Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File: edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier: q+QvTc5sWSb93HxkdvUb3TaFtaAMqP4JEtFaWf3gTeY=
Subject key identifier: 1D:BA:47:03:10:93:12:AC:57:F0:D7:A4:C6:6E:44:FA:8E:92:14:42
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 019A13BB31D47AE5E9AD6B111ACC4E1725BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number: 16EC
Signing time: Fri 24 Oct 2025 01:00:26 +0000
Manifest this update: Fri 24 Oct 2025 01:00:26 +0000
Manifest next update: Sat 25 Oct 2025 01:00:26 +0000
Files and hashes: 1: V7sEyI8F_t4vSol_353f4Qx9U_8.roa (hash: 4ldqZs123aYTDkKfZo5JSLa9NcK75X2sS/vo6vIQh/0=)
2: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: xtl0uZOQPoopN12Y1g5qsukORKFeR5j+wQQ77ub0h+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:31:d4:7a:e5:e9:ad:6b:11:1a:cc:4e:17:25:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Oct 24 01:00:26 2025 GMT
Not After : Oct 25 01:00:26 2025 GMT
Subject: CN=1dba4703109312ac57f0d7a4c66e44fa8e921442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:6a:df:f7:c7:35:dc:ae:71:2d:61:74:94:
ee:21:59:78:cc:cc:bc:60:32:b6:bd:ff:8f:dc:7b:
31:a7:81:1f:da:28:0e:e7:70:33:0a:0b:b1:47:c7:
63:27:2a:ef:1b:f7:3a:28:b7:8a:33:46:12:9c:e6:
05:e5:4a:24:00:f8:2d:49:42:df:4d:c5:0b:1e:9c:
1f:6f:92:f3:ad:21:67:94:11:5c:c2:b3:6a:1e:8f:
d1:74:f8:5e:be:fc:02:be:fe:e1:6f:16:b0:71:11:
51:de:89:43:fe:bb:5b:83:be:29:d7:9b:d6:55:6e:
ba:9e:57:c2:d8:1a:d1:b3:7f:ef:90:24:00:5b:cd:
c5:48:ff:76:11:40:f9:ae:ec:e0:f7:b2:59:17:4a:
8f:52:53:f7:38:41:1a:bc:88:ca:f2:25:dc:a3:ed:
ca:99:cc:09:56:0e:70:74:5b:7e:ac:93:00:18:66:
cc:c7:66:3e:e0:5f:82:5f:2e:6a:fc:7a:81:02:bb:
3d:37:66:02:52:af:2a:3f:0a:a6:b3:96:71:00:c3:
3b:74:f5:d3:69:66:c4:ee:1b:a6:cb:83:c7:db:9e:
6f:ba:8c:3d:c0:93:ca:63:1f:26:11:1e:85:29:75:
5a:2b:d4:36:27:b1:7b:45:c5:76:ac:ad:b8:b8:a9:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:47:03:10:93:12:AC:57:F0:D7:A4:C6:6E:44:FA:8E:92:14:42
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2d:7a:4b:f8:ab:88:1f:66:ea:be:ba:1a:b1:ee:9c:5e:ae:
ee:9a:ff:d1:34:fb:ad:65:49:5d:24:f1:85:c4:12:86:2e:74:
b0:d6:64:c1:b2:4e:75:a8:cd:5f:80:23:3d:0a:b0:4b:5a:dc:
8b:07:44:bc:8a:5e:56:51:12:3a:9c:98:6e:57:22:f2:fb:36:
f7:64:8e:c9:e0:84:04:93:a4:47:9e:48:e7:87:83:cb:38:65:
10:7f:4f:fb:b8:5f:bc:c5:df:61:66:0a:28:e0:70:34:b0:fc:
4a:cf:43:b3:b9:c1:f1:88:17:a0:44:cf:7c:f9:62:18:9f:c0:
ad:7b:83:c3:c2:e8:0a:c5:fc:f5:19:76:aa:0c:de:d7:50:cd:
d2:a1:d6:90:aa:05:c6:60:97:ab:1c:64:f7:7f:73:f3:c8:d2:
11:ca:f2:90:e3:9c:85:0b:15:e3:11:9f:ff:5a:dc:27:c4:59:
a3:e5:71:4e:76:72:5c:14:1a:0b:16:8e:f5:30:c3:75:5c:e0:
cb:8f:9c:e5:24:83:94:11:45:d2:2a:9c:8b:c7:82:f6:cd:11:
c8:aa:b4:5c:94:bc:c3:fa:60:f2:5f:42:1c:45:49:79:9d:3b:
88:d3:74:79:19:5d:9e:c1:b2:08:0a:43:97:40:51:f0:82:f2:
63:15:a5:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoTuzHUeuXprWsRGsxOFyW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDE1Nzg2ZTY0NGQ0OTdjYjdhMmIzMjUzYmQ0M2Q5MmU0
OWM1YWIwHhcNMjUxMDI0MDEwMDI2WhcNMjUxMDI1MDEwMDI2WjAzMTEwLwYDVQQD
EygxZGJhNDcwMzEwOTMxMmFjNTdmMGQ3YTRjNjZlNDRmYThlOTIxNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZFq3/fHNdyucS1hdJTuIVl4zMy8
YDK2vf+P3Hsxp4Ef2igO53AzCguxR8djJyrvG/c6KLeKM0YSnOYF5UokAPgtSULf
TcULHpwfb5LzrSFnlBFcwrNqHo/RdPhevvwCvv7hbxawcRFR3olD/rtbg74p15vW
VW66nlfC2BrRs3/vkCQAW83FSP92EUD5ruzg97JZF0qPUlP3OEEavIjK8iXco+3K
mcwJVg5wdFt+rJMAGGbMx2Y+4F+CXy5q/HqBArs9N2YCUq8qPwqms5ZxAMM7dPXT
aWbE7humy4PH255vuow9wJPKYx8mER6FKXVaK9Q2J7F7RcV2rK24uKm4sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB26RwMQkxKsV/DXpMZuRPqOkhRCMB8GA1UdIwQY
MBaAFHnRV4bmRNSXy3orMlO9Q9kuScWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85NzJkYTEtYzJjMy00NjRlLWIxM2Yt
ZjJhZjUxMTYzYTYwLzEvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS85NzJkYTEtYzJjMy00NjRlLWIxM2YtZjJhZjUxMTYzYTYw
LzEvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATy16S/ir
iB9m6r66GrHunF6u7pr/0TT7rWVJXSTxhcQShi50sNZkwbJOdajNX4AjPQqwS1rc
iwdEvIpeVlESOpyYblci8vs292SOyeCEBJOkR55I54eDyzhlEH9P+7hfvMXfYWYK
KOBwNLD8Ss9Ds7nB8YgXoETPfPliGJ/ArXuDw8LoCsX89Rl2qgze11DN0qHWkKoF
xmCXqxxk939z88jSEcrykOOchQsV4xGf/1rcJ8RZo+VxTnZyXBQaCxaO9TDDdVzg
y4+c5SSDlBFF0iqci8eC9s0RyKq0XJS8w/pg8l9CHEVJeZ07iNN0eRldnsGyCApD
l0BR8ILyYxWlzg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 05:58:54 2025 by rpki-client