Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
File: EzGVE_0LkEFwYKIYt21iuOP7zFE.mft (raw, json)
Hash identifier: TaCKWIzyPx4r7ilrVage9oHtXUzPR08mUSwhjPQzZMA=
Subject key identifier: E6:41:F7:11:BC:BD:C2:58:EF:47:AF:23:CA:33:68:82:64:3F:E0:14
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Certificate issuer: /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial: 019A4FCFBE85203A0FE2BED3A3BEBFB0A6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:05 +0000
Manifest this update: Tue 04 Nov 2025 17:00:05 +0000
Manifest next update: Wed 05 Nov 2025 17:00:05 +0000
Files and hashes: 1: EzGVE_0LkEFwYKIYt21iuOP7zFE.crl (hash: y8HGh1B1OZkV/hmbHQqwVxeA4DyV9+RpQPpShV1QVqM=)
2: yp0LdC7U734nh5SQEMIi7N8uoHI.roa (hash: yywu4U5iIGMPvffSUFMCkRN3B5n6pNurBpQSvtgjfYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:be:85:20:3a:0f:e2:be:d3:a3:be:bf:b0:a6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Validity
Not Before: Nov 4 17:00:05 2025 GMT
Not After : Nov 5 17:00:05 2025 GMT
Subject: CN=e641f711bcbdc258ef47af23ca336882643fe014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:37:16:e1:06:88:50:c9:6d:c3:cc:98:2a:
ed:33:f1:a6:3e:90:0c:55:fb:0e:70:da:e5:14:3e:
7d:34:ab:15:b2:c7:f7:45:70:37:d5:10:7f:9a:f0:
37:55:8e:96:b4:3e:79:6d:85:30:56:02:8b:3d:c7:
94:6f:8e:5d:9f:f4:08:d9:0d:a0:a7:0c:1c:f2:8f:
09:72:ac:1c:d0:33:be:42:08:8c:44:83:da:b9:2b:
1e:02:9b:27:15:02:f6:dc:84:69:5a:b5:c8:89:61:
79:42:ed:b7:b1:a3:06:a0:61:54:53:7e:1f:64:f2:
3e:df:21:35:93:88:1e:e7:8a:34:56:52:91:e2:6e:
03:a5:7c:09:dc:62:2a:13:79:62:61:1e:37:fa:c8:
69:29:c7:02:29:93:2c:38:68:98:e3:23:61:bc:b5:
e1:dc:65:b1:7b:1c:07:da:e3:6d:fc:50:1a:18:f2:
98:80:b9:d2:fa:6f:eb:b0:ad:75:3d:d9:2f:52:5d:
fe:0a:cb:8d:1a:65:69:2e:4e:dd:c2:0f:9f:31:81:
77:df:29:8d:76:0b:c2:c6:3d:fd:3f:47:00:b6:1d:
a8:f0:d4:87:bf:94:53:6a:03:e4:61:e1:04:ec:f4:
2a:2f:b1:05:8b:48:78:ec:1a:be:63:08:11:76:09:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:41:F7:11:BC:BD:C2:58:EF:47:AF:23:CA:33:68:82:64:3F:E0:14
X509v3 Authority Key Identifier:
keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:02:5d:42:7e:3a:71:18:15:d5:21:20:70:e0:1b:ea:4f:0a:
bf:f6:1e:13:2f:7d:b2:84:e3:ea:e9:9d:f7:f3:13:fa:ae:ad:
d9:23:7f:30:3f:4e:3b:f0:d7:d3:ee:77:69:76:a4:51:19:d2:
0d:dd:27:7b:91:3e:e3:e3:a2:f6:cb:1a:8a:83:80:94:8a:aa:
be:bf:31:9e:28:9e:82:9a:9f:67:45:9c:78:77:80:cc:a6:9a:
c4:e5:6d:86:25:bc:ab:f6:cf:37:ca:97:d8:4f:1b:dd:6f:93:
8b:67:32:8c:f9:ba:9e:cb:bf:18:86:15:73:15:3e:6c:29:e7:
1e:e7:e5:db:9b:05:49:e8:69:2f:29:5a:4f:32:f1:06:03:dc:
64:e2:e9:67:42:e2:4f:da:00:93:52:f8:59:88:87:dc:1f:95:
cc:4b:60:24:12:7d:dd:f6:e1:cd:2d:e4:c4:2d:f7:bc:b8:93:
61:04:65:fc:70:b4:f4:81:95:47:2d:45:18:1e:ec:2c:e6:ba:
28:af:67:09:2b:5b:b4:8b:d2:46:be:03:2b:ca:3c:20:cb:d6:
da:20:0e:50:6b:af:7c:48:37:31:c2:35:ef:22:f9:2a:d5:a3:
9c:7c:71:22:2e:29:a3:1d:84:c5:3e:e6:73:d8:83:c9:c6:87:
f1:ad:7e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz76FIDoP4r7To76/sKalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzE5NTEzZmQwYjkwNDE3MDYwYTIxOGI3NmQ2MmI4ZTNm
YmNjNTEwHhcNMjUxMTA0MTcwMDA1WhcNMjUxMTA1MTcwMDA1WjAzMTEwLwYDVQQD
EyhlNjQxZjcxMWJjYmRjMjU4ZWY0N2FmMjNjYTMzNjg4MjY0M2ZlMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/s3FuEGiFDJbcPMmCrtM/GmPpAM
VfsOcNrlFD59NKsVssf3RXA31RB/mvA3VY6WtD55bYUwVgKLPceUb45dn/QI2Q2g
pwwc8o8Jcqwc0DO+QgiMRIPauSseApsnFQL23IRpWrXIiWF5Qu23saMGoGFUU34f
ZPI+3yE1k4ge54o0VlKR4m4DpXwJ3GIqE3liYR43+shpKccCKZMsOGiY4yNhvLXh
3GWxexwH2uNt/FAaGPKYgLnS+m/rsK11PdkvUl3+CsuNGmVpLk7dwg+fMYF33ymN
dgvCxj39P0cAth2o8NSHv5RTagPkYeEE7PQqL7EFi0h47Bq+YwgRdgkZTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZB9xG8vcJY70evI8ozaIJkP+AUMB8GA1UdIwQY
MBaAFBMxlRP9C5BBcGCiGLdtYrjj+8xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MzdiMGMtMThhOS00YWIzLTgzNTAt
NDgxNzBiZTExMzMyLzEvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84MzdiMGMtMThhOS00YWIzLTgzNTAtNDgxNzBiZTExMzMy
LzEvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwJdQn46
cRgV1SEgcOAb6k8Kv/YeEy99soTj6umd9/MT+q6t2SN/MD9OO/DX0+53aXakURnS
Dd0ne5E+4+Oi9ssaioOAlIqqvr8xniiegpqfZ0WceHeAzKaaxOVthiW8q/bPN8qX
2E8b3W+Ti2cyjPm6nsu/GIYVcxU+bCnnHufl25sFSehpLylaTzLxBgPcZOLpZ0Li
T9oAk1L4WYiH3B+VzEtgJBJ93fbhzS3kxC33vLiTYQRl/HC09IGVRy1FGB7sLOa6
KK9nCStbtIvSRr4DK8o8IMvW2iAOUGuvfEg3McI17yL5KtWjnHxxIi4pox2ExT7m
c9iDycaH8a1+hg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:48 2025 by rpki-client