Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: 3NCXtOCVcf22AGUhi+J9OHTZ6J60aOJrNlEIm4Plae0=
Subject key identifier: C2:C0:F5:CE:86:71:95:46:93:27:7F:12:9F:F2:A0:B9:F5:BC:B1:70
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 019A4D3CCB0B2A023FB93D114D80478B7D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 120B
Signing time: Tue 04 Nov 2025 05:00:21 +0000
Manifest this update: Tue 04 Nov 2025 05:00:21 +0000
Manifest next update: Wed 05 Nov 2025 05:00:21 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: S9HncFn/D/VhqzdUP6lykketg3XULbweKIsg93+L8tg=)
2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:cb:0b:2a:02:3f:b9:3d:11:4d:80:47:8b:7d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Nov 4 05:00:21 2025 GMT
Not After : Nov 5 05:00:21 2025 GMT
Subject: CN=c2c0f5ce8671954693277f129ff2a0b9f5bcb170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:f7:13:cc:45:16:d1:2b:42:25:21:dd:08:
23:35:3f:0e:04:6d:ae:1d:c9:72:62:32:6f:6b:4f:
16:89:d1:40:0d:b5:c5:90:4d:ce:71:b4:ba:6d:19:
d1:04:ac:e3:0c:a4:67:60:bb:13:47:71:00:33:97:
60:a4:35:28:3f:38:81:0e:7b:f4:30:a4:4a:d1:09:
f7:65:4b:2f:3f:69:26:3f:ad:92:af:18:7f:e4:cf:
eb:e7:ce:ed:54:1d:dc:01:86:e9:46:80:5a:e8:4c:
15:03:05:3f:66:4c:d3:f4:9c:15:67:45:80:de:9c:
83:2b:f2:6a:64:14:cd:8b:33:ef:0f:b5:31:09:45:
8c:41:5d:dc:51:4d:df:a8:90:61:ad:06:e4:6a:69:
bf:e6:ae:6a:05:5f:3c:d3:50:18:37:18:ae:14:45:
77:aa:29:17:27:6c:ee:57:d0:cd:f1:1b:4e:d2:e6:
d1:79:2b:06:48:ff:03:59:db:af:6c:10:4e:d5:2a:
8f:eb:0a:b2:43:3d:a5:51:8b:25:d1:0b:5b:7c:c2:
d1:6d:09:49:c9:22:67:db:67:9b:78:2f:f8:43:c8:
48:83:69:05:f0:a1:72:34:be:61:95:c2:f7:ee:c6:
d2:22:f1:19:48:76:a9:f4:a7:f1:22:00:3f:fb:0d:
62:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:F5:CE:86:71:95:46:93:27:7F:12:9F:F2:A0:B9:F5:BC:B1:70
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:50:8e:47:6e:d9:6d:86:d3:f2:e8:49:13:e9:35:0d:7c:eb:
b2:73:cd:48:29:a4:67:a5:e1:e8:ea:17:3f:bf:19:1b:1e:2c:
85:37:01:6a:19:12:71:88:d9:21:d3:ca:0f:52:de:e8:c2:2a:
ae:4f:c6:57:87:ea:e9:9b:ee:7b:68:2a:a0:62:c8:c6:65:40:
7f:ef:91:43:04:43:aa:6d:94:3f:07:45:7b:02:02:a2:28:1b:
08:f7:39:09:26:39:a5:e6:d5:2b:74:9b:57:85:27:f2:1f:8e:
e4:38:cc:05:53:3a:01:83:ad:6d:d4:ad:03:e6:39:1c:c2:d4:
ff:c8:a4:b8:ef:b5:21:51:0d:7a:70:f9:a9:01:6f:80:34:86:
dc:bc:b5:0e:45:0b:64:e5:70:d1:7e:50:9e:2f:55:fd:46:95:
2f:05:9d:64:b9:0e:31:4c:39:1f:d8:6d:af:db:b5:24:03:92:
e9:7b:d0:2b:46:27:78:63:54:91:5d:7a:d6:e9:b4:ff:83:bc:
bf:00:b4:c9:cb:cb:7d:92:92:76:35:46:f9:bb:7b:f1:c3:13:
79:21:39:df:1b:6f:fa:1c:17:b1:c2:64:e0:37:67:59:fc:a8:
98:94:ad:4d:50:a4:58:c5:e4:df:96:9a:21:17:7e:9e:66:98:
bd:bb:be:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPMsLKgI/uT0RTYBHi301MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYTU5ODVjYmEzMmE4NzdkMzIxNWJiYzIyOGNiMDdkMDQw
MDkxN2IwHhcNMjUxMTA0MDUwMDIxWhcNMjUxMTA1MDUwMDIxWjAzMTEwLwYDVQQD
EyhjMmMwZjVjZTg2NzE5NTQ2OTMyNzdmMTI5ZmYyYTBiOWY1YmNiMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fD3E8xFFtErQiUh3QgjNT8OBG2u
HclyYjJva08WidFADbXFkE3OcbS6bRnRBKzjDKRnYLsTR3EAM5dgpDUoPziBDnv0
MKRK0Qn3ZUsvP2kmP62Srxh/5M/r587tVB3cAYbpRoBa6EwVAwU/ZkzT9JwVZ0WA
3pyDK/JqZBTNizPvD7UxCUWMQV3cUU3fqJBhrQbkamm/5q5qBV8801AYNxiuFEV3
qikXJ2zuV9DN8RtO0ubReSsGSP8DWduvbBBO1SqP6wqyQz2lUYsl0QtbfMLRbQlJ
ySJn22ebeC/4Q8hIg2kF8KFyNL5hlcL37sbSIvEZSHap9KfxIgA/+w1iAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLA9c6GcZVGkyd/Ep/yoLn1vLFwMB8GA1UdIwQY
MBaAFBClmFy6Mqh30yFbvCKMsH0EAJF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEt
ZDcwZjI4NTE1ZmJkLzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEtZDcwZjI4NTE1ZmJk
LzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVCOR27Z
bYbT8uhJE+k1DXzrsnPNSCmkZ6Xh6OoXP78ZGx4shTcBahkScYjZIdPKD1Le6MIq
rk/GV4fq6Zvue2gqoGLIxmVAf++RQwRDqm2UPwdFewICoigbCPc5CSY5pebVK3Sb
V4Un8h+O5DjMBVM6AYOtbdStA+Y5HMLU/8ikuO+1IVENenD5qQFvgDSG3Ly1DkUL
ZOVw0X5Qni9V/UaVLwWdZLkOMUw5H9htr9u1JAOS6XvQK0YneGNUkV161um0/4O8
vwC0ycvLfZKSdjVG+bt78cMTeSE53xtv+hwXscJk4DdnWfyomJStTVCkWMXk35aa
IRd+nmaYvbu+gA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:23 2025 by rpki-client