
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
File: EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft (raw, json)
Hash identifier: mjmFnA2sqjWixnD5FXnIoLI8ilBBjotA3H+pUTCcaHs=
Subject key identifier: 18:8F:F5:4B:16:98:09:6C:8F:6D:C3:71:DD:9A:E2:71:F6:9B:93:B3
Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf
Certificate serial: 019A71B849AB707729F5AEF1F10DE70A5269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
Manifest number: BB
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl (hash: BUtgaSUSOj4bhaGmis9Lhkr+PrX///vkYgoTgR/YypE=)
2: O5jVNQO8nxMopLkQjhKtnXIwjK4.roa (hash: bk5CA6HpOyjgqnMm5ypfeRTZvYufF4If6ZXNBIeT5K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:49:ab:70:77:29:f5:ae:f1:f1:0d:e7:0a:52:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=188ff54b1698096c8f6dc371dd9ae271f69b93b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:f9:10:20:30:55:03:57:58:b6:da:15:bf:
23:52:26:40:8a:16:c4:33:63:5b:5e:0a:23:82:eb:
47:50:82:ab:d9:8f:f6:a3:b2:9f:69:9d:c2:df:61:
19:c9:4b:bd:10:93:e3:a1:50:f0:bf:9e:4c:e5:05:
ca:5c:4f:a1:8f:19:48:ef:97:83:72:d1:81:11:8d:
a3:08:9c:fe:31:ed:4a:98:cb:41:e3:78:e4:00:3a:
46:1a:0f:3b:af:0e:79:64:d3:2e:e2:88:99:75:d2:
f4:51:09:d0:30:ff:ee:fd:0d:7e:ca:36:cd:1c:d6:
fd:ac:9b:61:4b:14:71:08:96:aa:52:73:77:cf:e6:
8b:28:4a:fe:51:bb:61:06:33:ca:a0:a5:3d:7a:21:
d3:26:0a:0d:9a:1b:d8:ef:eb:86:bc:6c:86:3f:ab:
f9:f2:b3:a7:c3:d5:44:dd:74:36:58:43:15:70:31:
30:f6:f7:55:29:b6:1d:9a:15:80:5e:ae:ac:2f:c1:
b5:42:57:9a:00:9b:40:db:6f:f6:1d:65:f5:ff:b7:
10:9e:c7:88:f1:22:98:86:fd:47:5d:d9:d7:bd:e9:
8a:43:3a:68:90:9f:c2:08:10:e6:b1:0d:42:53:c5:
74:ef:8c:9f:22:39:19:f8:98:12:1f:6d:89:91:90:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8F:F5:4B:16:98:09:6C:8F:6D:C3:71:DD:9A:E2:71:F6:9B:93:B3
X509v3 Authority Key Identifier:
keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:69:3c:02:84:65:35:d8:5b:12:64:fc:47:36:1a:17:a6:02:
90:68:af:3d:d6:12:19:97:bd:a4:ba:f8:93:b8:e6:b8:cf:9c:
96:f6:fd:17:67:4c:cf:0a:be:0b:38:6a:e9:b7:35:a5:47:22:
e8:d2:ac:ef:18:6e:11:6f:28:f0:55:b9:98:3b:ae:0e:4c:1d:
7d:aa:bf:87:2f:fb:2c:15:5d:41:97:ea:85:d9:43:2e:75:2c:
6a:d4:6e:dd:d1:3d:94:a4:07:d4:78:6b:41:ae:02:be:23:52:
2f:25:d9:d5:54:fa:78:9c:af:78:48:b3:9b:a5:f7:df:05:83:
84:be:a9:b4:de:35:87:82:7f:ad:11:95:1e:ec:2e:93:05:88:
49:e3:a3:ed:d3:9e:e4:69:d8:57:93:d2:22:f4:05:4e:c4:4a:
75:28:b4:82:7b:d7:7f:50:1e:08:25:c7:e3:c6:d9:af:48:fe:
6b:4b:9e:fe:51:95:8f:fc:4f:55:cb:df:f0:fd:50:aa:ad:0a:
a0:92:ab:f8:75:d5:5a:f7:f4:0f:49:8c:8d:a3:6e:ab:1d:3f:
dc:bd:86:42:b3:32:c3:6f:91:1d:45:c4:3f:7a:e7:ac:3d:d9:
6f:0b:17:33:41:73:75:e0:d5:e7:b2:08:ab:86:1d:1b:e2:94:
df:fb:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:15 2025 by rpki-client