Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: 70R1fftWw+hoUpJxTVy85+zmjGODG1K/iIAJZGnV0bM=
Subject key identifier: 5F:7D:C3:AF:C4:4D:2B:D6:9C:BC:42:9B:6C:6A:98:47:AD:45:05:53
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 019A725CCFBC0BACC04B035183C19ED74C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 1719
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: ttOtbkElKwL9X5V1Cx9LaElw4uw4q5MfpBg5rHTGYkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cf:bc:0b:ac:c0:4b:03:51:83:c1:9e:d7:4c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=5f7dc3afc44d2bd69cbc429b6c6a9847ad450553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:33:44:2c:8c:aa:ea:27:c4:9b:b0:7e:17:
18:b9:66:58:8c:b0:35:f2:63:f1:8b:58:00:0e:bc:
77:2e:44:94:8d:da:6d:03:94:e5:14:0f:1f:82:45:
a2:e8:4c:e4:84:b8:51:43:a0:54:1a:7b:55:93:0a:
d5:13:a9:0e:fb:9f:23:bc:48:a7:b6:91:e6:5e:09:
e6:b0:60:5b:6d:a4:b6:33:f9:2f:86:4f:8b:8a:d5:
f1:75:3c:4d:e8:09:ac:a4:55:dd:9d:62:8f:43:4b:
d9:e0:c9:d9:68:9e:b1:cd:1a:a5:6d:30:3f:af:44:
6c:bd:b7:00:ba:4a:19:f8:3a:6f:db:b1:9c:f9:4f:
50:83:2a:35:68:59:7d:c5:aa:e6:18:72:88:f2:4b:
fe:be:4e:db:4c:a0:86:d6:91:95:35:c5:3d:60:86:
da:38:96:3d:62:c2:db:99:32:be:3a:60:dd:c6:f1:
96:79:aa:8a:37:fa:49:0d:0d:46:af:4a:68:fc:a0:
e4:fc:bc:59:5c:ff:49:17:90:a4:67:c1:83:28:0a:
5b:e1:51:75:85:72:de:9c:fb:28:a7:d5:5f:bd:ed:
ce:21:67:03:0e:bc:85:14:85:02:bb:f6:16:74:a9:
50:f2:2a:c0:ef:43:be:de:0e:e5:c7:dc:84:ee:25:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:C3:AF:C4:4D:2B:D6:9C:BC:42:9B:6C:6A:98:47:AD:45:05:53
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:4f:2d:24:5f:96:d5:22:fa:27:f9:57:7b:7c:26:a4:8e:
2d:05:47:52:af:ed:b7:cd:78:04:52:b9:35:58:7a:18:f0:8e:
9f:c7:50:54:7c:c7:c2:d7:66:d9:1f:2e:62:50:5d:9e:22:1a:
82:ea:1e:eb:9a:82:12:4a:a3:b4:8b:2d:75:9e:ca:67:f1:63:
af:fa:b2:bd:15:d2:51:39:33:0f:8e:cd:9c:3b:68:07:af:bd:
ff:80:ca:20:fb:16:27:ad:e9:18:f1:34:1b:1f:c7:43:2d:1d:
75:6c:b7:f4:c6:9e:c9:39:74:6b:ef:11:19:df:73:a9:8f:90:
05:41:d2:f1:f3:ed:75:2b:5a:9c:4e:70:06:99:5a:16:ab:e5:
06:57:18:77:8b:e9:33:10:4c:3d:30:a3:19:9a:4f:60:3e:89:
9f:73:fc:c0:8a:a8:e2:c6:43:b8:24:f0:07:15:59:1b:f8:af:
72:2d:50:67:d8:4a:07:6f:77:40:f8:4f:ad:64:ba:bc:f8:48:
a9:c5:a4:3c:85:66:6f:ad:c1:7e:f8:fb:bb:46:b4:b1:55:39:
85:54:8a:60:bb:7d:d5:d0:4f:ef:bd:a9:2c:79:64:45:8a:33:
53:27:b8:ca:a4:93:59:bd:24:78:86:6d:1c:cd:40:17:cf:a6:
98:f2:d3:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXM+8C6zASwNRg8Ge10xJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzIzZWFjZDc3ZTVjYTU5NTJkZDY3YzI4ZjRmZDkwZDMy
YWZhZGYwHhcNMjUxMTExMTAwMTE2WhcNMjUxMTEyMTAwMTE2WjAzMTEwLwYDVQQD
Eyg1ZjdkYzNhZmM0NGQyYmQ2OWNiYzQyOWI2YzZhOTg0N2FkNDUwNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhEzRCyMquonxJuwfhcYuWZYjLA1
8mPxi1gADrx3LkSUjdptA5TlFA8fgkWi6EzkhLhRQ6BUGntVkwrVE6kO+58jvEin
tpHmXgnmsGBbbaS2M/kvhk+LitXxdTxN6AmspFXdnWKPQ0vZ4MnZaJ6xzRqlbTA/
r0RsvbcAukoZ+Dpv27Gc+U9Qgyo1aFl9xarmGHKI8kv+vk7bTKCG1pGVNcU9YIba
OJY9YsLbmTK+OmDdxvGWeaqKN/pJDQ1Gr0po/KDk/LxZXP9JF5CkZ8GDKApb4VF1
hXLenPsop9Vfve3OIWcDDryFFIUCu/YWdKlQ8irA70O+3g7lx9yE7iXY6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF99w6/ETSvWnLxCm2xqmEetRQVTMB8GA1UdIwQY
MBaAFBMyPqzXflyllS3WfCj0/ZDTKvrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQt
NzBiMWM2OWI0MjMyLzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQtNzBiMWM2OWI0MjMy
LzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0RPLSRf
ltUi+if5V3t8JqSOLQVHUq/tt814BFK5NVh6GPCOn8dQVHzHwtdm2R8uYlBdniIa
guoe65qCEkqjtIstdZ7KZ/Fjr/qyvRXSUTkzD47NnDtoB6+9/4DKIPsWJ63pGPE0
Gx/HQy0ddWy39MaeyTl0a+8RGd9zqY+QBUHS8fPtdStanE5wBplaFqvlBlcYd4vp
MxBMPTCjGZpPYD6Jn3P8wIqo4sZDuCTwBxVZG/ivci1QZ9hKB293QPhPrWS6vPhI
qcWkPIVmb63Bfvj7u0a0sVU5hVSKYLt91dBP772pLHlkRYozUye4yqSTWb0keIZt
HM1AF8+mmPLTuA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:08 2025 by rpki-client