Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File: EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier: 6Kk9xjP8ZGZbPi3BEMrRYtqbIOJ/lvHvkelRUemXdCE=
Subject key identifier: 41:92:30:6B:B3:90:E6:5C:48:00:7C:E9:F2:65:A1:E4:5F:65:08:07
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer: /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial: 019A4DE207188C206B9C6F06BD0E396BFB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: oNjkAvml4WVl4xt+pHRrbdcYFgrVLOtJjuqLJUmtCR0=)
2: WTVR86vnYs7BPStSbSDyoGuvJtI.roa (hash: +qhM9WKUBA3B9KCtQwGX3HjXjyrEypbbBCjk+fK/rjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:07:18:8c:20:6b:9c:6f:06:bd:0e:39:6b:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=4192306bb390e65c48007ce9f265a1e45f650807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:a5:4d:28:6a:38:eb:c1:b6:94:00:5a:bc:
9b:b4:84:9b:ac:6e:87:63:d1:df:12:77:db:2a:7f:
cf:f5:06:f0:e1:35:bc:86:75:4e:57:38:e1:5a:85:
b9:6d:97:9f:69:7d:e3:a5:b5:27:df:35:a7:1d:bb:
7e:01:a8:8d:43:ea:22:8d:cc:7e:35:e6:10:e4:03:
de:83:77:ac:ad:c2:d6:0c:5b:a6:08:b1:43:32:3e:
11:d2:9c:2e:a5:02:d7:9d:4f:e9:d7:92:51:6b:af:
1e:e1:18:33:43:4f:c2:ce:01:15:b4:72:1f:35:1b:
ba:96:38:bb:6b:9f:98:0a:4f:f3:51:38:d2:6e:5b:
eb:55:c9:d1:e6:01:47:f4:b7:56:41:42:99:54:9e:
b0:c1:4b:d8:13:e3:cb:9b:34:0b:a9:e8:d9:d6:e6:
1a:0c:d8:3f:bc:ea:6d:95:99:db:f1:c1:d2:7e:b9:
b7:10:ba:d5:78:95:72:25:ac:63:0e:28:b8:00:e9:
1a:76:2f:c6:50:81:f0:9e:32:fc:9d:e0:e3:c7:a7:
94:35:db:9b:29:65:da:78:9b:13:26:17:aa:18:01:
28:03:e1:e1:08:68:eb:06:76:2a:76:e9:59:d7:23:
4c:12:ff:a2:bd:2e:34:df:11:0d:a0:fd:1c:54:54:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:92:30:6B:B3:90:E6:5C:48:00:7C:E9:F2:65:A1:E4:5F:65:08:07
X509v3 Authority Key Identifier:
keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:66:69:94:dc:04:25:ba:da:32:2a:aa:c5:70:7e:84:fe:d4:
9f:be:46:1c:dc:a0:0c:74:12:5d:95:ab:7b:a1:31:80:a0:40:
ad:0b:0e:e8:23:8a:16:91:90:ac:70:2c:0b:40:bd:ae:5a:0b:
81:8a:49:30:7a:f7:85:b3:a1:45:04:77:1d:4c:70:52:11:d6:
26:aa:e2:68:fb:60:23:26:68:ee:be:e6:5d:3a:df:a6:87:16:
a1:ec:3b:89:7d:e9:17:67:e0:09:8a:08:73:fe:00:fd:98:cf:
6d:58:cc:32:62:70:cf:02:da:17:b3:9e:40:8f:b9:4e:51:96:
3d:e0:db:66:f2:a8:f9:63:a0:ce:71:2d:d2:4f:04:93:4b:cc:
bc:f6:43:c4:ec:33:2e:71:14:a5:1a:3e:3c:f3:b4:39:0a:b7:
cc:1d:bb:06:94:c6:58:13:f8:6a:87:bf:12:c3:81:50:3f:4c:
e4:b9:8c:b8:8b:3f:a1:4d:19:e9:50:cd:87:88:57:7a:95:33:
14:41:ad:cb:a0:3c:a7:79:d7:f7:34:8f:43:c0:df:45:62:37:
1f:83:00:4b:10:2e:07:ea:70:a2:4f:f2:aa:9a:7b:df:8d:68:
2b:ff:80:d6:3c:f8:32:02:d1:a6:41:e6:19:67:b9:57:e7:7c:
8c:6d:3b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4gcYjCBrnG8GvQ45a/uCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwM2FhOTA5ZThkYjAwZjgzNzdhNDUwZGJjYTU3ZDA1MWY0
YmY0MzUwHhcNMjUxMTA0MDgwMDQ5WhcNMjUxMTA1MDgwMDQ5WjAzMTEwLwYDVQQD
Eyg0MTkyMzA2YmIzOTBlNjVjNDgwMDdjZTlmMjY1YTFlNDVmNjUwODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfulTShqOOvBtpQAWrybtISbrG6H
Y9HfEnfbKn/P9Qbw4TW8hnVOVzjhWoW5bZefaX3jpbUn3zWnHbt+AaiNQ+oijcx+
NeYQ5APeg3esrcLWDFumCLFDMj4R0pwupQLXnU/p15JRa68e4RgzQ0/CzgEVtHIf
NRu6lji7a5+YCk/zUTjSblvrVcnR5gFH9LdWQUKZVJ6wwUvYE+PLmzQLqejZ1uYa
DNg/vOptlZnb8cHSfrm3ELrVeJVyJaxjDii4AOkadi/GUIHwnjL8neDjx6eUNdub
KWXaeJsTJheqGAEoA+HhCGjrBnYqdulZ1yNMEv+ivS403xENoP0cVFTPFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGSMGuzkOZcSAB86fJloeRfZQgHMB8GA1UdIwQY
MBaAFBA6qQno2wD4N3pFDbylfQUfS/Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZjdjNzktM2Y2Yi00NDRhLThlYzUt
N2JkY2E3NTE2ZTc1LzEvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yZjdjNzktM2Y2Yi00NDRhLThlYzUtN2JkY2E3NTE2ZTc1
LzEvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWZplNwE
JbraMiqqxXB+hP7Un75GHNygDHQSXZWre6ExgKBArQsO6COKFpGQrHAsC0C9rloL
gYpJMHr3hbOhRQR3HUxwUhHWJqriaPtgIyZo7r7mXTrfpocWoew7iX3pF2fgCYoI
c/4A/ZjPbVjMMmJwzwLaF7OeQI+5TlGWPeDbZvKo+WOgznEt0k8Ek0vMvPZDxOwz
LnEUpRo+PPO0OQq3zB27BpTGWBP4aoe/EsOBUD9M5LmMuIs/oU0Z6VDNh4hXepUz
FEGty6A8p3nX9zSPQ8DfRWI3H4MASxAuB+pwok/yqpp7341oK/+A1jz4MgLRpkHm
GWe5V+d8jG07lQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:07 2025 by rpki-client