
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: m9gpuW3GZFnrEnukWzM+arSSdtWE8c+/VlXQBDiGhyo=
Subject key identifier: B6:35:23:9E:66:40:9F:93:EB:3C:56:3F:EB:1D:5E:8B:6E:F9:21:4C
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 01988B0FF189702361B924EAA6711F0A0348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 132E
Signing time: Fri 08 Aug 2025 19:02:14 +0000
Manifest this update: Fri 08 Aug 2025 19:02:14 +0000
Manifest next update: Sat 09 Aug 2025 19:02:14 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: 1p1j1xwgusKlPLNx6AdUtW7LVw+nmQ2SDOlEKcp4aTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:f1:89:70:23:61:b9:24:ea:a6:71:1f:0a:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Aug 8 19:02:14 2025 GMT
Not After : Aug 9 19:02:14 2025 GMT
Subject: CN=b635239e66409f93eb3c563feb1d5e8b6ef9214c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:65:ca:ca:ac:ec:8e:90:78:c2:5e:f6:08:
15:20:cd:fc:3b:90:55:4e:c9:e7:cb:f8:b5:42:29:
26:92:26:48:63:95:48:26:fc:97:7c:94:a3:63:15:
9b:eb:1b:19:db:04:66:0f:9d:3c:a4:c8:db:00:a5:
45:b5:f2:8a:11:c0:3d:d2:2f:7b:bc:b1:8e:11:e8:
82:86:08:f1:35:52:46:9c:59:48:73:f0:de:ca:f9:
9d:f0:68:2e:96:88:54:3a:b7:21:94:2c:af:5f:12:
e7:8c:92:75:45:b4:d8:d6:ff:ca:d0:27:ee:81:ae:
8b:65:e0:22:a2:f2:3f:2d:b2:e3:da:3c:28:29:f7:
36:35:5d:f0:57:ab:fd:ab:b8:85:d4:2d:7d:33:6d:
aa:0c:59:f4:7a:b7:f8:7a:18:fe:bc:24:8b:af:25:
fc:cf:36:22:1e:37:92:b7:e0:2c:12:b8:85:31:23:
33:b2:2f:d9:7d:e9:11:f3:46:cb:ce:05:2f:e3:e8:
b0:69:87:63:4a:c1:d2:26:b7:e0:56:c7:af:e7:16:
a3:10:e8:95:fb:5a:1d:cc:8f:03:39:d8:92:b0:c7:
bf:bd:24:24:ce:31:6d:e9:17:a8:0d:fb:e9:75:b2:
dc:2a:a1:cb:8d:72:06:09:f4:c4:01:c6:bd:69:29:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:23:9E:66:40:9F:93:EB:3C:56:3F:EB:1D:5E:8B:6E:F9:21:4C
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:86:1d:56:86:a3:1a:f7:94:b6:05:42:93:5e:1a:bd:90:51:
64:19:eb:31:22:ee:c0:d7:69:46:5c:52:14:cf:aa:ed:c3:a2:
79:bb:26:c0:ba:b0:c2:d0:f3:95:20:09:1a:af:a5:be:b3:fb:
86:be:df:be:2c:dd:0e:b1:75:d7:bf:57:9b:53:37:5d:67:00:
a1:01:83:93:65:32:b2:35:09:3b:60:c6:58:cf:7e:15:9d:e6:
46:5f:8b:a0:4c:7b:99:79:4f:62:be:33:72:91:bc:77:b3:8f:
ca:08:ea:e0:87:ed:1b:5e:c3:96:87:c9:b2:0e:c7:2c:a0:ab:
ec:6f:74:bd:63:ec:92:7e:09:4e:8d:47:7c:93:da:8b:7a:bb:
2c:ce:5f:23:0a:86:fb:eb:1b:c0:14:73:25:39:56:a7:93:49:
e9:ed:ef:e3:73:b0:5c:bc:0e:32:81:a3:bf:e6:ac:be:de:80:
d8:ef:a7:d9:d1:5a:4a:49:46:16:44:f9:8c:cb:87:c5:5d:b4:
f9:a9:cb:3d:83:14:ab:02:da:4a:6f:8c:a6:c6:0d:a1:b3:0e:
62:0e:57:1f:96:b5:aa:77:25:9d:5d:60:07:22:7c:86:cc:a0:
7e:5a:1d:57:e5:21:18:fd:f0:33:07:7d:d5:a8:05:51:3e:b5:
7f:2d:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:58 2025 by rpki-client