Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: edIe4xPRFYMTzudNGK8jJxS5AEeW4brXtVJr7lKR374=
Subject key identifier: 4F:19:1E:10:24:C2:AD:5A:3F:8D:E7:91:F9:3A:4C:C8:8D:F3:09:66
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 019A7293AAB946F974CA4EA40172928128BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: Mda+BCwl5QBi0i9kwGqGHWFph7QAVvXXPCnhVYZGfCI=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:aa:b9:46:f9:74:ca:4e:a4:01:72:92:81:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=4f191e1024c2ad5a3f8de791f93a4cc88df30966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:b0:00:31:61:6e:a0:e0:03:a7:c6:0f:2d:
2c:e9:86:75:04:73:6e:af:95:b4:dd:c2:dd:a9:00:
3d:58:9a:25:76:60:3d:e3:37:59:02:11:d4:70:d0:
a7:3e:e8:b3:8d:b2:9d:e0:76:5f:ec:6f:5c:ec:28:
af:ce:13:17:91:1e:4f:b4:ea:3f:78:29:d8:ba:d7:
27:69:f7:7e:bc:62:ca:4d:0c:f8:5a:96:9c:24:e6:
d5:cb:b2:d5:6e:ee:d6:ec:c2:17:96:e4:a6:f1:63:
a6:cb:c2:dd:42:b9:f2:23:9e:b8:d1:86:5a:ea:ea:
21:11:3c:48:06:0d:ce:cc:00:a8:c0:71:8b:d8:62:
c8:15:57:ec:86:b5:1a:87:5f:8f:dc:6a:02:0a:e4:
4f:66:75:7c:a5:99:5f:9e:94:88:27:4d:1a:26:a2:
af:44:97:4a:dc:1b:a4:d8:dc:12:ad:82:9d:88:8f:
a7:8b:2b:30:b3:98:ec:ea:f8:be:dc:e8:f7:85:a0:
4b:1c:f6:39:2d:26:cd:c2:e6:a3:24:1e:27:05:e4:
77:df:27:f7:23:c1:2b:94:62:c9:71:47:34:c3:49:
b6:01:61:66:23:a4:eb:ce:2d:18:f7:02:75:e3:52:
e2:28:df:e8:d3:f0:6e:7e:6f:54:8f:50:e4:2f:9e:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:19:1E:10:24:C2:AD:5A:3F:8D:E7:91:F9:3A:4C:C8:8D:F3:09:66
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b1:52:bb:99:3d:b1:c4:78:55:6f:c8:a0:7f:de:0e:4e:21:
f5:e6:52:a8:99:74:a2:e8:1e:8d:21:9f:c8:b0:d9:81:83:c8:
ad:e3:0e:ff:5a:f8:e2:b8:7a:a6:95:d6:ab:c8:89:0d:ff:49:
2a:05:83:95:45:fe:f5:c9:95:b0:16:62:f1:64:a1:22:0d:63:
24:d5:86:26:36:c2:aa:ed:1e:bd:11:de:d6:a5:55:c8:43:54:
66:e6:00:5d:08:24:c9:a9:08:63:9e:bf:30:bb:c1:0e:0f:d6:
4e:91:44:96:8c:7d:8f:02:db:66:25:9c:22:8e:45:40:1f:3f:
2a:89:fa:3e:d0:da:54:c8:ab:35:6f:61:ac:c3:84:f0:44:8c:
f8:bc:fe:5f:d6:f1:32:9e:09:33:ae:bd:17:2c:08:c4:86:cd:
39:ba:17:cd:d4:30:44:80:34:89:50:db:68:ec:00:76:44:2b:
8e:23:4e:77:4a:1c:a2:33:dc:e6:64:e4:53:1c:74:b6:45:7e:
d9:8d:a6:a9:f2:dc:56:55:83:10:ad:7b:d3:0e:ea:ec:e5:19:
06:cb:30:89:1a:f0:bc:28:59:ef:1f:f0:6d:a8:7b:55:0b:03:
6b:61:ef:ce:93:3f:b9:7e:e4:c6:b8:61:25:bd:10:fc:73:bb:
33:5b:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:45 2025 by rpki-client