Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
File: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json)
Hash identifier: xmgq1WLC/Tz+wlaWe7FWPTvWhkh0hOsGH/04C4oz/Yg=
Subject key identifier: 27:FC:05:66:E3:F4:F4:16:68:4C:EE:EA:4D:6C:07:CE:DA:28:E5:4C
Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
Certificate issuer: /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Certificate serial: 019A71B7D6020ABE164D16A960D379D7F441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
Manifest number: 03E3
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: 6ribQUEUmAxt2wHXJd-U7f6yaRI.roa (hash: qhkI5RwGajokhxyxbM332dvPvFl03D+O4/wx5DmaCUo=)
2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: jxGRvCKYTq3ok4pBkBzKV71n8/pKSVETgPVaUYLmXa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d6:02:0a:be:16:4d:16:a9:60:d3:79:d7:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=27fc0566e3f4f416684ceeea4d6c07ceda28e54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:dd:5a:7a:59:07:0c:cf:80:25:fd:2c:09:
28:c9:ab:56:4f:13:4b:af:0b:e2:08:97:1a:3c:be:
71:66:44:d8:1c:1a:5a:17:0c:51:87:46:3d:41:d1:
65:46:c5:89:2d:ab:19:17:23:d6:25:fd:cd:44:33:
28:94:4f:a2:fb:2e:50:c9:fb:6a:73:aa:cf:69:7e:
e4:a4:1c:ba:9e:52:9c:44:95:14:e8:a1:a5:56:cf:
0f:f9:91:ba:55:23:ce:f3:04:29:08:bb:e4:b5:23:
bf:57:7c:6c:71:fe:2b:50:51:3c:1f:2b:ab:69:78:
d7:ab:ee:33:6a:95:13:b4:26:fa:7d:ca:18:33:a3:
df:dc:60:20:c2:e7:e0:35:44:de:99:ff:c1:ce:bd:
c5:45:8b:02:bf:4f:85:97:e7:fe:76:8c:2a:96:8f:
47:79:2a:eb:ac:e7:94:c5:41:6a:98:76:50:8d:f9:
b1:2b:df:a0:2f:a2:ec:61:ef:de:c1:07:9a:2f:86:
41:96:bf:e5:12:58:a6:58:38:30:40:44:06:c8:49:
89:82:96:30:85:20:e7:76:7c:dd:37:ee:03:70:4e:
7f:9c:4a:cc:f5:f5:27:f7:c0:b5:d4:e9:3c:4d:82:
d6:dd:72:cc:d2:0d:41:be:d9:56:7c:77:1c:6b:f3:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:05:66:E3:F4:F4:16:68:4C:EE:EA:4D:6C:07:CE:DA:28:E5:4C
X509v3 Authority Key Identifier:
keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:81:f2:73:a0:a3:4d:cc:30:5b:71:ac:e7:a1:23:83:c9:ce:
20:38:df:c0:a7:0a:3e:bd:ce:5c:ca:4e:9e:ff:19:1b:b3:a1:
07:89:f3:ea:2b:8f:8a:f5:a8:8d:5c:f0:78:dd:d5:90:e2:b0:
72:de:36:dc:76:5e:22:cb:ba:c4:86:ac:a4:3c:62:eb:f8:5f:
0b:b3:55:00:54:40:fb:2a:9c:27:70:4c:64:91:78:8b:be:1a:
94:bb:5e:f7:f9:0e:1f:44:a9:d2:c2:01:7f:b5:c6:4e:06:4b:
32:b9:6f:c8:09:cb:a0:3d:c8:6c:04:b5:51:87:b4:bc:09:67:
8f:ff:85:5a:89:5c:50:87:96:e4:1f:7b:91:99:fe:94:82:ef:
07:51:c9:09:c1:5b:c4:0b:be:d6:cb:09:60:24:fb:97:ba:07:
2e:63:8e:f5:79:9f:93:71:49:ec:04:66:58:ea:11:30:a5:d1:
af:95:2f:1a:97:a5:fc:9e:01:eb:b9:7e:a0:3c:54:32:c3:17:
de:c8:e3:55:df:34:4b:25:f3:3a:32:03:4d:2e:95:9a:92:6a:
11:44:8c:b4:e4:4f:0f:68:47:e3:fa:0b:6d:4b:a5:ce:57:32:
8e:05:40:df:d8:eb:4d:0b:d4:f7:57:29:33:20:be:4b:dd:ec:
c0:5e:9a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9YCCr4WTRapYNN51/RBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiY2FiZTY0OTBmYThiZDU3MjQ0MGZkNjYxNmE4NDMwZWU2
NmQxNTQwHhcNMjUxMTExMDcwMTA0WhcNMjUxMTEyMDcwMTA0WjAzMTEwLwYDVQQD
EygyN2ZjMDU2NmUzZjRmNDE2Njg0Y2VlZWE0ZDZjMDdjZWRhMjhlNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+XdWnpZBwzPgCX9LAkoyatWTxNL
rwviCJcaPL5xZkTYHBpaFwxRh0Y9QdFlRsWJLasZFyPWJf3NRDMolE+i+y5Qyftq
c6rPaX7kpBy6nlKcRJUU6KGlVs8P+ZG6VSPO8wQpCLvktSO/V3xscf4rUFE8Hyur
aXjXq+4zapUTtCb6fcoYM6Pf3GAgwufgNUTemf/Bzr3FRYsCv0+Fl+f+dowqlo9H
eSrrrOeUxUFqmHZQjfmxK9+gL6LsYe/ewQeaL4ZBlr/lElimWDgwQEQGyEmJgpYw
hSDndnzdN+4DcE5/nErM9fUn98C11Ok8TYLW3XLM0g1BvtlWfHcca/PwbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf8BWbj9PQWaEzu6k1sB87aKOVMMB8GA1UdIwQY
MBaAFHvKvmSQ+ovVckQP1mFqhDDuZtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzkt
MWZlY2UwNTkyZTliLzEvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzktMWZlY2UwNTkyZTli
LzEvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoHyc6Cj
TcwwW3Gs56Ejg8nOIDjfwKcKPr3OXMpOnv8ZG7OhB4nz6iuPivWojVzweN3VkOKw
ct423HZeIsu6xIaspDxi6/hfC7NVAFRA+yqcJ3BMZJF4i74alLte9/kOH0Sp0sIB
f7XGTgZLMrlvyAnLoD3IbAS1UYe0vAlnj/+FWolcUIeW5B97kZn+lILvB1HJCcFb
xAu+1ssJYCT7l7oHLmOO9Xmfk3FJ7ARmWOoRMKXRr5UvGpel/J4B67l+oDxUMsMX
3sjjVd80SyXzOjIDTS6VmpJqEUSMtORPD2hH4/oLbUulzlcyjgVA39jrTQvU91cp
MyC+S93swF6aAw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:45 2025 by rpki-client