
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
File: EeKnjdx_E58MIqKmNmK0gSrlEy4.mft (raw, json)
Hash identifier: 8UQKrHYOdKOEGQmqH4Uc2KvEbGTlf+jokbVGDZVD3IE=
Subject key identifier: DA:52:61:AA:39:EE:1B:F1:41:CF:F2:0C:9A:6E:FE:B2:16:8C:29:4F
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 0199DE4DA6B9FD3E1224051DD0127A05955F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
Manifest number: 0DBC
Signing time: Mon 13 Oct 2025 16:00:54 +0000
Manifest this update: Mon 13 Oct 2025 16:00:54 +0000
Manifest next update: Tue 14 Oct 2025 16:00:54 +0000
Files and hashes: 1: EeKnjdx_E58MIqKmNmK0gSrlEy4.crl (hash: rutaPRBoN8CtiOL1aiGX4tRaCdWwm24aI39FzWIDOB4=)
2: TlnmoN3NW-y8xYiqm0HOIvqXMC0.roa (hash: fvos90x1MCHlKrWkPLr1FS+wwkNQEqqCA62xdTd9V6A=)
3: upwUY-IRDf6A9l9uowGDJXhgTCE.roa (hash: IubMyXokYf5K+jVmzZiM+AZcRQ0zYk8rqAfoAkObB6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:4d:a6:b9:fd:3e:12:24:05:1d:d0:12:7a:05:95:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Oct 13 16:00:54 2025 GMT
Not After : Oct 14 16:00:54 2025 GMT
Subject: CN=da5261aa39ee1bf141cff20c9a6efeb2168c294f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:65:d2:55:07:7b:28:79:cc:02:6d:15:38:
fa:51:e7:b3:01:a8:c8:5c:52:29:2c:bb:57:50:e3:
2e:a8:6a:b3:76:ea:b7:f7:d6:ec:82:43:8f:56:c1:
47:c5:39:88:59:0e:c7:d3:9f:a6:8c:57:ce:a2:03:
15:14:42:78:af:74:a7:9f:87:7c:f9:a3:1a:f8:db:
47:2a:3d:c9:39:09:6d:38:37:dd:06:3c:8f:f0:de:
9e:be:65:b6:77:54:12:6f:6c:84:39:af:36:6e:32:
c3:b9:f2:db:9b:b7:5b:b8:b4:72:9f:0e:22:32:ac:
8b:86:1d:6d:f4:06:b6:a3:db:21:bb:61:0e:ab:d7:
17:95:62:88:2d:9c:63:64:48:c7:9d:e9:2f:38:d0:
84:70:98:47:7a:49:51:41:4a:6a:df:f3:77:37:73:
1e:9f:b6:99:00:e9:e3:7a:3f:1a:b3:44:9a:cf:26:
a1:ff:ac:50:b9:c4:2d:62:4a:6e:c0:f3:c6:1e:8d:
38:3f:82:b3:59:05:91:45:11:cc:e4:bf:ae:80:5c:
7a:b0:9e:3e:92:81:1c:66:3f:51:76:2b:99:8e:c2:
30:2f:10:b5:27:5f:6a:9a:d5:cf:2f:fa:55:8b:85:
39:0a:5d:f2:a6:00:11:19:15:14:86:12:0d:7e:86:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:52:61:AA:39:EE:1B:F1:41:CF:F2:0C:9A:6E:FE:B2:16:8C:29:4F
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:40:3f:de:4b:4f:e7:c2:12:b2:93:82:25:74:79:8e:71:64:
01:7c:b1:ab:7f:35:40:35:af:b0:27:12:41:a5:25:91:de:33:
45:c1:b5:13:e4:41:54:61:87:f1:0d:17:df:57:77:a6:10:a1:
a7:b8:ff:35:46:9b:55:16:8a:70:95:e0:90:af:2c:a3:29:cb:
64:2e:76:88:ee:f0:fe:15:c9:2e:ca:58:bf:47:25:bf:49:94:
d3:47:3f:58:7f:24:eb:e8:c4:d7:7f:a9:d7:40:41:2c:9c:6e:
42:b2:fa:13:a3:ab:c7:80:aa:7d:4f:56:47:82:d5:f5:cb:e0:
ca:84:96:2d:f3:9a:34:fe:e5:06:f8:96:87:a6:8a:09:10:89:
46:ea:f1:06:df:51:ed:2a:02:30:57:1b:53:25:c7:be:33:07:
a9:a6:47:17:92:bc:26:d3:01:93:db:29:cb:bf:92:5a:2d:e6:
8b:51:d8:0f:66:98:4e:ed:6e:c4:6c:4a:25:c9:ac:62:3c:d0:
63:3b:0d:6a:3b:ef:95:35:ff:51:70:f9:3c:67:10:46:c3:d5:
36:55:2c:8b:7a:6d:f7:9b:ee:87:79:f9:f0:4a:b6:4e:ec:20:
35:10:77:88:eb:22:6a:fd:38:db:1d:de:3d:ef:eb:ae:44:1c:
01:58:32:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZneTaa5/T4SJAUd0BJ6BZVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTJhNzhkZGM3ZjEzOWYwYzIyYTJhNjM2NjJiNDgxMmFl
NTEzMmUwHhcNMjUxMDEzMTYwMDU0WhcNMjUxMDE0MTYwMDU0WjAzMTEwLwYDVQQD
EyhkYTUyNjFhYTM5ZWUxYmYxNDFjZmYyMGM5YTZlZmViMjE2OGMyOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFRl0lUHeyh5zAJtFTj6UeezAajI
XFIpLLtXUOMuqGqzduq399bsgkOPVsFHxTmIWQ7H05+mjFfOogMVFEJ4r3Snn4d8
+aMa+NtHKj3JOQltODfdBjyP8N6evmW2d1QSb2yEOa82bjLDufLbm7dbuLRynw4i
MqyLhh1t9Aa2o9shu2EOq9cXlWKILZxjZEjHnekvONCEcJhHeklRQUpq3/N3N3Me
n7aZAOnjej8as0Sazyah/6xQucQtYkpuwPPGHo04P4KzWQWRRRHM5L+ugFx6sJ4+
koEcZj9RdiuZjsIwLxC1J19qmtXPL/pVi4U5Cl3ypgARGRUUhhINfoY/7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpSYao57hvxQc/yDJpu/rIWjClPMB8GA1UdIwQY
MBaAFBHip43cfxOfDCKipjZitIEq5RMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDE1YzctNDc2YS00YzU3LWJhZjQt
ZGU1ZjdiZjU5ODM5LzEvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZDE1YzctNDc2YS00YzU3LWJhZjQtZGU1ZjdiZjU5ODM5
LzEvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUA/3ktP
58ISspOCJXR5jnFkAXyxq381QDWvsCcSQaUlkd4zRcG1E+RBVGGH8Q0X31d3phCh
p7j/NUabVRaKcJXgkK8soynLZC52iO7w/hXJLspYv0clv0mU00c/WH8k6+jE13+p
10BBLJxuQrL6E6Orx4CqfU9WR4LV9cvgyoSWLfOaNP7lBviWh6aKCRCJRurxBt9R
7SoCMFcbUyXHvjMHqaZHF5K8JtMBk9spy7+SWi3mi1HYD2aYTu1uxGxKJcmsYjzQ
YzsNajvvlTX/UXD5PGcQRsPVNlUsi3pt95vuh3n58Eq2TuwgNRB3iOsiav042x3e
Pe/rrkQcAVgytQ==
-----END CERTIFICATE-----
Generated at Tue Oct 14 00:51:24 2025 by rpki-client