Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: Qlral+jjm1kuu1dcj9V9RybYF7ePgas8ziReCb1uSxg=
Subject key identifier: DE:FE:8D:5E:6B:4D:E4:2E:8F:33:7F:A0:E5:1D:00:22:20:E6:69:A8
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019A7293743219073C3F2313992C258E12E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 10E7
Signing time: Tue 11 Nov 2025 11:00:57 +0000
Manifest this update: Tue 11 Nov 2025 11:00:57 +0000
Manifest next update: Wed 12 Nov 2025 11:00:57 +0000
Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=)
2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: +A/UIC3sKZnTehZ0ljII0QxzfqiHPddS5e/Zh9ht1Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:74:32:19:07:3c:3f:23:13:99:2c:25:8e:12:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Nov 11 11:00:57 2025 GMT
Not After : Nov 12 11:00:57 2025 GMT
Subject: CN=defe8d5e6b4de42e8f337fa0e51d002220e669a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:08:e5:3b:91:f1:c2:8c:a8:c4:73:38:a1:
aa:a6:ff:19:32:4e:40:a6:f1:03:15:61:73:03:d4:
d6:2e:ee:cd:0f:02:55:5b:a3:79:87:75:7f:78:96:
13:df:c0:f1:72:bd:0f:e8:89:de:76:c5:2c:1f:b0:
81:c7:c4:eb:ea:40:69:c0:54:98:f9:62:52:73:43:
07:5b:5e:5a:24:08:23:c8:c9:17:98:6e:8b:ab:17:
30:ab:b6:11:e3:09:5e:0e:60:53:1a:15:18:6b:df:
aa:de:b4:78:54:79:ec:1c:ec:74:ac:d6:ea:40:39:
a6:dc:43:89:6c:92:9e:23:80:f5:c0:00:bf:80:10:
f0:0c:bf:5e:fe:c1:7a:5f:de:a7:7f:14:94:09:b9:
67:9d:5b:37:df:23:1d:cc:a5:75:e4:3c:fd:b2:14:
7f:74:ad:17:fb:d2:8a:ec:af:73:a5:ff:6e:d6:df:
4d:43:13:fe:1d:7d:d4:6c:7e:18:0d:4b:c8:a5:b8:
fa:41:e4:c7:e1:aa:db:f8:5a:23:4f:d9:83:77:c1:
be:0d:77:33:80:4d:4d:07:a4:f4:97:0f:38:60:91:
92:cd:a2:4a:ac:32:8c:b2:79:37:21:ab:46:0d:08:
e2:da:c4:49:dd:fd:4e:8f:a6:82:75:ba:72:dc:f5:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FE:8D:5E:6B:4D:E4:2E:8F:33:7F:A0:E5:1D:00:22:20:E6:69:A8
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:99:db:eb:9e:82:36:7b:7b:79:2b:f8:98:86:3f:b7:4d:db:
6d:c3:a2:9e:f2:d8:14:9b:5e:be:4d:ae:94:5b:73:ee:9f:2b:
95:d0:81:1c:4d:0d:7b:4a:c7:20:de:a0:e5:e6:0f:c5:15:66:
32:b1:5b:ab:94:a3:8f:ea:e6:36:af:3e:f5:06:e5:ae:54:fa:
98:ad:4a:98:a9:aa:c1:ed:44:a9:c0:0c:5e:84:56:19:6e:4e:
c3:69:a7:29:24:17:80:a7:f4:c2:a4:8c:b1:e4:36:8f:89:d3:
d5:2e:b3:fd:87:91:f0:d6:c4:d3:1a:29:10:9f:37:e6:72:2a:
d8:20:28:5a:b9:d2:38:08:ff:f0:48:51:ad:2c:e5:77:99:2a:
76:db:fe:e5:14:53:67:54:c1:c9:75:86:ac:8f:38:3e:a9:f5:
cf:6e:59:a6:c4:66:a9:f7:ab:56:6c:52:b6:97:66:e6:a0:38:
d5:25:61:66:d4:3d:c9:d2:af:be:4e:05:33:31:05:2d:55:81:
fd:72:75:29:6d:99:fe:a7:a8:29:92:c7:1c:89:9c:e7:cd:4a:
2f:e3:ea:47:1f:73:cd:45:ab:0e:de:91:90:a1:a7:2c:c1:99:
62:e4:15:c5:01:0a:99:0c:b3:51:34:b6:1c:7d:a2:10:f8:8a:
8a:33:ac:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk3QyGQc8PyMTmSwljhLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMGU0NGM5MmFkNDkzMTE4YTRhZDJiYTgxMTQ1ZjFkMzRh
MThiY2EwHhcNMjUxMTExMTEwMDU3WhcNMjUxMTEyMTEwMDU3WjAzMTEwLwYDVQQD
EyhkZWZlOGQ1ZTZiNGRlNDJlOGYzMzdmYTBlNTFkMDAyMjIwZTY2OWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI4I5TuR8cKMqMRzOKGqpv8ZMk5A
pvEDFWFzA9TWLu7NDwJVW6N5h3V/eJYT38Dxcr0P6InedsUsH7CBx8Tr6kBpwFSY
+WJSc0MHW15aJAgjyMkXmG6Lqxcwq7YR4wleDmBTGhUYa9+q3rR4VHnsHOx0rNbq
QDmm3EOJbJKeI4D1wAC/gBDwDL9e/sF6X96nfxSUCblnnVs33yMdzKV15Dz9shR/
dK0X+9KK7K9zpf9u1t9NQxP+HX3UbH4YDUvIpbj6QeTH4arb+FojT9mDd8G+DXcz
gE1NB6T0lw84YJGSzaJKrDKMsnk3IatGDQji2sRJ3f1Oj6aCdbpy3PUYXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7+jV5rTeQujzN/oOUdACIg5mmoMB8GA1UdIwQY
MBaAFBAORMkq1JMRikrSuoEUXx00oYvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUt
NGY1MjEyMjkwNzY5LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUtNGY1MjEyMjkwNzY5
LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZnb656C
Nnt7eSv4mIY/t03bbcOinvLYFJtevk2ulFtz7p8rldCBHE0Ne0rHIN6g5eYPxRVm
MrFbq5Sjj+rmNq8+9QblrlT6mK1KmKmqwe1EqcAMXoRWGW5Ow2mnKSQXgKf0wqSM
seQ2j4nT1S6z/YeR8NbE0xopEJ835nIq2CAoWrnSOAj/8EhRrSzld5kqdtv+5RRT
Z1TByXWGrI84Pqn1z25ZpsRmqferVmxStpdm5qA41SVhZtQ9ydKvvk4FMzEFLVWB
/XJ1KW2Z/qeoKZLHHImc581KL+PqRx9zzUWrDt6RkKGnLMGZYuQVxQEKmQyzUTS2
HH2iEPiKijOsaQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:15 2025 by rpki-client