Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File: EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier: F6DFAMoV054AGeSXLBoXWHwk+zjn85BiGDQkBSf6kqM=
Subject key identifier: 7F:A6:4D:39:AA:AA:96:22:78:A2:18:B6:93:DC:B2:68:49:EE:0C:72
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial: 019A4D061988ADF84D5D3C63CA186A07A6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 04:00:36 +0000
Manifest this update: Tue 04 Nov 2025 04:00:36 +0000
Manifest next update: Wed 05 Nov 2025 04:00:36 +0000
Files and hashes: 1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: jZ0tUTk9Lpw/YE2DiosG4RRhy0RNtvBUNudehPdsTPM=)
2: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (hash: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:19:88:ad:f8:4d:5d:3c:63:ca:18:6a:07:a6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
Validity
Not Before: Nov 4 04:00:36 2025 GMT
Not After : Nov 5 04:00:36 2025 GMT
Subject: CN=7fa64d39aaaa962278a218b693dcb26849ee0c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:dd:1d:86:5e:d7:a9:f6:c5:f1:a7:48:2c:
8e:6a:c6:53:78:42:3a:46:3d:2e:0e:1c:10:c6:fc:
27:e8:77:2a:99:b7:24:84:cb:52:e3:c1:5b:e0:c7:
fa:55:b7:da:70:f3:35:4f:fd:45:ec:5c:42:57:3f:
79:0c:d1:d8:94:2c:5c:31:fc:9f:b9:64:40:10:9f:
b7:94:cc:ba:36:9f:9f:83:94:b3:59:80:6f:58:d2:
d0:4e:93:bc:0f:99:9f:8e:01:c1:b1:73:a0:9b:64:
78:f0:c3:3c:98:1d:38:35:70:3b:10:03:0d:fe:45:
11:a9:f5:31:0a:26:f7:8a:03:00:72:2a:7a:fe:95:
e4:92:94:24:00:44:78:23:03:74:4c:f1:b9:4c:43:
ed:47:57:44:ea:62:b9:6f:b4:6e:78:e1:30:f4:16:
79:9b:00:e1:8e:f8:46:2a:69:35:8d:0a:d1:bc:74:
9b:2f:05:c2:86:b7:5f:a3:ea:64:39:6b:80:c2:9b:
bd:6b:d1:58:99:81:a9:3a:04:2c:73:75:7b:54:a1:
bd:80:98:29:18:7e:cc:6f:0c:4b:3d:a8:0a:28:da:
30:aa:cd:ae:e8:f9:d3:4f:97:3e:b0:8c:55:4c:b2:
a8:db:f4:71:60:6b:14:b1:4f:6f:94:a3:a0:97:79:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A6:4D:39:AA:AA:96:22:78:A2:18:B6:93:DC:B2:68:49:EE:0C:72
X509v3 Authority Key Identifier:
keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:72:90:88:16:01:9c:39:e8:ee:74:34:23:c8:14:8d:a4:97:
3c:75:c5:c0:00:6c:65:e6:c2:27:9c:1d:ef:dc:b8:ba:97:7c:
f6:cb:54:05:92:b3:42:f3:f0:53:8e:d4:d0:9f:58:81:40:2e:
01:dd:38:6c:33:84:80:f6:4d:5d:b3:ec:72:a5:bf:69:9b:2b:
1b:b3:85:ac:98:f4:4f:48:97:e7:60:64:7f:d7:27:ab:83:19:
f6:25:e1:0f:10:10:b6:d2:22:2c:df:38:1e:b2:38:19:41:39:
98:08:cc:fd:47:aa:db:e3:9f:e7:7b:a6:f8:88:72:e6:c2:ec:
6d:88:fc:49:b0:85:56:d0:32:5c:97:e5:84:45:32:1a:44:86:
a1:87:ec:de:73:34:73:66:9b:f0:a4:ac:47:53:e3:96:36:5f:
61:96:88:c1:a5:0e:f9:0d:c4:7d:e6:ef:e2:93:22:d5:46:7d:
18:6b:76:bf:b6:90:9e:ff:bc:9c:d9:a6:38:cc:24:b4:e9:87:
e8:a1:55:12:3b:7d:61:a7:9e:11:fd:65:b7:f9:db:46:55:7b:
52:ba:50:67:e8:2e:09:27:49:58:98:0a:ca:d3:07:f0:e3:57:
67:46:50:c5:fb:40:34:26:59:8d:8c:ef:7c:b6:1e:09:03:59:
51:fc:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:36 2025 by rpki-client