Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier: LFfC+KBEsYcNV4O0h4Ca7hUk8Lvly+TjbsZJTWx/MPA=
Subject key identifier: 7F:CA:EF:FB:59:25:1F:5A:85:6C:59:07:83:EA:4F:59:79:B7:8E:19
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 019A7112B60E603F1BF315CA246FCAC4F8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number: 0EE3
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: wvsVqKrW27lUaJInDBUeZIRHmojnf/6+En+yBS7uJDc=)
2: iNP53awYopMvAC4_B7BQl71kOxY.roa (hash: bB0RVg76/44F7S9NnPgzE3dfYBZqeAvXewkbyz58CrI=)
3: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (hash: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=)
4: tO7FKCFax-gtGeKJuusgZ6pHQQ8.roa (hash: o1Lh17vyaKAVv+dEziVl9qAFWYzZNADmVMYgNFzVQxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b6:0e:60:3f:1b:f3:15:ca:24:6f:ca:c4:f8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=7fcaeffb59251f5a856c590783ea4f5979b78e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:7b:50:b8:65:85:4d:f5:29:43:5d:a9:cf:
c1:c1:60:f5:42:3a:6a:7e:8d:c6:c2:24:d8:bf:72:
98:25:9d:43:3a:c3:a4:5c:5f:a9:3f:cf:0a:c3:06:
e9:05:4d:44:27:73:a1:25:fa:fb:12:1c:4e:81:b7:
1f:1a:ef:f7:22:34:c8:1f:dc:19:ff:d1:c7:db:b6:
9b:bb:04:32:e7:4d:e3:46:d0:d4:a0:65:5e:e9:80:
13:08:59:17:f7:ba:dc:b3:71:11:f4:54:2b:34:6f:
d9:6e:fa:5d:b8:3c:45:17:47:e5:24:21:c7:16:1f:
b0:94:be:9b:60:6f:0f:92:61:d0:82:5c:2b:90:e2:
a0:cc:19:d0:e3:13:7a:f1:da:cb:f0:e2:27:f9:14:
70:08:e6:57:f2:06:01:ef:b7:99:4e:a7:a8:68:63:
c9:33:d5:3e:ad:bb:cc:07:9a:00:a8:f8:2f:9a:63:
b2:73:b9:36:09:27:ec:3b:01:c3:dd:b8:4f:ec:6d:
8b:6e:73:bb:99:cf:61:c7:e9:46:38:12:c8:5f:fd:
2c:c9:7c:cc:55:4f:04:aa:e2:21:f0:03:e1:fc:91:
c7:33:aa:69:fe:dc:ff:36:08:7a:b1:d9:00:46:0d:
fa:c0:0e:1b:29:20:48:30:75:08:44:0f:0d:09:fc:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CA:EF:FB:59:25:1F:5A:85:6C:59:07:83:EA:4F:59:79:B7:8E:19
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:57:d4:89:24:55:43:88:17:9f:34:4b:63:7b:bc:54:6c:
68:58:0d:d6:45:1d:40:b9:54:a3:52:95:93:89:f6:97:9e:51:
60:00:de:4c:7f:2d:d1:a1:f9:12:58:aa:c9:f1:ab:62:e8:e9:
6c:b1:a2:0a:cb:cd:d8:7e:87:33:e9:24:44:f1:44:ab:aa:76:
dd:34:c3:2f:cc:21:62:9c:c9:1c:a3:48:2d:68:e1:9d:19:57:
b4:83:16:47:ef:2d:c0:ba:90:79:48:b8:6b:d2:41:67:66:2e:
02:00:f5:eb:a8:fd:63:c1:8b:38:8b:2b:ad:6b:8e:18:62:1f:
b8:a7:09:80:68:f6:e9:27:74:59:bd:a4:38:da:f7:39:cc:19:
1a:39:4d:65:ec:da:bd:e9:af:3f:1f:38:da:0d:d0:68:73:fe:
e4:e1:d0:d4:fe:9c:14:18:d9:00:96:7a:33:62:37:c2:1b:47:
d1:de:e2:62:0b:ad:88:07:c1:7f:0b:af:88:3e:3d:b0:61:89:
e4:69:56:a1:e6:69:11:dd:35:52:9a:63:cf:b8:71:f7:96:a4:
f2:66:90:25:70:b8:50:e9:a8:05:a1:dd:f8:4f:c6:85:fc:21:
cb:7e:fc:6d:67:59:6a:55:9a:dc:68:56:63:57:a3:82:ef:8f:
ee:03:9f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxErYOYD8b8xXKJG/KxPjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1
ZThmNTgwHhcNMjUxMTExMDQwMDQyWhcNMjUxMTEyMDQwMDQyWjAzMTEwLwYDVQQD
Eyg3ZmNhZWZmYjU5MjUxZjVhODU2YzU5MDc4M2VhNGY1OTc5Yjc4ZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK97ULhlhU31KUNdqc/BwWD1Qjpq
fo3GwiTYv3KYJZ1DOsOkXF+pP88KwwbpBU1EJ3OhJfr7EhxOgbcfGu/3IjTIH9wZ
/9HH27abuwQy503jRtDUoGVe6YATCFkX97rcs3ER9FQrNG/ZbvpduDxFF0flJCHH
Fh+wlL6bYG8PkmHQglwrkOKgzBnQ4xN68drL8OIn+RRwCOZX8gYB77eZTqeoaGPJ
M9U+rbvMB5oAqPgvmmOyc7k2CSfsOwHD3bhP7G2LbnO7mc9hx+lGOBLIX/0syXzM
VU8EquIh8APh/JHHM6pp/tz/Ngh6sdkARg36wA4bKSBIMHUIRA8NCfy7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/K7/tZJR9ahWxZB4PqT1l5t44ZMB8GA1UdIwQY
MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt
YjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi
LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba1X1Ikk
VUOIF580S2N7vFRsaFgN1kUdQLlUo1KVk4n2l55RYADeTH8t0aH5EliqyfGrYujp
bLGiCsvN2H6HM+kkRPFEq6p23TTDL8whYpzJHKNILWjhnRlXtIMWR+8twLqQeUi4
a9JBZ2YuAgD166j9Y8GLOIsrrWuOGGIfuKcJgGj26Sd0Wb2kONr3OcwZGjlNZeza
vemvPx842g3QaHP+5OHQ1P6cFBjZAJZ6M2I3whtH0d7iYgutiAfBfwuviD49sGGJ
5GlWoeZpEd01Uppjz7hx95ak8maQJXC4UOmoBaHd+E/Ghfwhy378bWdZalWa3GhW
Y1ejgu+P7gOfmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client