Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: +WXv8Jc6HAGEC2j4+BWOq0CEZOolvxM3TajX1372RGE=
Subject key identifier: 8A:99:8B:20:13:34:7C:61:82:04:AE:11:10:C4:95:D7:54:88:1F:6F
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019923D5AA6DFA54F9639D4166BD5A0FECFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 1520
Signing time: Sun 07 Sep 2025 11:00:29 +0000
Manifest this update: Sun 07 Sep 2025 11:00:29 +0000
Manifest next update: Mon 08 Sep 2025 11:00:29 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: ivQlouWm2froZnfIJ5CPALmhKNdjUlRUYXS/vGJV5qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:aa:6d:fa:54:f9:63:9d:41:66:bd:5a:0f:ec:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Sep 7 11:00:29 2025 GMT
Not After : Sep 8 11:00:29 2025 GMT
Subject: CN=8a998b2013347c618204ae1110c495d754881f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:fd:66:f1:f8:f0:4e:82:c0:af:1b:13:5e:
fc:f8:f1:14:6b:c8:38:7a:5f:7a:87:d8:0c:5e:c9:
40:42:d9:a6:31:47:ce:87:dc:63:3b:1c:b2:dd:8d:
00:bc:f8:07:48:43:cc:44:c1:37:6a:28:6d:7d:6d:
f1:d1:1c:ca:82:1c:36:53:db:69:40:78:48:01:23:
66:7b:c5:f5:75:d8:28:ae:da:c1:d6:58:7b:b1:ac:
c1:c6:a3:94:d4:e2:81:fd:00:b3:e6:e9:e4:8c:24:
c1:29:6a:7e:74:51:b1:e6:8c:47:55:dc:4f:d4:33:
be:40:38:ae:b9:16:ff:d8:c1:4e:0b:e7:9e:85:22:
51:27:32:f4:5a:d7:0d:fd:99:0e:a2:14:ad:d1:a6:
84:5b:49:5e:d5:7c:4e:90:f0:ee:1f:4b:50:ac:41:
dc:53:49:cd:32:d0:fd:53:b9:46:1c:d9:39:48:a7:
f1:e8:1f:2f:de:08:6a:3c:f5:5e:ec:b3:72:7f:1e:
af:8b:57:66:e0:b0:22:29:d7:ca:d5:61:b4:fd:83:
82:c3:f2:3f:c8:c4:91:b6:1e:31:6b:34:51:4c:df:
89:9c:b4:b3:64:6e:be:ba:62:da:d5:e4:c4:5a:79:
d3:a7:28:ad:6a:26:58:d0:77:fa:e2:43:7a:e7:75:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:8B:20:13:34:7C:61:82:04:AE:11:10:C4:95:D7:54:88:1F:6F
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8a:fa:51:24:54:13:91:f9:9f:34:20:e8:10:a8:52:d9:d0:
d0:7e:8b:33:a4:1a:b2:ca:c2:17:40:6a:16:0f:c1:16:e6:8e:
e8:a9:24:d2:8f:13:1b:e7:1d:c3:d2:d0:7f:b3:5b:bc:5f:9a:
e1:9a:b8:64:13:1a:a1:f9:f7:2b:61:79:9a:39:ce:79:01:08:
e9:3c:07:b9:30:d3:d0:0d:d3:bc:be:32:2b:1e:0b:77:6e:4b:
c8:a6:37:c5:b9:83:1b:f9:f5:19:1e:10:ca:2a:c7:7e:2a:59:
7a:ae:17:0e:79:d0:b2:90:8c:68:00:99:e0:7f:dd:92:e8:7c:
5a:8a:0e:01:2e:0b:1f:74:eb:15:63:97:56:cf:72:1a:18:25:
3f:9f:14:dd:0c:78:ed:30:19:cf:d5:0c:c1:ad:bc:99:8f:bf:
83:76:16:9a:f8:00:a2:0b:7e:11:16:cd:56:43:17:85:5a:43:
24:36:3d:fc:ad:d5:ca:ba:93:79:53:ae:b2:ac:a1:ed:f1:97:
63:12:32:6e:04:f9:d7:fa:c6:f2:f0:0e:c4:b8:08:ff:60:bb:
17:72:f1:74:1f:74:e0:4a:5e:55:41:e6:84:60:15:1d:43:56:
78:25:c7:01:8b:8a:93:f0:7d:de:f3:a2:2c:cc:56:ad:3d:1b:
50:a2:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:18:00 2025 by rpki-client