgXbg0GuglKcfTahj2gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjDT9vQwjGaZCppixTFRWPx5o0tMB8GA1UdIwQY
MBaAFBGoI8ZCcfeWlGpGgllucyg1zE7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAt
MjRmYjI0YjVhZTViLzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAtMjRmYjI0YjVhZTVi
LzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASce8tmM2
HRiIww8XS87PIbITzdJK2FTauxZ0yenGrx4Uhh2mfzwSvnCg+jv6zMen7mKzFslr
hp+QnmleHZASWzQPujoG2fn5CaGDPqlNK1aaDIoLikkeUe65dikwAyUfdAdIpxil
l0qAGEwmhHuIwqku48tDAHt3fxi347x8/9BvIl4mRfRYgPBqXbiZZBtB9dyNLkWC
1Xr8/hZ2dkerFQKEsuKaUiZel1ZwfLrH+kj+ksE6TdZAbgMcSriYirynKoW8JZ6K
+3XlLG7Y5akU5A1Ms1JQwJXE+hIJi3mx598yBU6lK0qX+ZAX/DtpnV/hq0j+kR40
bwIhvO1lD1Bmtg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:12 2025 by rpki-client