Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: kMgwwhYQev9gb3h2h3oksUW4OX7xWVUgjj32JVZgFsY=
Subject key identifier: 6F:14:76:74:06:C8:9A:BE:CA:8A:0D:70:B3:FC:42:AE:9A:27:65:D2
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019A2109087FD5AB551712FBFD0CD5035626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 15:00:31 +0000
Manifest this update: Sun 26 Oct 2025 15:00:31 +0000
Manifest next update: Mon 27 Oct 2025 15:00:31 +0000
Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: OW3M2JBO7MQwmpBlCyFROClBEWo6tpqeLhSjRB0tbdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:08:7f:d5:ab:55:17:12:fb:fd:0c:d5:03:56:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Oct 26 15:00:31 2025 GMT
Not After : Oct 27 15:00:31 2025 GMT
Subject: CN=6f14767406c89abeca8a0d70b3fc42ae9a2765d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:e1:65:6d:b5:5a:61:65:e1:6b:d3:0d:00:
0f:4c:65:87:b2:4b:a0:e4:2d:d9:ad:68:53:62:3b:
d6:c2:c0:e7:b0:19:ac:a3:16:ac:41:c2:22:4f:ac:
10:cf:50:d2:13:8a:09:6f:a7:0c:b3:d6:c1:66:5a:
1e:f9:f2:af:b3:2d:f2:78:02:b6:0e:09:59:ff:6f:
24:fd:d3:af:95:8d:fe:90:d3:ca:9e:ac:45:a0:e0:
1b:f4:67:47:a5:b0:6d:c7:ea:b2:fa:5b:65:71:fa:
ce:6c:3c:28:b3:d4:0a:20:1f:05:5d:34:fc:9e:ad:
e6:ca:bf:3f:b7:f1:8b:86:3c:fd:91:a3:03:31:e4:
a0:7b:61:7e:43:7e:eb:14:f1:15:7f:d1:81:ec:df:
89:1f:5c:63:64:5b:7a:8d:e3:a3:12:b3:5b:a2:10:
90:cb:ed:96:33:83:94:36:62:45:f0:a8:31:63:32:
33:6f:0e:6c:2b:3a:34:d2:99:45:2d:00:da:3e:ce:
bb:98:53:0b:7a:7a:43:f1:9f:6c:b6:3e:62:b7:63:
04:07:ef:9d:79:e8:bc:7f:a8:0f:29:5a:f7:08:a0:
5f:3c:54:ac:41:17:8f:7e:5a:e2:d0:cb:70:12:97:
35:27:96:74:dc:f1:2c:ab:36:9c:61:26:66:52:61:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:14:76:74:06:C8:9A:BE:CA:8A:0D:70:B3:FC:42:AE:9A:27:65:D2
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:67:0d:d7:47:a8:de:5f:d7:12:e9:d7:f5:c2:90:2b:8f:da:
ca:db:c9:ea:61:64:c8:2e:f4:d4:f7:46:5f:db:e0:1e:ee:7f:
70:3f:10:41:79:84:6d:18:f1:34:63:21:6b:13:ab:fa:c9:99:
19:63:be:3b:65:ce:49:ac:fb:f2:56:69:b9:9f:7a:bc:cf:65:
58:78:86:e9:74:fe:6d:d1:96:e8:20:6c:53:3f:c9:ea:62:ea:
73:9c:90:0a:8f:39:e9:38:09:51:a4:7b:1d:13:87:4e:4d:6a:
36:d3:5e:a0:01:5f:cf:f3:6b:18:8c:67:a7:fa:12:1c:71:ae:
4c:5d:48:d8:13:d3:ac:60:c6:be:f5:ae:5c:0f:58:50:11:88:
30:76:59:9f:a2:97:5b:95:5d:43:9b:68:41:cf:01:7b:3c:d6:
0a:8d:92:6d:de:f7:72:26:d4:8e:8c:9c:42:78:db:4a:55:27:
ad:1b:f3:d9:8c:4d:f1:81:3d:32:bf:52:e4:fa:05:3e:8b:19:
76:39:5a:2a:46:f5:52:a4:9b:17:1e:26:7c:0b:fd:60:00:df:
d4:96:f1:e1:4f:c2:37:9a:be:5b:b8:dc:2a:07:16:da:92:6e:
8a:35:f4:81:5c:10:35:5e:f9:aa:5d:04:6b:e4:0b:93:90:55:
f2:2c:5e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCQh/1atVFxL7/QzVA1YmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj
NTA2OTEwHhcNMjUxMDI2MTUwMDMxWhcNMjUxMDI3MTUwMDMxWjAzMTEwLwYDVQQD
Eyg2ZjE0NzY3NDA2Yzg5YWJlY2E4YTBkNzBiM2ZjNDJhZTlhMjc2NWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBLhZW21WmFl4WvTDQAPTGWHskug
5C3ZrWhTYjvWwsDnsBmsoxasQcIiT6wQz1DSE4oJb6cMs9bBZloe+fKvsy3yeAK2
DglZ/28k/dOvlY3+kNPKnqxFoOAb9GdHpbBtx+qy+ltlcfrObDwos9QKIB8FXTT8
nq3myr8/t/GLhjz9kaMDMeSge2F+Q37rFPEVf9GB7N+JH1xjZFt6jeOjErNbohCQ
y+2WM4OUNmJF8KgxYzIzbw5sKzo00plFLQDaPs67mFMLenpD8Z9stj5it2MEB++d
eei8f6gPKVr3CKBfPFSsQRePflri0MtwEpc1J5Z03PEsqzacYSZmUmERswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8UdnQGyJq+yooNcLP8Qq6aJ2XSMB8GA1UdIwQY
MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt
OTE1MTc1ZTM2ZThlLzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl
LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2cN10eo
3l/XEunX9cKQK4/aytvJ6mFkyC701PdGX9vgHu5/cD8QQXmEbRjxNGMhaxOr+smZ
GWO+O2XOSaz78lZpuZ96vM9lWHiG6XT+bdGW6CBsUz/J6mLqc5yQCo856TgJUaR7
HROHTk1qNtNeoAFfz/NrGIxnp/oSHHGuTF1I2BPTrGDGvvWuXA9YUBGIMHZZn6KX
W5VdQ5toQc8BezzWCo2Sbd73cibUjoycQnjbSlUnrRvz2YxN8YE9Mr9S5PoFPosZ
djlaKkb1UqSbFx4mfAv9YADf1Jbx4U/CN5q+W7jcKgcW2pJuijX0gVwQNV75ql0E
a+QLk5BV8ixezQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 23:18:35 2025 by rpki-client