Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
File: EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json)
Hash identifier: bjmxa4OJLgLXzFnxkBrm+p9YOlxwp9xJ4SqcfjDdDl8=
Subject key identifier: 15:10:CC:A9:B4:C4:B0:36:09:76:4E:1A:D9:51:02:4A:17:D8:FE:80
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Certificate issuer: /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial: 019A71EEEA57DB5D78903E3EE8799D9FCFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: 6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa (hash: qKcKkoUboZrcqtoprL7lO+GfuPllhw7eINNwNRAw7pk=)
2: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: FrMX81iqUsGr4eRDfedV5YJq2c8zcocuU4vA27Jj7lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ea:57:db:5d:78:90:3e:3e:e8:79:9d:9f:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=1510cca9b4c4b03609764e1ad951024a17d8fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:bf:f0:de:9e:5d:03:4e:05:9f:47:d7:26:
4e:41:aa:d2:65:79:7a:1d:b7:2a:55:31:db:2c:f4:
70:c7:4d:53:78:54:75:78:a6:24:55:24:4e:fd:13:
84:93:85:d5:c0:a7:8c:49:5c:fe:07:70:6e:a5:2a:
30:3d:d4:b5:8b:7e:58:26:5a:f3:fe:c6:cb:31:47:
79:90:c5:bd:a6:1d:1b:5d:c5:5e:29:25:47:d8:e2:
02:7a:22:06:0d:70:01:bf:5d:9a:42:2c:37:18:06:
c9:d3:63:59:9f:30:55:74:8f:1f:eb:bc:78:9b:01:
ec:d9:ea:d2:f0:53:9f:ee:8a:89:4c:a1:2d:06:35:
19:3d:32:12:5e:06:e8:0c:5a:b7:ea:11:2d:7c:a5:
6f:dd:fd:79:57:30:ac:2a:96:e5:1a:02:31:03:f6:
5f:72:21:84:f9:b0:e3:bc:7b:5b:1a:6a:df:2f:0c:
7e:7b:60:4e:fc:78:40:43:d1:e6:13:b0:f8:f1:76:
e1:42:e3:54:94:2e:24:8e:b5:8b:39:0b:09:1a:b7:
74:a8:59:2a:4a:cc:e7:51:f5:7f:89:62:6d:e7:0d:
72:b4:4c:c3:57:2b:a6:1d:59:93:c8:e7:fb:5d:8f:
5e:bf:67:03:f1:96:62:bc:53:f5:08:38:29:78:50:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:CC:A9:B4:C4:B0:36:09:76:4E:1A:D9:51:02:4A:17:D8:FE:80
X509v3 Authority Key Identifier:
keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:df:a1:c9:dc:3e:0d:84:0c:dc:5d:1b:f9:76:8b:56:5c:fd:
6b:f0:32:1a:95:f2:9f:a8:82:6c:ad:70:39:82:35:ac:74:34:
7d:e5:2b:9e:f6:d8:a5:fe:a2:28:83:c9:d0:a3:67:e4:69:e8:
8b:5c:b0:85:57:fd:4e:13:29:93:f9:8a:15:18:da:9c:79:56:
7e:36:dc:d5:a5:b7:bc:b5:f1:1f:61:55:1b:87:ff:0b:4e:a8:
98:44:19:2f:7a:2b:71:1e:d3:b9:2d:74:52:db:cf:d3:40:0c:
10:85:87:df:4c:b9:74:44:51:33:6d:5f:c8:fb:24:66:9e:d9:
d4:eb:de:7f:ff:28:20:de:cb:11:7a:9a:ad:30:f8:5f:37:4c:
43:33:b8:6a:50:89:86:a5:6b:94:13:0b:5f:07:cd:6a:6c:11:
98:92:1b:9b:b2:2b:d0:dc:cb:fc:16:2a:54:7d:2e:04:42:fd:
6e:e8:e1:a9:6b:f7:e3:f3:8d:96:1a:f5:ed:f4:65:e7:ec:45:
bc:58:48:37:b4:0f:f2:36:2e:c7:10:c8:79:1a:4b:d7:38:51:
2e:f8:92:94:62:6b:83:11:84:ac:c4:98:84:11:1d:93:7f:56:
74:29:15:75:c3:37:6d:3b:d8:f5:b7:29:8e:59:be:7f:d3:16:
cb:85:58:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7upX2114kD4+6Hmdn8/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGFhZjkwMTZhNjg3NTJmYzkxMzIxNDliOTFlOGZhYjE2
ZTI0YmUwHhcNMjUxMTExMDgwMTE0WhcNMjUxMTEyMDgwMTE0WjAzMTEwLwYDVQQD
EygxNTEwY2NhOWI0YzRiMDM2MDk3NjRlMWFkOTUxMDI0YTE3ZDhmZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp+/8N6eXQNOBZ9H1yZOQarSZXl6
HbcqVTHbLPRwx01TeFR1eKYkVSRO/ROEk4XVwKeMSVz+B3BupSowPdS1i35YJlrz
/sbLMUd5kMW9ph0bXcVeKSVH2OICeiIGDXABv12aQiw3GAbJ02NZnzBVdI8f67x4
mwHs2erS8FOf7oqJTKEtBjUZPTISXgboDFq36hEtfKVv3f15VzCsKpblGgIxA/Zf
ciGE+bDjvHtbGmrfLwx+e2BO/HhAQ9HmE7D48XbhQuNUlC4kjrWLOQsJGrd0qFkq
SsznUfV/iWJt5w1ytEzDVyumHVmTyOf7XY9ev2cD8ZZivFP1CDgpeFCphQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUQzKm0xLA2CXZOGtlRAkoX2P6AMB8GA1UdIwQY
MBaAFBEKr5AWpodS/JEyFJuR6PqxbiS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVFxdmtCYW1oMUw4a1RJVW01SG8tckZ1Skw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lNDExZTgtMGRjNi00NmUyLWIzYTct
ZDBkZWJjZmZmZDc2LzEvRVFxdmtCYW1oMUw4a1RJVW01SG8tckZ1Skw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lNDExZTgtMGRjNi00NmUyLWIzYTctZDBkZWJjZmZmZDc2
LzEvRVFxdmtCYW1oMUw4a1RJVW01SG8tckZ1Skw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWt+hydw+
DYQM3F0b+XaLVlz9a/AyGpXyn6iCbK1wOYI1rHQ0feUrnvbYpf6iKIPJ0KNn5Gno
i1ywhVf9ThMpk/mKFRjanHlWfjbc1aW3vLXxH2FVG4f/C06omEQZL3orcR7TuS10
UtvP00AMEIWH30y5dERRM21fyPskZp7Z1Ovef/8oIN7LEXqarTD4XzdMQzO4alCJ
hqVrlBMLXwfNamwRmJIbm7Ir0NzL/BYqVH0uBEL9bujhqWv34/ONlhr17fRl5+xF
vFhIN7QP8jYuxxDIeRpL1zhRLviSlGJrgxGErMSYhBEdk39WdCkVdcM3bTvY9bcp
jlm+f9MWy4VYig==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:29 2025 by rpki-client