Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: 3BpGIe/wWP8EKbVTKiVB5MEIwaXkfZXNQO+a360G5eM=
Subject key identifier: 3D:0C:82:10:27:5D:0D:8B:F6:B8:52:64:F2:A8:C7:4B:C6:33:81:13
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 019A71807EF768CA42A279CA078AAEB3AD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 06:00:37 +0000
Manifest this update: Tue 11 Nov 2025 06:00:37 +0000
Manifest next update: Wed 12 Nov 2025 06:00:37 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: 9B9caJ9CVUGWztyBOCJiv6A1S06zd9mWLYmp2+ZwTOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:7e:f7:68:ca:42:a2:79:ca:07:8a:ae:b3:ad:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Nov 11 06:00:37 2025 GMT
Not After : Nov 12 06:00:37 2025 GMT
Subject: CN=3d0c8210275d0d8bf6b85264f2a8c74bc6338113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:46:32:b0:ec:d4:d1:d9:a9:97:b5:41:15:
e8:48:f6:7e:5c:13:61:ac:94:85:a4:94:e0:1d:e5:
c9:6a:a9:3d:c0:fb:e6:54:ff:57:66:5a:b6:f2:1c:
24:1b:3b:6e:0a:94:02:43:bc:df:3a:64:4f:81:36:
ee:d4:39:97:f0:06:ad:34:34:8a:83:e3:65:1e:9f:
b4:1b:25:da:28:51:5f:e3:e9:dc:58:16:bd:11:78:
45:21:47:b4:58:6c:9d:11:e6:51:33:5e:1f:07:26:
63:7e:fb:6e:25:0d:88:79:cb:25:95:5a:c0:30:55:
df:43:e0:38:c0:6b:b4:22:2c:98:2a:60:98:2b:ce:
12:70:52:e8:df:49:d9:c5:6f:76:be:63:b8:cf:14:
ac:f2:8a:2e:7d:75:10:91:2d:ce:fc:00:e8:dc:d8:
a2:68:5e:b3:64:63:4a:a1:83:c2:2d:ea:81:d7:54:
99:5b:95:77:87:a3:63:15:88:31:f5:8f:e2:c3:82:
ca:36:06:26:09:77:c4:d2:10:27:4c:b6:d9:8f:01:
08:e2:cb:e3:eb:8a:30:10:04:76:5b:7f:da:49:aa:
ef:c7:b4:ec:e3:04:41:43:c5:79:75:89:18:f4:8c:
2f:91:08:23:94:bb:27:72:e6:a6:62:57:8e:41:1f:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:82:10:27:5D:0D:8B:F6:B8:52:64:F2:A8:C7:4B:C6:33:81:13
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:0d:f7:90:7b:bc:04:84:a8:68:65:0d:00:50:2b:b1:ce:
5c:bc:65:fa:11:b0:bc:4d:cd:c8:86:17:53:8d:95:95:aa:4b:
58:87:9c:86:7a:47:a6:dd:57:e5:a9:3c:6e:6b:fc:b5:c4:30:
83:5f:5d:3a:8f:02:5f:c3:9d:3f:b6:e2:29:11:19:be:d8:73:
98:fc:71:7f:a9:59:91:ea:79:bf:f4:e0:60:32:67:3c:6f:b3:
f6:19:bc:0d:be:8b:1f:8b:d5:ac:81:bb:30:67:84:fe:11:e0:
91:90:d2:05:ac:aa:9e:88:f1:3c:ef:3f:00:6c:a5:27:80:1a:
ad:a1:3e:fc:4b:ac:54:c7:f4:99:a0:c2:d7:b9:08:15:fe:ce:
6f:d2:39:85:23:91:65:42:86:40:74:2c:a1:83:19:f1:87:9d:
b3:e9:7d:2c:9d:34:d5:41:ac:2e:aa:1a:d8:10:5d:48:ce:06:
75:70:cc:e5:a8:bc:bd:d7:3c:a5:ea:7c:c3:59:c9:33:ab:ca:
aa:45:2e:3d:73:52:11:b5:af:8e:dd:76:10:78:52:9d:0f:0e:
4d:c7:d1:d8:51:8f:55:e6:02:80:42:91:a1:19:50:c6:0d:80:
cb:d7:98:80:94:9f:34:8e:06:5b:1e:9f:b8:8b:63:bf:fb:9c:
2f:60:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:25 2025 by rpki-client