Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier: Lam7TTFiYiHUxhlMt5BRvwDbMO7GtWmz9ijxT43wUbM=
Subject key identifier: EF:B1:35:59:EC:0C:E0:DB:5B:10:E4:54:50:BC:56:01:A3:28:09:DF
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 019A71EE9C445D630EE07372EB589FFEC8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number: 13BC
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=)
2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: ld+WWdN2CqD7sPW0Smbf55sHho5QAZhF2Ilt+MbAeSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9c:44:5d:63:0e:e0:73:72:eb:58:9f:fe:c8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=efb13559ec0ce0db5b10e45450bc5601a32809df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:8c:64:0d:74:b8:e0:01:e0:37:51:a0:f5:
e9:07:3a:6d:52:a0:dd:83:bc:09:e4:67:83:88:54:
a8:f2:84:b4:57:7f:e1:f9:67:5a:43:9b:0b:a9:1b:
cb:8c:4f:91:a9:3a:28:30:e5:12:bb:6a:f4:cd:3b:
e4:b0:7d:11:33:c9:22:3c:14:80:c1:93:2a:6b:b8:
3c:42:d7:61:f5:ca:9d:e0:7b:03:31:30:6b:82:b8:
05:79:d4:90:df:b9:86:39:48:3f:54:40:ca:03:ac:
fb:ee:eb:91:db:2e:e1:12:82:b5:a3:55:48:d2:59:
24:7c:32:c3:e1:a7:01:67:8a:55:2d:a2:77:f8:06:
13:2f:2f:a5:ce:99:b1:6d:28:ab:b9:8c:e9:c2:d6:
b6:d8:72:50:0e:ff:26:6d:d8:b4:e6:f2:f8:85:43:
8e:51:8e:01:32:bd:8e:94:f2:10:00:f4:dc:a7:9a:
b6:c2:eb:54:63:c5:78:9c:ae:05:bf:5d:9f:65:11:
48:9f:c0:31:90:66:18:64:10:6c:09:5d:99:6a:8f:
23:fe:cd:b0:59:8a:67:d8:85:6e:3e:52:d9:cc:90:
8f:e8:4c:12:7f:9f:b1:0d:c2:4a:e3:66:6a:c7:3a:
98:b6:da:2b:0a:81:67:4c:c3:e5:d2:7b:7d:95:99:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B1:35:59:EC:0C:E0:DB:5B:10:E4:54:50:BC:56:01:A3:28:09:DF
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:85:e7:3a:47:5a:ed:f4:de:01:d5:3f:b5:01:4d:c2:9e:04:
96:74:55:cf:87:72:d2:5d:23:aa:4a:7b:68:f9:97:81:94:8c:
14:c0:c0:fc:fa:f8:c8:bc:cd:56:83:2c:a7:72:00:a4:c5:15:
a7:66:ec:a7:99:46:2e:25:74:7f:a3:47:63:d6:0a:b8:a6:ad:
50:ad:25:83:b4:a6:58:ba:b6:b9:7c:59:4e:15:f6:02:2a:ab:
55:7b:20:c2:62:c7:5b:59:4d:58:af:2f:9a:b1:bf:df:e8:1d:
18:5b:74:2a:58:4d:e0:20:16:2b:bc:6a:54:cf:1d:6e:72:8d:
13:8a:07:02:ab:33:a4:65:99:0e:51:dc:f5:bf:fd:c7:a1:60:
ee:9e:7a:ee:71:d1:a5:8a:bf:dd:20:91:fe:bc:0c:4b:ff:4f:
51:27:59:71:d0:18:c6:12:7c:8e:f9:4b:d0:44:fb:56:49:e4:
03:10:16:6e:b7:83:aa:86:ed:f6:c3:81:cf:dd:bf:1b:1f:ba:
d9:00:99:59:e6:19:01:71:8b:32:e6:4a:2c:64:03:91:2d:83:
2c:c4:bc:32:81:87:22:69:98:b1:e7:cb:af:79:08:0c:c0:95:
54:91:a6:aa:28:b0:1e:b1:84:c3:e3:ba:f0:70:48:f2:c9:70:
56:22:5f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pxEXWMO4HNy61if/sjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZTdiYThjMDg4NTNiZTU1NGM1OTRkZWQxNTZhNjk4M2Vi
YTEwNTUwHhcNMjUxMTExMDgwMDU0WhcNMjUxMTEyMDgwMDU0WjAzMTEwLwYDVQQD
EyhlZmIxMzU1OWVjMGNlMGRiNWIxMGU0NTQ1MGJjNTYwMWEzMjgwOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KMZA10uOAB4DdRoPXpBzptUqDd
g7wJ5GeDiFSo8oS0V3/h+WdaQ5sLqRvLjE+RqTooMOUSu2r0zTvksH0RM8kiPBSA
wZMqa7g8Qtdh9cqd4HsDMTBrgrgFedSQ37mGOUg/VEDKA6z77uuR2y7hEoK1o1VI
0lkkfDLD4acBZ4pVLaJ3+AYTLy+lzpmxbSiruYzpwta22HJQDv8mbdi05vL4hUOO
UY4BMr2OlPIQAPTcp5q2wutUY8V4nK4Fv12fZRFIn8AxkGYYZBBsCV2Zao8j/s2w
WYpn2IVuPlLZzJCP6EwSf5+xDcJK42ZqxzqYttorCoFnTMPl0nt9lZm90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+xNVnsDODbWxDkVFC8VgGjKAnfMB8GA1UdIwQY
MBaAFHjnuowIhTvlVMWU3tFWppg+uhBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTIt
NWVhZjllMTBkODVjLzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTItNWVhZjllMTBkODVj
LzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIXnOkda
7fTeAdU/tQFNwp4ElnRVz4dy0l0jqkp7aPmXgZSMFMDA/Pr4yLzNVoMsp3IApMUV
p2bsp5lGLiV0f6NHY9YKuKatUK0lg7SmWLq2uXxZThX2AiqrVXsgwmLHW1lNWK8v
mrG/3+gdGFt0KlhN4CAWK7xqVM8dbnKNE4oHAqszpGWZDlHc9b/9x6Fg7p567nHR
pYq/3SCR/rwMS/9PUSdZcdAYxhJ8jvlL0ET7VknkAxAWbreDqobt9sOBz92/Gx+6
2QCZWeYZAXGLMuZKLGQDkS2DLMS8MoGHImmYsefLr3kIDMCVVJGmqiiwHrGEw+O6
8HBI8slwViJfMQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:08 2025 by rpki-client