Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: U9AEU3rOE3qp0rHOnbGzyk6ZFmDnMHgcH8k2qtOVPbM=
Subject key identifier: 38:0A:B9:A9:59:9F:1D:76:F6:99:3B:E6:A1:58:F7:04:86:A7:7A:12
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 0199C42059EEF53FFCD6F09F3218D3ECF4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 16C7
Signing time: Wed 08 Oct 2025 14:01:18 +0000
Manifest this update: Wed 08 Oct 2025 14:01:18 +0000
Manifest next update: Thu 09 Oct 2025 14:01:18 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: rgRi4uMB+tL7BKgq8wVvvynox5hc6iBEyRfztAwahWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:59:ee:f5:3f:fc:d6:f0:9f:32:18:d3:ec:f4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Oct 8 14:01:18 2025 GMT
Not After : Oct 9 14:01:18 2025 GMT
Subject: CN=380ab9a9599f1d76f6993be6a158f70486a77a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d8:d5:c9:93:d7:5c:fd:7d:8d:31:35:e0:a5:
90:bc:00:98:db:7c:fe:df:fe:d1:c9:7d:55:e5:50:
c6:a3:f0:fa:41:d3:74:d2:eb:9a:9b:c5:3f:e5:8e:
4c:aa:b6:d4:32:8c:8f:f5:a3:63:a1:a8:1b:1b:c5:
55:02:d9:9b:8f:31:aa:bd:52:b2:c7:bb:8c:4c:61:
db:ba:66:8c:57:0b:0f:36:13:8a:e0:3f:12:49:ef:
a0:bd:11:44:2b:8f:10:af:15:0c:24:1a:e7:8e:bc:
c1:6f:80:e3:74:39:dc:7b:8a:52:ba:c6:ec:6f:2e:
d7:01:54:41:2f:ac:9e:21:f3:d2:70:c9:b1:c5:38:
4f:5f:ff:cb:b7:45:75:13:78:6d:87:e4:73:b5:12:
5c:44:df:c7:a3:97:75:73:e7:ac:c0:47:76:44:68:
b8:ff:89:8c:6b:94:20:86:6f:cb:21:3f:d8:27:84:
ef:75:3c:94:36:a2:27:ff:ee:35:55:23:82:1b:05:
4d:3e:1c:1f:16:cd:19:e6:29:6a:10:41:54:81:31:
ba:ee:e8:c2:0a:c9:f5:89:a4:e6:1d:a2:51:d5:ae:
81:88:60:ef:a3:cc:8a:cb:a3:23:db:f3:94:0e:47:
7f:39:e4:6b:cb:d4:34:e1:df:db:5d:5e:42:50:4b:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:B9:A9:59:9F:1D:76:F6:99:3B:E6:A1:58:F7:04:86:A7:7A:12
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c4:ef:8c:fa:8e:02:11:5e:e1:94:0c:1c:f0:e9:19:7d:46:
2b:b4:1d:33:df:4d:8e:f4:fb:70:80:a7:f3:be:6c:44:f2:90:
66:92:13:f6:e3:16:e2:43:bc:13:de:82:68:cd:5d:49:8e:fe:
d6:72:23:c1:37:cb:0f:44:73:04:f7:50:04:a9:4d:64:6d:4f:
18:e3:47:46:18:8e:c4:5d:82:0a:c6:b2:74:5e:87:ed:2e:45:
de:dc:21:d4:5e:09:01:ae:d6:0e:f7:da:a2:9b:11:e5:aa:78:
27:c9:db:be:87:d8:5d:71:0c:4d:a6:8e:d4:ab:02:67:a5:d4:
83:96:4f:62:d2:07:39:a4:db:27:05:96:56:c8:60:b2:2d:61:
d8:4e:35:18:dc:02:b8:08:ac:c1:58:3a:12:65:dd:a9:9c:4a:
8f:28:13:a3:a2:4d:52:f3:d3:95:96:42:c4:5d:20:d3:8e:18:
10:5c:5f:26:e1:6a:04:27:f2:15:b9:93:c3:49:66:c6:e2:76:
2f:49:32:6a:05:a6:ae:ff:19:f3:c5:fa:c4:fd:63:6b:0b:ca:
22:4a:23:a7:4f:b6:83:db:8f:e2:b7:93:de:31:00:a8:07:0e:
67:6a:9a:78:94:24:83:a0:44:7f:63:c4:b2:02:9e:25:a2:07:
aa:14:f1:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEIFnu9T/81vCfMhjT7PS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGQxY2E3ODc2MTMxMGFjMzlhNzE0ZmY2MmYzYjkyYjJl
NzdkOGEwHhcNMjUxMDA4MTQwMTE4WhcNMjUxMDA5MTQwMTE4WjAzMTEwLwYDVQQD
EygzODBhYjlhOTU5OWYxZDc2ZjY5OTNiZTZhMTU4ZjcwNDg2YTc3YTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NjVyZPXXP19jTE14KWQvACY23z+
3/7RyX1V5VDGo/D6QdN00uuam8U/5Y5MqrbUMoyP9aNjoagbG8VVAtmbjzGqvVKy
x7uMTGHbumaMVwsPNhOK4D8SSe+gvRFEK48QrxUMJBrnjrzBb4DjdDnce4pSusbs
by7XAVRBL6yeIfPScMmxxThPX//Lt0V1E3hth+RztRJcRN/Ho5d1c+eswEd2RGi4
/4mMa5Qghm/LIT/YJ4TvdTyUNqIn/+41VSOCGwVNPhwfFs0Z5ilqEEFUgTG67ujC
Csn1iaTmHaJR1a6BiGDvo8yKy6Mj2/OUDkd/OeRry9Q04d/bXV5CUEuGlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgKualZnx129pk75qFY9wSGp3oSMB8GA1UdIwQY
MBaAFHkNHKeHYTEKw5pxT/YvO5Ky532KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgt
YjhhZTE2YjM1YzMxLzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgtYjhhZTE2YjM1YzMx
LzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMTvjPqO
AhFe4ZQMHPDpGX1GK7QdM99NjvT7cICn875sRPKQZpIT9uMW4kO8E96CaM1dSY7+
1nIjwTfLD0RzBPdQBKlNZG1PGONHRhiOxF2CCsaydF6H7S5F3twh1F4JAa7WDvfa
opsR5ap4J8nbvofYXXEMTaaO1KsCZ6XUg5ZPYtIHOaTbJwWWVshgsi1h2E41GNwC
uAiswVg6EmXdqZxKjygTo6JNUvPTlZZCxF0g044YEFxfJuFqBCfyFbmTw0lmxuJ2
L0kyagWmrv8Z88X6xP1jawvKIkojp0+2g9uP4reT3jEAqAcOZ2qaeJQkg6BEf2PE
sgKeJaIHqhTxAQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 17:25:40 2025 by rpki-client