Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: m/tkwx6+l6/ISMYWK8Z0qjuRxxj5bAzL5t/EaaqU9Gk=
Subject key identifier: 75:B8:CC:C6:77:AE:2C:22:DE:6C:CD:69:DE:32:6D:72:7E:B7:55:8C
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019A6C23A6BCBC024D43443BAE1336237D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 0859
Signing time: Mon 10 Nov 2025 05:01:06 +0000
Manifest this update: Mon 10 Nov 2025 05:01:06 +0000
Manifest next update: Tue 11 Nov 2025 05:01:06 +0000
Files and hashes: 1: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: xzc/5YJJJzG5EBusE7H+xXaf3fz334u3YIl5TiLuWvI=)
2: n2ywdwAxh_5A6fhmbinLsjV_74w.roa (hash: KHmvQ0UKMcNm8rNxLKWRsULyUAvt5HBPZFXUNE/Pe7Y=)
3: vtVkCOLjDQSopCb33az0PmasrbI.roa (hash: B009Zu/GX84ZHQpoNwwgFUagmlB5jbZv6Rp29RHPykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6c:23:a6:bc:bc:02:4d:43:44:3b:ae:13:36:23:7d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Nov 10 05:01:06 2025 GMT
Not After : Nov 11 05:01:06 2025 GMT
Subject: CN=75b8ccc677ae2c22de6ccd69de326d727eb7558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:a2:46:ec:a3:de:36:50:02:b0:b2:d6:b1:
ea:07:d8:6a:01:8d:af:3a:dd:3c:c7:e1:bc:f2:4c:
1f:8d:d3:c1:cc:5c:46:be:5d:26:96:b4:1e:94:48:
4a:dc:25:6a:76:db:64:11:88:7c:87:1b:28:b6:56:
b9:27:96:6f:cd:68:4d:d6:9e:9b:88:3d:49:a1:8c:
fb:dc:88:44:98:71:a1:b9:a3:5d:8b:d6:03:f1:14:
8f:4e:31:37:45:e7:e9:cf:ea:56:2f:08:52:6d:e6:
8b:69:1b:5e:32:27:52:40:a3:4b:da:cd:a8:e0:45:
55:a3:59:41:95:9d:32:89:e3:3f:d7:71:da:29:e5:
50:27:bf:69:9b:c9:b9:c3:bd:f6:a8:06:e2:be:79:
ca:f7:dc:d7:81:ad:74:b6:7f:60:09:88:ec:71:14:
3d:10:69:c2:8c:dc:9a:e1:b4:bf:23:13:05:c8:75:
27:60:17:fd:8c:a7:e9:3c:38:69:c2:fc:d2:1b:95:
0a:36:8b:64:b4:56:75:94:8e:13:c6:e4:1f:d2:8a:
e7:9b:1d:d1:ef:44:3c:8e:8b:74:b2:d7:f1:45:e0:
dc:ce:e9:5d:6a:3d:76:2b:5f:29:20:ae:f9:1b:78:
e6:be:67:52:01:55:af:b7:4d:35:f4:95:81:c2:5f:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B8:CC:C6:77:AE:2C:22:DE:6C:CD:69:DE:32:6D:72:7E:B7:55:8C
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:3d:a0:93:be:22:57:c9:b9:3a:b2:80:2a:e0:ec:f2:9a:
ce:a5:32:c9:ca:4e:c1:95:41:01:f3:14:6a:f6:46:99:98:8d:
ae:54:43:99:64:a3:b2:1d:da:6b:db:0c:ac:1e:c0:70:4a:28:
e8:2d:8f:f4:82:4e:cb:10:34:c2:35:fc:2d:b4:97:33:cb:0f:
e4:41:33:c0:8b:87:93:82:2d:7c:ab:3d:74:58:db:d0:0c:ea:
31:03:aa:c1:5e:52:9d:45:bc:0a:30:08:5c:ab:b8:11:1c:46:
2e:9f:e2:c3:44:89:79:55:04:73:3e:bd:d6:b5:66:7b:cf:5d:
3d:4d:69:30:54:ae:6b:8a:d5:bf:7b:af:c1:6f:5e:13:24:96:
f4:53:c2:1d:f6:aa:3c:c1:91:cd:85:fc:dc:1a:d5:6c:9c:38:
e2:b3:5a:47:9f:76:27:a1:3c:5a:9e:04:3d:ab:ff:1e:17:ed:
9d:0c:7a:6e:6a:00:a8:73:3c:08:d4:64:b8:67:e0:8c:a0:af:
e9:5c:cd:82:4b:c6:35:62:bb:4e:ba:b4:8e:b6:17:7f:f6:61:
6a:02:a7:60:5b:ad:2e:1c:c0:29:d5:b0:07:91:cc:3f:e7:b6:
87:23:e5:87:ad:81:0f:9b:6a:05:5a:03:3b:88:a4:13:e7:6b:
fe:83:56:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpsI6a8vAJNQ0Q7rhM2I30fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjUxMTEwMDUwMTA2WhcNMjUxMTExMDUwMTA2WjAzMTEwLwYDVQQD
Eyg3NWI4Y2NjNjc3YWUyYzIyZGU2Y2NkNjlkZTMyNmQ3MjdlYjc1NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXeiRuyj3jZQArCy1rHqB9hqAY2v
Ot08x+G88kwfjdPBzFxGvl0mlrQelEhK3CVqdttkEYh8hxsotla5J5ZvzWhN1p6b
iD1JoYz73IhEmHGhuaNdi9YD8RSPTjE3Refpz+pWLwhSbeaLaRteMidSQKNL2s2o
4EVVo1lBlZ0yieM/13HaKeVQJ79pm8m5w732qAbivnnK99zXga10tn9gCYjscRQ9
EGnCjNya4bS/IxMFyHUnYBf9jKfpPDhpwvzSG5UKNotktFZ1lI4TxuQf0ornmx3R
70Q8jot0stfxReDczuldaj12K18pIK75G3jmvmdSAVWvt0019JWBwl/21QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHW4zMZ3riwi3mzNad4ybXJ+t1WMMB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvs9oJO+
IlfJuTqygCrg7PKazqUyycpOwZVBAfMUavZGmZiNrlRDmWSjsh3aa9sMrB7AcEoo
6C2P9IJOyxA0wjX8LbSXM8sP5EEzwIuHk4ItfKs9dFjb0AzqMQOqwV5SnUW8CjAI
XKu4ERxGLp/iw0SJeVUEcz691rVme89dPU1pMFSua4rVv3uvwW9eEySW9FPCHfaq
PMGRzYX83BrVbJw44rNaR592J6E8Wp4EPav/HhftnQx6bmoAqHM8CNRkuGfgjKCv
6VzNgkvGNWK7Trq0jrYXf/ZhagKnYFutLhzAKdWwB5HMP+e2hyPlh62BD5tqBVoD
O4ikE+dr/oNW/A==
-----END CERTIFICATE-----
Generated at Mon Nov 10 12:04:01 2025 by rpki-client