Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File: Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier: DYIgFs0znZVnjSAiQPwXR9D5O00oTS/aL3knm9T2Iqg=
Subject key identifier: 58:65:7B:3E:44:2F:20:76:89:AE:25:CA:77:66:34:74:37:F3:17:DF
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 019A0AB8661E4C9078A7B7312CB0FB2B1944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number: 1703
Signing time: Wed 22 Oct 2025 07:00:48 +0000
Manifest this update: Wed 22 Oct 2025 07:00:48 +0000
Manifest next update: Thu 23 Oct 2025 07:00:48 +0000
Files and hashes: 1: 4XQY4JUsPqpTR-IRkgGIXdttap8.roa (hash: XSSiKVwP/EIHTyAZzuUfnCWA6Nc9NZgrm28O2+2217Y=)
2: 6aH0GUkty0zRVM49hltz0E26o9g.roa (hash: B/btaQwmZwkS77oTf9pVbleylcjeDQp/znaQQHS+UkE=)
3: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: ZWYzjxQn+d4OT+1uewmUGX+3MyQmXm2dNX+Lxf6qi08=)
4: HwX-edPrb5YTj1nsywewpB-a_TU.roa (hash: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=)
5: Pti_2wHf4nDoTULmHuDpJnb60tw.roa (hash: 6vLb3cXdRGpIGB8yJspOGZTYqcFejvNzXH+8oL9C5OA=)
6: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
7: fCbpeuPkw7-WeltvV11giyI0D1c.roa (hash: ihUU/iNj25uKJCCOhJiQAWWJOBmcpbht1KhIqzbV5Nw=)
8: yyk6Di2XbNlkRGc89Nu-_03BSyA.roa (hash: fjtXv9Ycls9ttlFxVrAfyjqDfoCq3GWEcLByl3LaF+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:66:1e:4c:90:78:a7:b7:31:2c:b0:fb:2b:19:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Oct 22 07:00:48 2025 GMT
Not After : Oct 23 07:00:48 2025 GMT
Subject: CN=58657b3e442f207689ae25ca7766347437f317df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:f8:04:87:3f:8c:5e:80:1b:33:f1:8b:61:
66:6f:91:ca:d3:51:3b:3e:c8:c6:5c:d4:38:f1:e3:
79:25:7a:1c:d2:be:8b:12:df:28:d4:b4:93:7b:d3:
72:9c:3e:c0:f3:52:89:54:e9:1a:f6:35:5d:78:59:
64:e5:ed:c1:ad:b0:aa:ed:7e:28:b8:16:fe:e9:98:
b8:8e:5c:54:67:68:2f:a8:ae:ea:b2:8c:1f:53:e7:
ba:a0:1b:c6:ed:06:7e:5b:ff:53:90:55:4e:03:23:
31:4c:bf:f9:cd:38:0d:9c:dc:6e:21:74:d1:7b:d7:
10:19:07:78:30:b1:21:f9:87:9c:3a:8b:c5:fb:23:
0f:a1:0a:72:03:60:88:be:33:a3:82:be:82:73:0d:
62:40:4d:86:d5:a4:1a:97:36:4c:40:86:51:16:72:
b6:d2:c4:6e:ae:83:f2:de:9b:6c:5c:f6:e3:82:32:
e3:d1:85:e4:66:4c:bb:2d:47:dd:b8:d8:01:93:a8:
e8:69:0b:cf:84:00:de:85:db:1e:95:84:e9:f7:af:
49:78:6a:3c:48:12:15:fd:01:79:b1:72:8d:1f:6a:
7d:44:8b:ae:51:e8:49:44:87:0d:f4:a7:8a:d1:95:
01:82:ef:5a:34:db:5a:9d:98:9e:ba:2b:69:cc:63:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:7B:3E:44:2F:20:76:89:AE:25:CA:77:66:34:74:37:F3:17:DF
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f3:5a:c9:04:b0:9c:fe:5d:e9:22:6d:72:87:2f:ed:11:34:
44:8a:dc:d1:c3:fd:0d:6a:e3:6f:25:e9:3d:5c:7b:00:20:a6:
db:fa:3d:84:51:97:9a:ad:3e:a3:a9:c9:5c:8b:15:8a:1b:a0:
cd:b3:c6:e2:72:b6:33:a9:55:bb:fd:a1:53:b5:a5:f6:b7:a1:
95:ec:c9:f9:df:7a:7e:b7:1f:7c:0a:bf:4a:78:e6:2e:4c:cb:
49:3f:7d:86:38:5b:db:c1:d3:27:66:0e:c6:4d:70:c8:13:c5:
bd:bd:5a:7a:68:c7:82:c7:8a:f2:70:37:68:d7:c4:e9:5b:64:
4d:5a:e3:a3:44:22:5e:bb:95:05:7e:dc:3d:90:67:b4:19:7f:
8a:6a:cf:5c:71:63:69:1a:95:a7:44:e4:e3:30:85:94:4c:06:
bb:bc:b1:a2:69:80:cc:e4:2c:91:c8:82:63:5d:a7:87:03:5b:
7e:40:d1:5a:3e:b4:37:64:a8:de:cc:5b:97:57:79:9c:58:1e:
3f:df:de:30:f0:46:f8:97:dc:67:27:8a:56:4b:30:99:84:3e:
5e:e2:7d:dd:72:77:89:94:fc:77:cb:84:58:f1:62:58:8c:0d:
09:9c:58:1b:8b:17:da:b2:23:05:5b:2d:bb:5f:28:7d:02:70:
12:1e:7c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoKuGYeTJB4p7cxLLD7KxlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjUxMDIyMDcwMDQ4WhcNMjUxMDIzMDcwMDQ4WjAzMTEwLwYDVQQD
Eyg1ODY1N2IzZTQ0MmYyMDc2ODlhZTI1Y2E3NzY2MzQ3NDM3ZjMxN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIX4BIc/jF6AGzPxi2Fmb5HK01E7
PsjGXNQ48eN5JXoc0r6LEt8o1LSTe9NynD7A81KJVOka9jVdeFlk5e3BrbCq7X4o
uBb+6Zi4jlxUZ2gvqK7qsowfU+e6oBvG7QZ+W/9TkFVOAyMxTL/5zTgNnNxuIXTR
e9cQGQd4MLEh+YecOovF+yMPoQpyA2CIvjOjgr6Ccw1iQE2G1aQalzZMQIZRFnK2
0sRuroPy3ptsXPbjgjLj0YXkZky7LUfduNgBk6joaQvPhADehdselYTp969JeGo8
SBIV/QF5sXKNH2p9RIuuUehJRIcN9KeK0ZUBgu9aNNtanZieuitpzGO/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhlez5ELyB2ia4lyndmNHQ38xffMB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivNayQSw
nP5d6SJtcocv7RE0RIrc0cP9DWrjbyXpPVx7ACCm2/o9hFGXmq0+o6nJXIsVihug
zbPG4nK2M6lVu/2hU7Wl9rehlezJ+d96frcffAq/SnjmLkzLST99hjhb28HTJ2YO
xk1wyBPFvb1aemjHgseK8nA3aNfE6VtkTVrjo0QiXruVBX7cPZBntBl/imrPXHFj
aRqVp0Tk4zCFlEwGu7yxommAzOQskciCY12nhwNbfkDRWj60N2So3sxbl1d5nFge
P9/eMPBG+JfcZyeKVkswmYQ+XuJ93XJ3iZT8d8uEWPFiWIwNCZxYG4sX2rIjBVst
u18ofQJwEh58uQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 17:41:29 2025 by rpki-client