
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier: gJw4y+PNNkdotnpNeui/xQm/OGnCSUq7fqzKLWN+PqA=
Subject key identifier: BA:89:6F:87:AA:AE:0C:0C:05:53:ED:15:72:5A:58:C7:AD:EE:26:7C
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial: 019A5564850579B11CE1E2B5096225B5E13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 19:00:42 +0000
Manifest this update: Wed 05 Nov 2025 19:00:42 +0000
Manifest next update: Thu 06 Nov 2025 19:00:42 +0000
Files and hashes: 1: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: UuJhe3S11pw5Od07FNGLt9QaO7ZH8RfCC5myCfTrUFU=)
2: w4RpAhXHQv7paVDaR7QTwx3l9rU.roa (hash: cSr60LWlE9V7I+1ZUVP1rmOC1RqMw9hreE8YRG544p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:85:05:79:b1:1c:e1:e2:b5:09:62:25:b5:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Validity
Not Before: Nov 5 19:00:42 2025 GMT
Not After : Nov 6 19:00:42 2025 GMT
Subject: CN=ba896f87aaae0c0c0553ed15725a58c7adee267c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:f7:6b:32:3d:a9:72:1d:22:0c:4d:23:11:
cf:7a:5f:a9:a3:ca:a9:24:18:13:f8:c5:30:ce:a7:
da:71:ee:cc:e2:06:cc:0f:94:9d:58:5c:70:8d:b4:
b0:51:da:81:38:8a:1d:8c:fc:b5:75:ea:f6:68:07:
9a:ac:22:58:a7:e2:f0:1a:12:75:6f:13:88:21:62:
fd:5c:db:9d:c5:a3:95:68:e0:fe:7b:6b:24:33:09:
2f:32:e4:26:2d:50:4a:4e:a0:70:ff:07:71:31:24:
92:56:af:c2:00:1f:34:a0:40:58:6d:fd:6f:d1:88:
30:6b:29:8a:4e:46:fb:26:78:30:af:e5:90:33:1c:
d6:fd:68:87:76:80:18:2b:8c:34:b1:47:28:74:d9:
4c:4b:3b:b8:50:9c:8a:44:de:73:7b:b2:9a:a3:f6:
77:a1:c6:8b:5a:0c:a8:f2:28:28:50:10:5e:7c:7e:
e3:7f:48:0c:71:3a:8a:2d:ad:47:05:05:33:35:14:
74:8a:3d:b8:80:4e:c8:a6:bf:ef:cb:f9:75:5a:2b:
51:f1:72:31:55:17:8c:53:d3:3d:42:b7:da:c6:4d:
68:bc:93:ae:24:5e:6f:15:63:04:ba:fe:a2:5f:ba:
b4:48:6c:ec:ed:f6:58:d7:0b:89:19:06:2b:fd:48:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:89:6F:87:AA:AE:0C:0C:05:53:ED:15:72:5A:58:C7:AD:EE:26:7C
X509v3 Authority Key Identifier:
keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:dc:34:82:12:42:be:f1:87:28:26:e7:74:f4:ee:3c:bb:
01:a2:bb:d3:e4:da:7a:10:b2:e5:88:36:57:5b:18:a0:ef:75:
69:31:9f:47:51:be:bb:95:96:dc:94:a0:c8:9d:48:a5:ed:ae:
0a:a9:a5:a1:e8:f3:21:b4:bb:ef:4d:be:c2:75:b6:3d:ee:48:
ec:e1:04:17:ec:eb:c0:5f:8f:37:0f:bc:94:a7:e3:77:77:99:
f7:65:94:85:74:a7:10:bd:9f:48:2f:73:83:c8:46:44:7c:cb:
a1:e9:7c:6b:db:9b:3a:51:31:cd:d0:5d:68:9b:4d:7c:79:48:
32:38:59:2d:87:90:a7:2e:92:35:7e:c9:23:50:84:9d:87:e0:
64:15:9a:07:bb:c1:f0:ba:4b:94:4d:ce:65:93:38:c1:42:68:
05:9d:75:88:63:db:ec:4e:b2:fe:9b:a1:27:c6:b3:27:bf:79:
2b:14:6a:a9:64:5d:5f:b9:43:07:c8:36:38:ec:4f:be:0c:74:
56:a0:c7:cf:f7:3f:ce:f5:1f:ac:1e:88:90:b1:47:dd:55:0a:
f2:8c:29:c4:7c:3f:d1:c1:de:36:a8:09:db:0a:e7:f6:b7:6d:
ca:97:0f:f4:01:f2:9a:e6:e8:62:1f:6b:8b:6c:f3:79:86:ac:
23:db:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:02:38 2025 by rpki-client