Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: DnVFGBc4vpllPwuKZR6FdmA+UByn7bl1bmA+jygX1zo=
Subject key identifier: D4:91:E1:2B:6E:48:B5:BE:60:DA:C5:07:8B:57:C7:C9:BA:EC:94:F8
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019A52D2767DDBC4D3E439B5F860515027A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0DED
Signing time: Wed 05 Nov 2025 07:01:55 +0000
Manifest this update: Wed 05 Nov 2025 07:01:55 +0000
Manifest next update: Thu 06 Nov 2025 07:01:55 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: 8TtvvCWgV6hhf9guttap8t/gFhfU3rE3+o6e4zbniVE=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:76:7d:db:c4:d3:e4:39:b5:f8:60:51:50:27:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Nov 5 07:01:55 2025 GMT
Not After : Nov 6 07:01:55 2025 GMT
Subject: CN=d491e12b6e48b5be60dac5078b57c7c9baec94f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:db:71:f7:eb:1b:f3:73:56:43:bf:34:11:
5b:72:f3:06:a2:a8:37:ad:46:2b:14:77:44:37:91:
9b:05:a6:a9:79:1a:de:11:f5:ff:ad:95:de:13:22:
a4:fe:d3:31:72:5e:86:d1:5d:a5:36:b4:bb:a2:25:
18:6b:91:8a:6d:45:fd:51:65:2b:98:7d:8c:a5:6e:
ff:70:2b:1c:2b:31:19:1f:a7:7f:2c:c4:e6:87:35:
94:e7:c5:a0:f0:0f:f7:41:2c:c6:88:1c:8a:39:7f:
84:4d:43:14:18:71:62:6e:21:b3:df:83:8e:72:1f:
20:72:e7:3f:9d:7b:d5:70:2e:76:df:f3:7f:91:a9:
dc:a2:f3:9b:0c:ec:98:00:d6:bc:22:68:85:b8:1a:
03:d2:40:c1:72:9d:33:cd:04:b4:c7:77:b3:da:b4:
e6:a8:56:77:6a:ed:ea:35:8d:58:37:b5:cb:1c:05:
e3:4d:79:19:31:2f:2e:c6:75:e3:e5:9b:e1:65:8d:
58:c2:e8:8d:f5:2c:e4:cc:10:94:f6:b4:2b:1d:3b:
5e:5a:c4:1e:0f:d9:5a:be:3e:24:9b:d1:6b:1d:e3:
08:69:39:a6:d8:b7:21:25:7b:ad:2a:b0:e5:25:ed:
e2:55:82:3e:b0:26:b7:51:08:28:da:0f:db:ea:f8:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:91:E1:2B:6E:48:B5:BE:60:DA:C5:07:8B:57:C7:C9:BA:EC:94:F8
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:52:e3:69:9d:19:d3:99:56:4a:33:7d:81:f7:ba:3e:bd:20:
fa:f7:c3:9a:8b:94:05:ac:bb:c3:e5:d9:81:26:77:11:be:2a:
39:b2:bd:3f:84:4c:69:1e:47:22:1b:4c:94:95:1e:7a:fd:58:
d3:3e:dc:e9:bd:82:0d:c4:da:8d:c1:22:9d:2c:bc:8c:68:7e:
5a:ff:97:15:a5:9f:76:e5:03:9f:b0:11:b5:f2:5a:93:84:da:
85:d1:6e:27:ca:d7:16:73:78:fb:bd:0b:63:fa:ab:3e:22:92:
6f:5e:d2:fa:da:2f:95:ea:83:68:86:d3:df:97:c5:c5:c7:38:
d6:1f:1e:9d:e0:45:93:7c:ee:80:85:e4:b7:df:57:1a:30:2c:
d3:88:38:e0:55:51:20:24:54:ef:ec:56:92:00:48:aa:cd:a6:
03:f6:5c:0e:5d:6e:7e:1e:fe:72:51:fe:9d:1e:16:8f:87:18:
80:3a:47:b8:5d:cf:5b:fe:77:83:6b:ef:3b:24:ab:97:e8:92:
59:90:cc:31:74:73:f2:7f:a6:73:6c:95:e3:75:4c:8c:51:43:
55:5f:59:d2:0e:05:a5:ad:ba:59:42:57:e1:81:42:90:ba:d2:
0b:c4:da:2e:94:b4:76:9b:15:f8:ca:a2:7c:8c:e4:38:20:cd:
82:d3:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:50 2025 by rpki-client