Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
File: eV1ljeA6jc0LbfbnZscH9P49FS4.mft (raw, json)
Hash identifier: TyUP6yZZn5f/rtVwZwN07c8ySWbz2k1p9XtcRXn27+M=
Subject key identifier: 6B:26:F7:4F:D8:4C:6F:E8:D8:56:BA:75:6A:02:79:F3:3F:E5:C7:75
Authority key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
Certificate issuer: /CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Certificate serial: 019A7112BCF6ADBFB841B7B6DF4DE90AE919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: eV1ljeA6jc0LbfbnZscH9P49FS4.crl (hash: WCx1LHdVaFYROq5Vzam1OagYIkhfAvzXV/CN/HKfjhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bc:f6:ad:bf:b8:41:b7:b6:df:4d:e9:0a:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=6b26f74fd84c6fe8d856ba756a0279f33fe5c775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:cf:b1:5f:37:c7:c1:39:86:36:12:df:b0:
36:55:d7:a0:0b:8a:9f:57:c1:e7:02:17:a5:32:77:
79:64:a3:96:cb:0c:ae:7c:70:5d:b4:4f:15:b5:1b:
a1:c8:4b:ec:1a:7b:16:7c:10:cc:61:c6:71:f2:e9:
e4:4a:a5:b0:1f:b6:0e:54:37:85:11:fa:75:68:43:
85:fa:db:3c:1d:4a:ae:fe:8c:54:46:39:07:80:80:
22:72:aa:88:b6:b1:e8:4f:c6:67:7b:78:40:90:2b:
41:aa:ca:ee:54:cb:1d:33:86:fc:93:4f:39:10:17:
dd:56:bf:0a:47:60:aa:5c:93:b8:cc:27:66:af:06:
de:e8:c1:08:17:1e:bc:24:a1:ec:57:1d:69:e7:7b:
fe:28:b8:00:2f:53:7c:2a:a4:fe:db:63:ba:61:70:
8e:a2:e4:e7:e3:9f:09:f5:59:94:57:a6:65:33:0e:
c3:bb:f2:2f:4d:e2:28:de:50:b9:9a:38:a7:e4:77:
4f:37:6d:98:9f:e6:d4:9e:18:bf:e6:a9:72:ae:fe:
33:0d:c0:76:0e:76:f6:02:9b:30:7b:9a:a5:62:30:
13:64:70:81:b0:84:01:48:cc:08:8c:99:95:8e:f8:
42:21:17:16:43:ab:45:02:85:17:7f:da:22:e4:f5:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:26:F7:4F:D8:4C:6F:E8:D8:56:BA:75:6A:02:79:F3:3F:E5:C7:75
X509v3 Authority Key Identifier:
keyid:79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8d:1c:ed:f4:9a:21:81:9e:5e:ec:e2:f2:bc:b2:3b:77:d2:
8e:8a:99:d8:1c:6c:c1:57:c2:44:46:bb:e6:91:de:08:bd:4c:
63:f8:31:8d:11:11:9c:07:cc:b5:17:dd:a1:ce:19:a5:de:8e:
35:29:7e:37:fd:d8:c1:e1:fa:59:ff:42:d9:2b:15:33:30:e1:
62:53:bc:df:ce:2a:32:09:6a:00:d3:de:e3:16:e1:3a:75:95:
e0:7a:b3:fc:8f:e4:b1:89:34:06:13:39:44:45:c9:8c:af:f9:
ae:98:6b:65:96:33:7c:40:07:79:e2:21:b1:af:87:00:30:f5:
da:c5:35:e5:d0:3e:ff:cc:c3:b8:57:3a:9f:a6:66:38:a8:09:
42:50:f1:58:1f:48:d3:7b:66:74:1c:a8:d9:ef:52:9c:ce:ce:
39:2a:3f:5d:06:ec:c4:06:2e:57:f9:f6:9e:59:7a:f5:37:5f:
3c:bc:ec:b7:83:f5:18:62:62:30:9c:89:58:94:ff:89:80:90:
e0:70:78:23:b7:32:45:05:3b:86:e3:c2:d7:53:db:a7:fc:6f:
1c:0d:c7:67:3a:0b:b4:1c:b2:de:85:e8:3d:af:10:de:83:25:
bb:0d:9a:a3:b7:0e:5c:c7:41:ae:5f:02:ec:99:c9:05:1f:77:
66:0c:8f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxErz2rb+4Qbe2303pCukZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NWQ2NThkZTAzYThkY2QwYjZkZjZlNzY2YzcwN2Y0ZmUz
ZDE1MmUwHhcNMjUxMTExMDQwMDQ0WhcNMjUxMTEyMDQwMDQ0WjAzMTEwLwYDVQQD
Eyg2YjI2Zjc0ZmQ4NGM2ZmU4ZDg1NmJhNzU2YTAyNzlmMzNmZTVjNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhnPsV83x8E5hjYS37A2VdegC4qf
V8HnAhelMnd5ZKOWywyufHBdtE8VtRuhyEvsGnsWfBDMYcZx8unkSqWwH7YOVDeF
Efp1aEOF+ts8HUqu/oxURjkHgIAicqqItrHoT8Zne3hAkCtBqsruVMsdM4b8k085
EBfdVr8KR2CqXJO4zCdmrwbe6MEIFx68JKHsVx1p53v+KLgAL1N8KqT+22O6YXCO
ouTn458J9VmUV6ZlMw7Du/IvTeIo3lC5mjin5HdPN22Yn+bUnhi/5qlyrv4zDcB2
Dnb2Apswe5qlYjATZHCBsIQBSMwIjJmVjvhCIRcWQ6tFAoUXf9oi5PXnCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsm90/YTG/o2Fa6dWoCefM/5cd1MB8GA1UdIwQY
MBaAFHldZY3gOo3NC23252bHB/T+PRUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZjg2ODQtYTc2MS00NTEwLWFjMmYt
N2I3NTY1MGNiMmNlLzEvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lZjg2ODQtYTc2MS00NTEwLWFjMmYtN2I3NTY1MGNiMmNl
LzEvZVYxbGplQTZqYzBMYmZiblpzY0g5UDQ5RlM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt40c7fSa
IYGeXuzi8ryyO3fSjoqZ2BxswVfCREa75pHeCL1MY/gxjRERnAfMtRfdoc4Zpd6O
NSl+N/3YweH6Wf9C2SsVMzDhYlO8384qMglqANPe4xbhOnWV4Hqz/I/ksYk0BhM5
REXJjK/5rphrZZYzfEAHeeIhsa+HADD12sU15dA+/8zDuFc6n6ZmOKgJQlDxWB9I
03tmdByo2e9SnM7OOSo/XQbsxAYuV/n2nll69TdfPLzst4P1GGJiMJyJWJT/iYCQ
4HB4I7cyRQU7huPC11Pbp/xvHA3HZzoLtByy3oXoPa8Q3oMluw2ao7cOXMdBrl8C
7JnJBR93ZgyPDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:55 2025 by rpki-client