Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: 8/Vo5pKpSxtlcv3OToV6egoxFfENJGUNxJoIwjvnq6A=
Subject key identifier: AA:44:05:29:DC:3D:B7:8B:E3:83:49:AE:E5:D3:CF:6E:F2:F5:DA:CE
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019A0B25A66961517B94ADDDDC5493F44150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 16F2
Signing time: Wed 22 Oct 2025 09:00:08 +0000
Manifest this update: Wed 22 Oct 2025 09:00:08 +0000
Manifest next update: Thu 23 Oct 2025 09:00:08 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: ZAQwMd6PxgETVjoMyAok04bnPodswfkCRkt3PKa6uZ0=)
4: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
5: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
6: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
7: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
8: ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa (hash: Al22oIYh8E5aXL0ywXKSqrnxU2vRdMQS4zIM1t7Q1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:25:a6:69:61:51:7b:94:ad:dd:dc:54:93:f4:41:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Oct 22 09:00:08 2025 GMT
Not After : Oct 23 09:00:08 2025 GMT
Subject: CN=aa440529dc3db78be38349aee5d3cf6ef2f5dace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:dd:80:72:a7:6e:91:85:94:39:de:0a:5a:
64:51:b8:b5:7a:89:b0:1f:19:0e:88:99:35:cc:be:
5f:94:0a:39:76:75:bb:18:16:90:bf:32:9f:27:40:
ec:2f:37:18:5c:b3:1b:d3:5c:21:8b:8a:ac:85:60:
33:d0:36:41:41:41:b6:7d:92:dc:28:68:a9:aa:13:
08:f3:cb:32:f9:f9:3e:d3:0e:e9:12:5b:0b:69:ae:
d1:28:b6:87:9c:94:9a:ec:58:f6:c5:e1:cb:b1:25:
8f:d7:a9:83:6b:8a:52:85:20:d6:a0:ea:18:b0:eb:
e7:d2:19:04:79:9e:6c:5d:2b:c0:48:6c:b7:d1:dc:
a1:41:6c:84:b0:31:29:a0:54:9b:9e:f6:18:2a:b4:
15:72:03:29:fa:78:ca:e1:2d:f4:a5:10:fb:c6:83:
16:5a:11:b0:b3:63:2a:81:de:9e:cc:e0:91:a9:80:
48:78:ba:e3:d4:4c:63:1a:78:36:6c:38:fd:23:b9:
4b:72:51:ad:e8:29:ef:de:16:11:23:f3:16:c2:29:
36:6b:21:e0:9d:08:44:0b:cd:c7:14:0f:eb:f9:40:
21:05:f8:8b:67:a4:ab:ac:07:96:a6:a5:c2:6d:68:
2e:36:2e:f2:01:55:e1:d9:15:ee:39:1a:cc:23:bc:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:05:29:DC:3D:B7:8B:E3:83:49:AE:E5:D3:CF:6E:F2:F5:DA:CE
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cb:d2:1b:61:10:a8:3d:d8:63:ba:de:07:de:d4:10:14:d9:
44:40:09:bb:96:3f:25:91:cf:f7:02:d2:a5:14:da:12:3f:87:
62:d6:94:36:f5:92:f3:7f:15:aa:4c:9c:c2:88:2e:d3:2c:c4:
71:f1:51:1b:2a:ae:02:96:f3:74:7b:4d:08:30:1a:7f:2d:75:
82:ed:84:0e:92:b0:2c:dd:e2:5e:99:86:c7:45:ce:74:6d:23:
64:f6:51:50:36:83:ae:5f:27:a6:44:fd:69:67:52:85:0d:ad:
1a:82:4a:7a:bc:63:3a:fc:ce:bc:bc:df:27:e7:a4:ad:6a:81:
aa:76:8c:c0:43:98:8c:e5:fa:3f:e9:78:93:77:5b:61:84:c3:
90:c3:d8:30:cc:70:4d:fb:27:e7:d1:a3:cd:5d:80:d1:13:32:
b0:d0:64:eb:59:49:52:77:56:0c:2c:5d:a0:57:3f:c4:57:06:
2f:eb:3e:d7:87:91:2c:86:5e:27:63:92:2a:6e:a8:cf:bf:94:
b0:d5:2f:95:a1:dd:39:a1:68:f9:97:29:5d:a3:43:85:9e:59:
73:94:be:02:cf:22:f2:91:d4:4c:9d:a9:d4:50:1f:bc:9e:27:
6d:39:67:a2:60:7b:59:82:7a:9f:a4:47:0f:aa:53:90:4b:5b:
95:fa:b9:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLJaZpYVF7lK3d3FST9EFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjUxMDIyMDkwMDA4WhcNMjUxMDIzMDkwMDA4WjAzMTEwLwYDVQQD
EyhhYTQ0MDUyOWRjM2RiNzhiZTM4MzQ5YWVlNWQzY2Y2ZWYyZjVkYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4LdgHKnbpGFlDneClpkUbi1eomw
HxkOiJk1zL5flAo5dnW7GBaQvzKfJ0DsLzcYXLMb01whi4qshWAz0DZBQUG2fZLc
KGipqhMI88sy+fk+0w7pElsLaa7RKLaHnJSa7Fj2xeHLsSWP16mDa4pShSDWoOoY
sOvn0hkEeZ5sXSvASGy30dyhQWyEsDEpoFSbnvYYKrQVcgMp+njK4S30pRD7xoMW
WhGws2Mqgd6ezOCRqYBIeLrj1ExjGng2bDj9I7lLclGt6Cnv3hYRI/MWwik2ayHg
nQhEC83HFA/r+UAhBfiLZ6SrrAeWpqXCbWguNi7yAVXh2RXuORrMI7yQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpEBSncPbeL44NJruXTz27y9drOMB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsvSG2EQ
qD3YY7reB97UEBTZREAJu5Y/JZHP9wLSpRTaEj+HYtaUNvWS838Vqkycwogu0yzE
cfFRGyquApbzdHtNCDAafy11gu2EDpKwLN3iXpmGx0XOdG0jZPZRUDaDrl8npkT9
aWdShQ2tGoJKerxjOvzOvLzfJ+ekrWqBqnaMwEOYjOX6P+l4k3dbYYTDkMPYMMxw
Tfsn59GjzV2A0RMysNBk61lJUndWDCxdoFc/xFcGL+s+14eRLIZeJ2OSKm6oz7+U
sNUvlaHdOaFo+ZcpXaNDhZ5Zc5S+As8i8pHUTJ2p1FAfvJ4nbTlnomB7WYJ6n6RH
D6pTkEtblfq5Gw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 12:39:37 2025 by rpki-client