Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: WaRdP3xWKh4FvyHNAsJqAXv8CdZyyFx5bKwAldRFzIE=
Subject key identifier: 5C:0A:72:5D:91:42:3F:1D:B7:31:80:39:E8:58:70:AC:16:DE:57:2C
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 0199228D2380F20F6B9DEC5DEA458B389E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:38 +0000
Manifest this update: Sun 07 Sep 2025 05:01:38 +0000
Manifest next update: Mon 08 Sep 2025 05:01:38 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: 4IS1YGTtCyyGPDSxUX/fAiw3VvH8/uxEDYybmnmanOA=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:23:80:f2:0f:6b:9d:ec:5d:ea:45:8b:38:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Sep 7 05:01:38 2025 GMT
Not After : Sep 8 05:01:38 2025 GMT
Subject: CN=5c0a725d91423f1db7318039e85870ac16de572c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:98:96:ea:ac:73:3e:52:41:8c:4f:28:74:
a9:4b:f2:51:29:72:77:d6:ac:c6:5d:51:d0:96:9a:
60:c8:dd:af:6c:d8:03:5d:3c:97:93:1c:7a:b8:ad:
ec:f6:31:73:9d:3d:cd:b9:67:73:23:a7:5f:53:e4:
f7:97:0b:2e:bb:17:10:6a:0a:f9:ad:bf:0e:48:67:
bb:74:60:94:88:8e:7c:5f:23:2b:3e:6a:ce:2d:e6:
89:05:71:19:c0:12:d7:25:3c:28:75:a6:ee:e1:e9:
84:aa:77:fd:84:72:f0:9b:7d:38:d5:49:67:28:98:
1e:b3:14:cf:9d:72:58:5e:7e:d7:fc:1b:f5:5f:0e:
c7:d1:86:e7:b1:ff:49:6f:cf:1e:64:8e:cc:ce:d3:
77:58:e1:92:59:b9:38:33:7e:0d:ce:d4:27:09:d5:
f5:69:9c:b7:c1:2c:ea:19:76:0e:ac:b1:e0:b1:3a:
d5:a3:94:9f:1e:1e:49:74:b9:c4:f5:a1:23:67:3b:
3d:f1:7d:00:67:e9:ac:87:8b:60:d6:cb:16:cd:b0:
2e:a3:91:4f:26:d0:c1:ba:42:66:de:79:d8:47:5f:
36:46:d1:52:66:d5:cf:44:1e:31:97:7d:6a:08:41:
76:37:b1:06:8b:e4:a2:df:fe:ba:40:80:e2:9b:0c:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:72:5D:91:42:3F:1D:B7:31:80:39:E8:58:70:AC:16:DE:57:2C
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a0:90:ff:a5:18:c3:ce:38:bb:af:ee:58:81:f5:22:17:de:
3d:53:85:c6:5d:3c:42:6c:34:3f:ad:6c:0d:55:66:bc:54:5b:
af:51:88:62:a6:b9:7f:a0:55:3d:7a:2d:8b:68:64:fc:f1:aa:
05:66:62:0f:fd:c5:ed:77:d6:31:bf:b6:9b:eb:bf:7d:f4:30:
33:73:46:42:0d:28:c8:cd:e0:76:76:e2:a2:6a:4c:03:ae:63:
01:73:1d:af:ed:13:ca:82:00:ae:fa:a3:21:f4:02:b3:38:1f:
d7:e1:3a:b4:1e:ea:8e:bc:41:94:ab:16:6f:b5:d3:d8:7f:ba:
b1:aa:06:46:47:3f:a6:8f:ef:31:0f:7e:8a:0b:e9:6c:a7:5f:
a3:35:58:a1:1b:c9:6b:67:3f:e2:84:a6:c6:ee:cc:57:7a:0c:
00:51:94:9a:36:1b:78:6a:cf:8e:b8:04:36:cc:a4:8a:aa:14:
3c:2d:69:75:af:0c:61:cd:2a:a6:12:f9:27:1c:af:9b:ec:26:
fc:31:51:43:75:be:d5:0b:55:5a:0a:fc:63:ae:4a:7e:a6:0c:
8a:0c:21:13:94:87:27:55:e0:ed:fb:35:2f:95:ad:5c:48:4d:
ec:ee:aa:65:b0:cf:f8:b6:55:3f:7b:6c:05:65:ad:27:3c:98:
c7:44:3b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:45 2025 by rpki-client