Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: nu5NPfuIfkBuC2gPRy89bUOKoY0C4YjUWYieepbktXc=
Subject key identifier: 8D:72:9B:35:42:0E:82:1A:83:91:42:9E:6D:69:01:E6:B1:15:54:3B
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 019923D64709495E06BEC98DBFDB33333EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 1171
Signing time: Sun 07 Sep 2025 11:01:09 +0000
Manifest this update: Sun 07 Sep 2025 11:01:09 +0000
Manifest next update: Mon 08 Sep 2025 11:01:09 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: pDcEB2TI6SHx1Vj2WFOQNMJIVaPU2v6MZeIPZB16qMM=)
2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:47:09:49:5e:06:be:c9:8d:bf:db:33:33:3e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Sep 7 11:01:09 2025 GMT
Not After : Sep 8 11:01:09 2025 GMT
Subject: CN=8d729b35420e821a8391429e6d6901e6b115543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:be:49:ef:12:f2:ac:5c:03:79:4c:63:27:
1e:60:4e:0e:90:85:65:b7:c9:52:8a:a7:af:f2:e7:
44:40:6f:40:01:d0:7c:5c:a1:9d:c2:8e:51:59:cd:
bd:48:e4:be:a5:96:3e:79:0b:a2:c4:1a:56:b5:42:
ae:e6:89:f5:f7:12:4f:94:b7:cf:58:76:eb:7c:3b:
9f:aa:50:aa:15:15:e5:44:a3:58:cc:cb:ef:7e:8e:
2e:6d:0d:bb:fe:1a:d6:6d:cb:9b:3f:8f:d9:e3:88:
bd:7a:28:53:8f:f3:01:a3:9f:cb:5c:ba:68:1a:5a:
ee:28:5c:43:df:7b:cf:a8:7d:42:a2:7f:a5:7e:62:
e9:fb:e8:01:56:79:76:e4:aa:e7:97:dc:00:46:7e:
ef:d7:56:b9:d5:d3:14:50:7e:6d:82:5f:c0:e1:03:
bf:12:db:bb:b8:7c:93:b9:ba:da:a7:3c:f2:09:7f:
21:19:e1:8b:b0:bb:f4:a3:b7:9f:48:f5:29:35:b8:
2b:8c:21:6b:8a:8a:13:b4:68:40:73:af:d0:1c:91:
a8:a9:52:a4:8d:0e:53:05:51:99:3f:75:ce:3d:62:
d6:c4:c5:80:ee:04:51:d8:8c:05:30:e6:0e:fb:cb:
f9:48:00:ea:ae:4a:9f:cf:6b:ba:17:99:2b:ca:12:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:9B:35:42:0E:82:1A:83:91:42:9E:6D:69:01:E6:B1:15:54:3B
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:95:b1:a4:ed:cb:55:35:f5:76:34:10:29:71:e1:f9:f4:83:
ff:28:dd:3c:7b:22:95:86:a8:3e:3e:ce:57:92:98:6b:6e:15:
18:ca:36:54:95:5a:e3:d5:d7:83:5e:9c:28:c8:0d:c4:be:05:
43:26:55:77:42:e9:a2:e9:55:9a:a5:f6:50:8d:bb:c7:ed:a2:
61:40:95:9d:e5:86:28:0b:07:9c:bb:97:42:2e:81:2f:fb:ed:
c0:16:b2:dc:80:73:84:35:f8:6f:49:d4:28:1e:86:41:93:a0:
38:9d:8e:4e:fa:97:46:2b:ec:7f:30:d0:69:0c:06:05:15:fd:
c5:91:36:99:98:dc:52:d7:9d:9b:09:9c:5a:ab:c4:d7:eb:e0:
74:89:b3:ee:20:2c:f4:2b:52:70:02:89:36:3d:26:19:78:2b:
f7:11:15:a4:91:b5:44:99:7a:a8:ff:d5:31:27:e7:e2:1e:3a:
cb:84:73:f8:d1:a7:31:3e:9b:0d:10:c9:64:3e:09:ee:86:e5:
e3:15:c7:76:bf:f0:60:65:01:5c:50:fc:b2:2d:e5:4a:c1:38:
be:60:ed:63:1b:c3:77:97:60:b6:95:1f:04:36:a5:c1:1b:94:
05:18:08:a0:62:d9:96:9e:a5:13:50:6d:30:d7:44:35:c1:f2:
aa:7d:78:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1kcJSV4GvsmNv9szMz7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYTU5ODVjYmEzMmE4NzdkMzIxNWJiYzIyOGNiMDdkMDQw
MDkxN2IwHhcNMjUwOTA3MTEwMTA5WhcNMjUwOTA4MTEwMTA5WjAzMTEwLwYDVQQD
Eyg4ZDcyOWIzNTQyMGU4MjFhODM5MTQyOWU2ZDY5MDFlNmIxMTU1NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK6+Se8S8qxcA3lMYyceYE4OkIVl
t8lSiqev8udEQG9AAdB8XKGdwo5RWc29SOS+pZY+eQuixBpWtUKu5on19xJPlLfP
WHbrfDufqlCqFRXlRKNYzMvvfo4ubQ27/hrWbcubP4/Z44i9eihTj/MBo5/LXLpo
GlruKFxD33vPqH1Con+lfmLp++gBVnl25Krnl9wARn7v11a51dMUUH5tgl/A4QO/
Etu7uHyTubrapzzyCX8hGeGLsLv0o7efSPUpNbgrjCFriooTtGhAc6/QHJGoqVKk
jQ5TBVGZP3XOPWLWxMWA7gRR2IwFMOYO+8v5SADqrkqfz2u6F5kryhKO0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1ymzVCDoIag5FCnm1pAeaxFVQ7MB8GA1UdIwQY
MBaAFBClmFy6Mqh30yFbvCKMsH0EAJF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEt
ZDcwZjI4NTE1ZmJkLzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEtZDcwZjI4NTE1ZmJk
LzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5WxpO3L
VTX1djQQKXHh+fSD/yjdPHsilYaoPj7OV5KYa24VGMo2VJVa49XXg16cKMgNxL4F
QyZVd0LpoulVmqX2UI27x+2iYUCVneWGKAsHnLuXQi6BL/vtwBay3IBzhDX4b0nU
KB6GQZOgOJ2OTvqXRivsfzDQaQwGBRX9xZE2mZjcUtedmwmcWqvE1+vgdImz7iAs
9CtScAKJNj0mGXgr9xEVpJG1RJl6qP/VMSfn4h46y4Rz+NGnMT6bDRDJZD4J7obl
4xXHdr/wYGUBXFD8si3lSsE4vmDtYxvDd5dgtpUfBDalwRuUBRgIoGLZlp6lE1Bt
MNdENcHyqn14HA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:00 2025 by rpki-client