Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: YUBtq9QkNgGDyAmZL66ArY/hTr2leiDoEvbZGc6saEc=
Subject key identifier: BA:DF:41:7B:39:58:33:84:47:39:63:3B:9D:9C:A9:79:11:4D:78:FF
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 019A73DD1962E2BDC2C9777108CA692EBA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 121F
Signing time: Tue 11 Nov 2025 17:01:01 +0000
Manifest this update: Tue 11 Nov 2025 17:01:01 +0000
Manifest next update: Wed 12 Nov 2025 17:01:01 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: 9Q3zkFYY4fblFM7ihhQwiLH2H/1rvElVKbQeUxYg/xU=)
2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 16:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:dd:19:62:e2:bd:c2:c9:77:71:08:ca:69:2e:ba:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Nov 11 17:01:01 2025 GMT
Not After : Nov 12 17:01:01 2025 GMT
Subject: CN=badf417b395833844739633b9d9ca979114d78ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:1b:90:17:1f:91:58:ad:67:d2:a5:29:9e:
32:49:5b:51:ad:25:da:df:77:f7:10:ba:b5:4a:d8:
c2:7e:d9:bf:b6:da:c7:4f:e5:aa:17:9d:69:63:f0:
02:6b:43:54:a6:ce:ed:1a:84:52:30:82:22:3d:e7:
e0:0d:d2:49:ab:c1:49:5d:a5:d0:a4:1f:b1:e7:e7:
77:3c:65:26:0c:c8:cb:13:74:44:1e:71:3d:d0:a7:
a6:fe:aa:ea:0c:65:b8:1e:81:fa:79:a1:99:98:9a:
bd:ce:f9:bc:29:aa:9a:1b:86:43:a7:a9:35:8b:5d:
25:d4:55:5d:38:31:9a:bd:50:6b:a3:11:89:19:27:
5a:30:ef:dc:80:83:17:05:08:93:6c:5d:c4:30:b2:
a2:2a:a0:e2:e0:46:d4:86:87:78:41:87:f1:8e:a8:
e4:d6:24:a0:20:f6:dc:06:f0:29:56:66:8e:c3:22:
9f:b7:08:8a:ce:1c:47:75:10:78:1a:20:c3:bf:60:
cf:59:5c:79:e8:fb:07:c8:69:86:bf:6d:9a:ba:db:
3e:0f:82:41:4d:dc:d9:f4:05:6f:2e:61:59:c9:1b:
3a:83:43:59:f4:f1:82:6c:40:b3:e1:f3:7e:5f:bf:
78:73:fe:4d:91:18:7d:36:54:28:b0:78:c3:51:11:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DF:41:7B:39:58:33:84:47:39:63:3B:9D:9C:A9:79:11:4D:78:FF
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:28:72:e1:50:49:30:10:13:21:48:16:d4:e3:f5:74:34:67:
c3:45:d5:57:8d:d2:ac:3f:fd:2e:33:14:90:67:6b:41:ac:97:
ff:af:28:5a:40:39:53:a7:92:3b:ee:d1:95:c2:24:1f:a5:51:
8b:d9:46:ea:be:1c:3f:52:75:1d:51:c8:a3:c9:23:95:15:80:
fb:87:c8:9f:f9:6b:59:c9:4f:c4:10:54:4c:dd:ce:18:0a:f2:
db:bc:56:c7:3c:2b:e7:a3:61:35:be:38:3f:8c:5a:86:6a:68:
1c:42:d3:20:20:a6:4b:f8:9d:dd:80:78:8b:85:76:bc:d8:03:
aa:28:6b:f9:42:0c:9d:35:49:f9:c1:9b:ea:31:8b:97:9a:b1:
27:bf:4d:bd:64:06:b6:64:ab:16:3c:56:44:3f:f4:a3:e8:a7:
0b:72:d0:9d:d0:e3:04:0c:19:6f:a3:10:16:3e:81:29:11:60:
99:fe:7c:f1:c1:11:5b:3f:30:13:16:c4:9e:a6:42:9e:82:90:
ab:c1:d2:d9:bd:28:ae:ff:90:82:94:4e:88:38:7d:f7:e8:ab:
a0:cd:64:98:a1:4c:8b:44:a0:01:14:e3:a1:9a:35:67:e8:9d:
b3:b1:9d:6e:83:b8:2a:66:c3:41:ee:06:a9:55:de:d1:93:29:
3b:b9:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:08 2025 by rpki-client