Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: 7DuTIbiZVoof+XpPVozKYemlJg7c86HJdt85EBCfH6g=
Subject key identifier: 2F:2D:0D:2A:A5:78:B8:00:F4:61:66:26:22:23:38:DA:31:08:DB:26
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 019A72265A773E7F9A5665AA427A9B1EB140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: FWOZBZav7BBUUP+fauwNEcNePAAsYtiQ5NNrRo5eZ3w=)
2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5a:77:3e:7f:9a:56:65:aa:42:7a:9b:1e:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=2f2d0d2aa578b800f4616626222338da3108db26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:8f:a1:bf:1c:a1:92:ea:17:89:ca:8a:54:
2f:16:63:11:e8:0d:e0:ba:2a:df:59:fe:f7:11:eb:
15:b2:c2:90:e5:f9:9b:83:6a:46:6a:dc:17:86:fb:
20:68:81:e8:62:cf:2f:ae:4a:20:fa:2c:7f:4b:13:
3c:2c:24:4b:0a:bb:82:f7:3e:38:5e:d7:2f:ea:04:
19:91:9a:1f:51:32:ec:0b:bf:12:2f:35:64:1d:e4:
41:c9:09:67:23:64:36:35:02:60:0b:db:83:41:02:
82:47:b8:05:b9:01:2c:59:14:68:b5:77:d6:a4:03:
4e:8d:50:96:82:d8:59:6f:c3:78:9c:01:b3:10:c6:
0b:68:fd:c8:b8:e9:64:fd:c8:ed:c3:08:95:4f:32:
7a:7d:1b:a0:4c:20:8e:3d:b4:0c:a4:f2:96:a5:f7:
8a:7e:cb:4f:cc:4e:85:8a:c6:1a:8b:23:af:e5:de:
5f:fc:b3:e3:25:75:09:e8:cd:90:dc:52:51:d5:71:
2b:96:d8:3b:a7:77:65:db:c4:a1:5f:83:15:15:e2:
12:c9:39:c9:78:21:c1:7a:8e:3f:f4:dc:07:29:df:
d5:5c:e7:ae:a0:cc:56:aa:c9:e0:b8:39:a9:dd:84:
06:cf:76:10:fa:10:1f:43:e4:74:ae:0a:38:2f:2b:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:0D:2A:A5:78:B8:00:F4:61:66:26:22:23:38:DA:31:08:DB:26
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:56:eb:9d:f8:1c:f3:8f:75:ba:fb:67:8c:09:30:2a:0d:
68:5b:ca:52:e9:4c:4e:49:83:d8:db:0e:9b:c2:ac:6a:28:88:
54:00:6a:46:11:80:5b:61:01:5d:c0:ce:85:84:94:fe:f1:26:
c5:21:d6:e5:0e:63:b3:46:d0:69:9b:ab:20:f8:ae:53:d2:de:
64:5a:84:e5:61:26:39:79:b7:c6:4e:11:c5:71:dc:fa:39:a3:
3f:79:3e:ba:54:9e:11:eb:d4:d7:5a:61:2c:47:36:e0:f9:ad:
88:d1:b2:d5:44:30:29:e3:0d:7d:63:81:62:51:c1:21:e3:5b:
bc:5b:65:07:42:76:35:bc:b9:2f:6f:b2:24:c9:2d:30:56:6f:
49:88:35:ee:2f:cb:dc:e1:18:b3:ed:f1:71:2d:a1:46:84:40:
8d:c3:80:aa:a9:8c:50:ea:61:53:96:1f:24:96:fd:75:43:eb:
d0:c9:90:6f:86:2d:d2:88:89:47:4c:62:7b:4b:b7:38:de:69:
ad:37:69:37:93:f2:f9:3d:cc:2a:1a:6d:d4:8f:86:cc:2e:1a:
de:b7:18:66:77:b8:f7:e3:88:bc:58:5d:c2:83:ff:2e:76:8f:
5e:83:0a:f4:83:e0:a7:82:5b:00:20:81:20:02:07:0a:02:00:
63:0b:ae:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlp3Pn+aVmWqQnqbHrFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzY4ZDM5ZjkzMjc5MTAwN2EwOTcyMDliMDk4M2ZlODU1
NjBjYjgwHhcNMjUxMTExMDkwMTQ3WhcNMjUxMTEyMDkwMTQ3WjAzMTEwLwYDVQQD
EygyZjJkMGQyYWE1NzhiODAwZjQ2MTY2MjYyMjIzMzhkYTMxMDhkYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EaPob8coZLqF4nKilQvFmMR6A3g
uirfWf73EesVssKQ5fmbg2pGatwXhvsgaIHoYs8vrkog+ix/SxM8LCRLCruC9z44
Xtcv6gQZkZofUTLsC78SLzVkHeRByQlnI2Q2NQJgC9uDQQKCR7gFuQEsWRRotXfW
pANOjVCWgthZb8N4nAGzEMYLaP3IuOlk/cjtwwiVTzJ6fRugTCCOPbQMpPKWpfeK
fstPzE6FisYaiyOv5d5f/LPjJXUJ6M2Q3FJR1XErltg7p3dl28ShX4MVFeISyTnJ
eCHBeo4/9NwHKd/VXOeuoMxWqsnguDmp3YQGz3YQ+hAfQ+R0rgo4Lyu08wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8tDSqleLgA9GFmJiIjONoxCNsmMB8GA1UdIwQY
MBaAFBB2jTn5MnkQB6CXIJsJg/6FVgy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUt
NzJjMzNkYWYzMTU2LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85M2MxN2UtODQ5MC00ZTkxLTk4MTUtNzJjMzNkYWYzMTU2
LzEvRUhhTk9ma3llUkFIb0pjZ213bURfb1ZXRExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANg9W6534
HPOPdbr7Z4wJMCoNaFvKUulMTkmD2NsOm8KsaiiIVABqRhGAW2EBXcDOhYSU/vEm
xSHW5Q5js0bQaZurIPiuU9LeZFqE5WEmOXm3xk4RxXHc+jmjP3k+ulSeEevU11ph
LEc24PmtiNGy1UQwKeMNfWOBYlHBIeNbvFtlB0J2Nby5L2+yJMktMFZvSYg17i/L
3OEYs+3xcS2hRoRAjcOAqqmMUOphU5YfJJb9dUPr0MmQb4Yt0oiJR0xie0u3ON5p
rTdpN5Py+T3MKhpt1I+GzC4a3rcYZne49+OIvFhdwoP/LnaPXoMK9IPgp4JbACCB
IAIHCgIAYwuuXg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:43 2025 by rpki-client