Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
File: eVATNGyNjyPgEo0waZeYAjfbI3Q.mft (raw, json)
Hash identifier: xRwKbZz5RzHhyNnB1ybtwjv6I2Z4xB3bLopNvgswQ0o=
Subject key identifier: 78:50:1E:86:72:7C:4B:7A:F9:E0:C3:F6:B8:7D:B7:3B:A3:10:D9:EE
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial: 019A711345742A9B4CB327EC327CCCC2FBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
Manifest number: 1047
Signing time: Tue 11 Nov 2025 04:01:19 +0000
Manifest this update: Tue 11 Nov 2025 04:01:19 +0000
Manifest next update: Wed 12 Nov 2025 04:01:19 +0000
Files and hashes: 1: IDffwXSXahN5-5PWuJ4XE3BnZeo.roa (hash: 1+Z8cC/8+v/4brLtfip5esLm8Gxo3GEZJmCR2m2xqjM=)
2: eVATNGyNjyPgEo0waZeYAjfbI3Q.crl (hash: Zn9WBwr78dtgQDTK0CP0IeZ5ox1Q5NkZ2a+OFAOdD5U=)
3: ltph-6gi_L0tRRLCXMre4piqZuw.roa (hash: MFmQ6yYiN75fl1Cazo0nbfBN0O2fPbQZ0vfcLROz7mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:45:74:2a:9b:4c:b3:27:ec:32:7c:cc:c2:fb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795013346c8d8f23e0128d306997980237db2374
Validity
Not Before: Nov 11 04:01:19 2025 GMT
Not After : Nov 12 04:01:19 2025 GMT
Subject: CN=78501e86727c4b7af9e0c3f6b87db73ba310d9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:41:82:6a:ea:40:78:8d:af:25:7f:41:65:
27:1f:ba:11:56:0c:27:fb:29:0d:31:b7:05:db:9c:
2f:10:82:47:76:18:09:e7:e5:9d:58:ae:9f:98:2a:
a5:c6:79:bb:36:46:ed:5b:71:bb:0b:c7:30:10:4c:
1d:29:fb:36:ee:d0:22:22:e0:ab:c4:4f:da:1f:ef:
6b:20:3a:1e:75:2d:75:51:b4:38:d8:aa:16:d1:ff:
27:9d:8b:55:27:7c:38:e8:37:ef:39:5f:87:41:14:
8e:3f:a1:05:4a:0a:e6:95:ed:8c:2b:cc:a5:24:9a:
f9:8a:95:b4:53:6b:77:c5:75:7b:e1:e4:d8:7b:f2:
20:89:f8:88:74:9c:f7:d9:16:a5:1b:e1:ba:13:69:
c3:92:13:db:5d:2b:40:86:15:22:62:cc:19:6a:a0:
e2:04:45:e1:53:c2:49:40:3e:5e:0e:c5:cb:b4:6c:
6a:0f:4f:a8:1a:9b:dd:82:e4:e6:77:f5:68:d9:45:
e1:d3:8e:e7:bb:46:49:3b:ee:41:00:f4:40:a0:c6:
9f:e6:b5:ba:2e:02:53:66:de:05:f9:be:c2:89:bf:
03:dc:5f:b4:31:bc:65:12:4d:4a:05:a5:08:91:f5:
50:37:07:f7:61:cb:d1:66:2c:63:15:24:42:fa:f2:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:50:1E:86:72:7C:4B:7A:F9:E0:C3:F6:B8:7D:B7:3B:A3:10:D9:EE
X509v3 Authority Key Identifier:
keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2f:62:48:c2:f3:db:9b:c3:8e:7c:b3:0c:9c:59:fd:6c:49:
87:83:94:2e:f8:88:05:be:f2:4c:9a:0f:12:c5:24:c7:a0:0f:
83:d0:d5:a3:f8:65:41:71:1e:9a:d3:ac:d1:84:1f:33:36:da:
c3:bc:22:57:1c:c5:64:64:bd:ab:0e:b5:f6:69:b7:d6:f3:65:
00:d3:56:66:4e:0d:39:25:b7:21:36:7a:6a:42:b4:f1:0c:32:
8f:bf:9c:e8:23:d6:d0:ee:1e:9b:01:b5:6b:a5:0f:81:a4:cc:
05:b2:71:65:ca:96:d7:f9:d4:37:f6:a0:e0:c9:bb:7e:3d:54:
fd:f7:6b:75:b8:3b:4b:fd:91:3e:bf:03:b1:22:df:86:b1:d9:
bf:0a:d2:13:2b:aa:41:33:a4:87:27:48:57:94:42:9a:6d:5c:
8f:13:60:a2:33:ff:ef:c8:e2:03:e9:30:80:09:b1:37:96:b0:
9b:16:d1:13:e2:9e:c4:01:5c:bb:fa:e5:4f:a5:80:93:38:2d:
24:1b:ad:fa:fa:ad:1c:28:6d:7d:cf:22:75:47:02:2c:e9:00:
bb:be:82:40:8e:38:31:83:1d:1d:52:17:e2:63:90:ae:bd:56:
ff:09:70:6c:84:6f:16:a6:6b:44:a3:d1:54:ee:9e:7a:50:60:
e7:ae:3c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE0V0KptMsyfsMnzMwvuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NTAxMzM0NmM4ZDhmMjNlMDEyOGQzMDY5OTc5ODAyMzdk
YjIzNzQwHhcNMjUxMTExMDQwMTE5WhcNMjUxMTEyMDQwMTE5WjAzMTEwLwYDVQQD
Eyg3ODUwMWU4NjcyN2M0YjdhZjllMGMzZjZiODdkYjczYmEzMTBkOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBdBgmrqQHiNryV/QWUnH7oRVgwn
+ykNMbcF25wvEIJHdhgJ5+WdWK6fmCqlxnm7NkbtW3G7C8cwEEwdKfs27tAiIuCr
xE/aH+9rIDoedS11UbQ42KoW0f8nnYtVJ3w46DfvOV+HQRSOP6EFSgrmle2MK8yl
JJr5ipW0U2t3xXV74eTYe/IgifiIdJz32RalG+G6E2nDkhPbXStAhhUiYswZaqDi
BEXhU8JJQD5eDsXLtGxqD0+oGpvdguTmd/Vo2UXh047nu0ZJO+5BAPRAoMaf5rW6
LgJTZt4F+b7Cib8D3F+0MbxlEk1KBaUIkfVQNwf3YcvRZixjFSRC+vI1AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhQHoZyfEt6+eDD9rh9tzujENnuMB8GA1UdIwQY
MBaAFHlQEzRsjY8j4BKNMGmXmAI32yN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVZBVE5HeU5qeVBnRW8wd2FaZVlBamZiSTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmMwMWUtYjhjZC00NGFkLThhYTct
OGU5OGVhNmNhOGVlLzEvZVZBVE5HeU5qeVBnRW8wd2FaZVlBamZiSTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84MmMwMWUtYjhjZC00NGFkLThhYTctOGU5OGVhNmNhOGVl
LzEvZVZBVE5HeU5qeVBnRW8wd2FaZVlBamZiSTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyi9iSMLz
25vDjnyzDJxZ/WxJh4OULviIBb7yTJoPEsUkx6APg9DVo/hlQXEemtOs0YQfMzba
w7wiVxzFZGS9qw619mm31vNlANNWZk4NOSW3ITZ6akK08Qwyj7+c6CPW0O4emwG1
a6UPgaTMBbJxZcqW1/nUN/ag4Mm7fj1U/fdrdbg7S/2RPr8DsSLfhrHZvwrSEyuq
QTOkhydIV5RCmm1cjxNgojP/78jiA+kwgAmxN5awmxbRE+KexAFcu/rlT6WAkzgt
JBut+vqtHChtfc8idUcCLOkAu76CQI44MYMdHVIX4mOQrr1W/wlwbIRvFqZrRKPR
VO6eelBg5648vQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:15 2025 by rpki-client