Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier: PXGUk+1qGHlVEovxQQBxc4agGNJ8LWRyMOmPfKISY64=
Subject key identifier: 7D:57:53:F6:A4:E2:5F:48:FE:C4:80:0E:A5:08:C5:C2:CF:05:68:F6
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 019A7112B2C42DA210665E2458B465ED3AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: C++q3M1tJQhGFqjMM352sl2kY1puk+KZrcUzPH9wO8E=)
2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b2:c4:2d:a2:10:66:5e:24:58:b4:65:ed:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=7d5753f6a4e25f48fec4800ea508c5c2cf0568f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:1a:ad:16:20:b8:bc:e1:ba:2c:7b:5e:c9:
7f:18:01:62:99:ad:47:2f:60:12:bf:74:c6:45:9e:
e8:92:53:6c:87:53:7d:cc:bf:dd:14:7d:31:b2:7a:
d8:32:b5:8c:7c:9f:e5:c1:41:c7:ad:7c:f9:b8:4b:
17:d5:29:96:3c:8a:24:8a:84:01:e2:7e:d6:8e:c2:
aa:cf:d2:7e:15:ab:40:1d:89:d7:19:e4:22:e3:a3:
58:d2:66:ce:87:6c:a4:a3:bb:28:dc:1e:90:7d:aa:
81:fe:aa:aa:e6:cc:04:80:b0:57:e4:56:8c:97:99:
0b:da:ce:b5:e4:3c:4d:ef:1b:db:71:a6:12:47:d3:
d7:5b:34:f4:c7:e1:43:fc:50:50:07:21:91:e6:1a:
63:72:32:f7:34:bb:83:0c:44:f2:37:88:84:e2:38:
a9:bb:1d:80:75:b2:45:89:70:66:be:03:96:92:df:
70:f6:bc:f8:f2:b3:4a:c5:06:94:e4:db:19:a4:68:
bc:38:f5:5a:a8:fb:4a:6d:be:9d:01:0d:6f:9e:a0:
46:e1:3e:26:84:d2:c0:d3:f9:31:ff:0f:37:8b:a6:
1a:b7:a9:89:34:5c:0c:4c:95:67:4e:82:f8:5f:52:
3d:86:d0:09:2b:ba:a4:3d:a3:48:32:8f:36:be:a8:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:57:53:F6:A4:E2:5F:48:FE:C4:80:0E:A5:08:C5:C2:CF:05:68:F6
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:11:34:7f:87:24:ee:3c:b7:cb:06:78:b8:d8:5e:e0:3f:a4:
81:12:32:a1:90:ff:1e:69:8d:b7:e6:8b:b0:37:08:c7:43:47:
84:e6:df:18:cc:d0:b3:b0:32:ad:f6:66:2f:bb:6e:e4:36:ca:
c2:64:e5:93:ef:84:63:e3:6b:18:fe:1d:e1:f4:0b:20:a7:15:
3d:97:2f:f7:33:d1:35:c2:ff:9e:ae:91:59:da:97:99:14:84:
1c:02:cd:a1:55:67:af:0f:c9:2a:56:a1:89:7b:4d:64:ee:3d:
b7:91:7c:29:d0:cb:49:c5:ba:57:0c:48:01:c8:8c:03:fa:75:
8c:f4:77:4a:66:a5:13:95:56:e9:ab:b6:2e:2f:e5:42:d5:90:
af:0c:9d:df:d8:bd:3e:d4:f0:42:c2:50:50:e4:e9:ae:1e:07:
98:4d:fb:1a:7d:ac:8d:b5:a9:50:d9:b0:56:8b:8e:40:77:15:
ab:90:11:27:46:e4:cd:4d:80:a1:8e:3a:d2:6c:11:93:bf:c0:
73:59:ea:22:79:f2:1e:c2:7f:54:df:9b:0f:6c:ad:03:4c:09:
3a:b4:36:97:1d:a2:42:40:ab:08:0b:5d:f1:6d:97:6b:d9:76:
f8:5d:84:45:ee:40:28:3d:4f:e4:cd:de:29:ae:ac:28:b0:f5:
e3:dc:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:38 2025 by rpki-client