Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
File: EqosHuQ0mghsdpATpC6LSsK6Gb8.mft (raw, json)
Hash identifier: 1jGhaEyqPve2I/wld36Cod6ZJhZDdL2Q6sn4RM2M5BE=
Subject key identifier: 70:9B:1D:D8:F5:A2:9E:59:18:B2:21:48:F2:BF:78:07:B2:6E:E0:25
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Certificate issuer: /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial: 019933B6D5CEE1C7991522DFF4DA7B1641DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
Manifest number: 160C
Signing time: Wed 10 Sep 2025 13:00:44 +0000
Manifest this update: Wed 10 Sep 2025 13:00:44 +0000
Manifest next update: Thu 11 Sep 2025 13:00:44 +0000
Files and hashes: 1: EqosHuQ0mghsdpATpC6LSsK6Gb8.crl (hash: 3m4+R+eBqiliFPOdCRfQ6Da2lDiuaBB9hOen9Jrx9tE=)
2: dHkrhJd3NT0_kYIKw0jfO38dXYQ.roa (hash: 2ty1voZTaeGxLdtc1mMuAWwNMar29AXn22fPjzO6Bio=)
3: iaMRdP2RyDT-6nSIejme8ejtlz0.roa (hash: w6co8/yr5pK0Ot58oo5ftwFcerLdy7XppbhZMwkZj3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:d5:ce:e1:c7:99:15:22:df:f4:da:7b:16:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Validity
Not Before: Sep 10 13:00:44 2025 GMT
Not After : Sep 11 13:00:44 2025 GMT
Subject: CN=709b1dd8f5a29e5918b22148f2bf7807b26ee025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:ae:c1:9b:13:b9:ea:6b:c4:c6:9f:0d:3d:
36:f4:3a:07:7b:6d:8c:60:c3:27:81:64:2d:08:5d:
da:9e:e7:84:bf:5d:77:97:63:bb:c0:5f:46:41:dc:
27:1a:0a:9e:85:d3:d4:48:ce:1d:94:38:80:a1:d0:
07:43:13:90:83:ac:ea:d9:8b:95:50:38:e4:80:66:
db:38:65:0f:fe:0a:cd:d5:d5:ff:5d:df:93:b6:d8:
5c:4d:16:69:cb:10:7e:01:1a:54:d7:1d:b2:97:a0:
a0:5b:41:c5:46:31:fb:f4:3a:7c:c5:85:3a:68:5c:
6b:67:3e:52:dc:21:65:35:d5:a1:21:48:ff:2b:fa:
3a:ca:27:26:2f:0f:de:4a:29:80:4e:2c:8e:40:65:
56:96:00:02:de:64:ec:38:bb:53:48:7b:52:3a:f3:
56:97:b3:02:fc:56:ac:13:b8:9c:49:27:e2:f4:70:
5c:55:15:b6:53:75:6b:e0:aa:36:1c:24:60:f0:d7:
1c:9f:c7:bb:aa:8f:8f:66:a2:06:d7:8b:77:93:c4:
4e:c1:5b:7b:9e:1f:45:92:ce:51:73:34:47:c7:17:
f0:7a:9c:4c:4a:80:6a:b3:80:bd:f1:1e:97:fd:cf:
a3:a8:34:d3:f2:d0:e7:d4:11:94:5b:98:88:6c:a0:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:1D:D8:F5:A2:9E:59:18:B2:21:48:F2:BF:78:07:B2:6E:E0:25
X509v3 Authority Key Identifier:
keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e2:cb:be:5e:c3:b1:37:22:34:6f:bd:2b:6a:4b:01:0b:fb:
8e:22:05:49:00:fb:47:90:82:a5:06:e2:9a:4e:8b:7c:2e:d2:
e7:6a:de:a4:fc:0e:32:3f:17:e4:c6:2c:79:0a:e6:58:01:28:
cc:e0:74:34:5f:61:f4:b9:e0:3f:08:aa:d2:b0:2a:ff:95:4e:
f9:63:dd:4a:c9:20:ff:3c:60:e4:40:80:ef:ba:e4:e3:39:f6:
82:08:b5:37:82:fb:27:00:b5:27:9f:c5:50:c0:f9:f4:f3:3f:
7d:e4:9e:47:eb:75:48:e2:01:94:c0:1e:37:79:eb:41:f5:f3:
01:76:7f:9f:5a:55:f1:79:14:72:73:94:77:ad:ae:d3:d4:a0:
01:95:f4:dd:e5:36:a3:5d:35:0a:ac:61:53:4e:e3:6e:cc:b2:
f5:30:3e:82:9b:46:41:b8:61:12:ac:66:3e:75:5e:db:3f:92:
1a:89:23:27:df:26:54:49:fb:3a:15:2a:04:11:a1:77:5c:f5:
6b:dd:db:b3:f9:07:80:2d:f8:d6:e0:9d:5b:e8:ee:9f:28:cb:
83:ba:5c:64:43:48:b3:2d:99:a7:9f:36:da:95:d0:41:c8:c5:
ea:37:88:57:65:35:a5:53:72:f9:26:ea:d5:89:e7:cd:75:10:
10:97:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:41:12 2025 by rpki-client