Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
File: eJMzeVlLis4GnZO_CICksp7ShnM.mft (raw, json)
Hash identifier: VFoBdRYIDSYbMdzu/orbUGjoNsU/TgUhnhZHYZRsEOU=
Subject key identifier: D2:A9:6D:80:0C:97:42:4A:F8:50:CE:74:AB:7E:6B:F5:0E:7D:91:C8
Authority key identifier: 78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Certificate issuer: /CN=78933379594b8ace069d93bf0880a4b29ed28673
Certificate serial: 019A7112E318852C4B22808B9CAF4B51EE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
Manifest number: 0401
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: eJMzeVlLis4GnZO_CICksp7ShnM.crl (hash: HmFHqrEz2rC57mGqFMwdXKEytoo7o6wLsxx74NDVeg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e3:18:85:2c:4b:22:80:8b:9c:af:4b:51:ee:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78933379594b8ace069d93bf0880a4b29ed28673
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=d2a96d800c97424af850ce74ab7e6bf50e7d91c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:3b:81:67:62:15:42:88:52:b4:af:75:97:
da:cf:da:52:93:12:6d:00:36:52:72:b2:3b:e6:63:
56:89:34:8d:a2:1d:a7:aa:60:c4:95:6e:24:cf:ee:
6a:ee:d3:75:af:2c:51:35:56:b1:0f:02:f2:87:ed:
68:0b:6b:18:11:90:5c:02:cf:4c:3f:ed:97:44:da:
5d:e2:6d:8c:5f:93:f7:1d:02:4b:63:87:d8:d7:a0:
bf:03:5d:5a:c5:90:88:f3:d2:68:52:b2:50:6c:b0:
c7:96:72:37:a1:dd:26:40:26:b7:ee:bb:d9:8a:b2:
73:8b:e0:67:85:a2:a9:94:90:ea:cf:2c:40:19:fe:
4a:b1:37:f6:a8:7c:51:15:64:4d:c7:e3:7d:6a:a4:
a8:56:91:45:91:9c:c0:39:4c:27:e6:a1:d5:42:fb:
04:78:d5:47:b5:f1:be:52:39:29:a3:9c:e3:13:71:
5f:22:3c:7b:9c:4f:e8:37:3b:1e:43:f1:8e:87:f7:
d9:f4:67:da:62:4d:f5:17:58:37:28:ce:01:29:9b:
8a:d9:44:b5:26:84:33:f4:09:34:3e:80:3b:b2:f8:
4e:cf:f3:aa:8d:11:03:54:48:1e:36:f8:39:28:93:
ee:b4:87:6c:14:5f:98:03:70:29:dd:6f:da:66:68:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:6D:80:0C:97:42:4A:F8:50:CE:74:AB:7E:6B:F5:0E:7D:91:C8
X509v3 Authority Key Identifier:
keyid:78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e1:2a:e1:37:93:6c:99:4d:fc:23:f5:04:ac:64:ef:d0:02:
8f:3c:11:47:9f:79:0b:0a:3c:e1:f0:7a:37:ce:ab:6d:e8:59:
65:51:c3:02:56:c6:7d:58:b2:07:2d:7c:d0:75:22:8c:62:f8:
c8:f6:0b:6d:2c:9c:57:36:81:d8:28:37:6b:b8:ea:4e:55:a3:
db:54:67:6a:11:20:e0:d0:2d:fb:fb:05:a8:b7:1d:f2:f0:ef:
d3:eb:7d:08:29:06:4e:91:7b:ac:63:fe:ac:eb:89:15:4f:1d:
22:95:e0:4f:66:37:3b:81:82:e2:2d:85:80:81:92:fd:59:87:
f4:b5:a1:e8:8a:9d:ac:fa:92:15:a0:89:86:3f:bf:a7:98:46:
38:14:4c:44:71:ad:a3:a2:ab:29:f1:ca:33:5e:ae:70:42:fb:
69:4d:12:df:96:23:65:0f:97:1a:6a:42:a9:1f:37:ed:49:90:
26:da:b1:a0:ec:c0:f4:bb:55:77:2e:fe:33:5c:8d:cd:8c:d5:
58:c5:f3:70:62:d9:e3:e9:8f:f3:ea:94:d2:26:a7:9f:6a:af:
c4:d5:50:43:93:6d:1e:c1:f0:05:6a:47:0e:0f:de:78:64:8c:
e4:6a:81:98:fd:1a:d1:c6:0d:f4:0b:da:6d:a7:ac:4d:c2:c8:
98:c9:f0:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEuMYhSxLIoCLnK9LUe6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTMzMzc5NTk0YjhhY2UwNjlkOTNiZjA4ODBhNGIyOWVk
Mjg2NzMwHhcNMjUxMTExMDQwMDU0WhcNMjUxMTEyMDQwMDU0WjAzMTEwLwYDVQQD
EyhkMmE5NmQ4MDBjOTc0MjRhZjg1MGNlNzRhYjdlNmJmNTBlN2Q5MWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKA7gWdiFUKIUrSvdZfaz9pSkxJt
ADZScrI75mNWiTSNoh2nqmDElW4kz+5q7tN1ryxRNVaxDwLyh+1oC2sYEZBcAs9M
P+2XRNpd4m2MX5P3HQJLY4fY16C/A11axZCI89JoUrJQbLDHlnI3od0mQCa37rvZ
irJzi+BnhaKplJDqzyxAGf5KsTf2qHxRFWRNx+N9aqSoVpFFkZzAOUwn5qHVQvsE
eNVHtfG+Ujkpo5zjE3FfIjx7nE/oNzseQ/GOh/fZ9GfaYk31F1g3KM4BKZuK2US1
JoQz9Ak0PoA7svhOz/OqjREDVEgeNvg5KJPutIdsFF+YA3Ap3W/aZmjrRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKpbYAMl0JK+FDOdKt+a/UOfZHIMB8GA1UdIwQY
MBaAFHiTM3lZS4rOBp2TvwiApLKe0oZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUpNemVWbExpczRHblpPX0NJQ2tzcDdTaG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81NjViOWItZGJlOS00NWY0LThmYjAt
Mjc0YmRhMzYxNmNiLzEvZUpNemVWbExpczRHblpPX0NJQ2tzcDdTaG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81NjViOWItZGJlOS00NWY0LThmYjAtMjc0YmRhMzYxNmNi
LzEvZUpNemVWbExpczRHblpPX0NJQ2tzcDdTaG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuEq4TeT
bJlN/CP1BKxk79ACjzwRR595Cwo84fB6N86rbehZZVHDAlbGfViyBy180HUijGL4
yPYLbSycVzaB2Cg3a7jqTlWj21RnahEg4NAt+/sFqLcd8vDv0+t9CCkGTpF7rGP+
rOuJFU8dIpXgT2Y3O4GC4i2FgIGS/VmH9LWh6IqdrPqSFaCJhj+/p5hGOBRMRHGt
o6KrKfHKM16ucEL7aU0S35YjZQ+XGmpCqR837UmQJtqxoOzA9LtVdy7+M1yNzYzV
WMXzcGLZ4+mP8+qU0iann2qvxNVQQ5NtHsHwBWpHDg/eeGSM5GqBmP0a0cYN9Ava
baesTcLImMnwFw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:11 2025 by rpki-client