Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File: eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier: iQFvXCyB+3fpLYyc0On2Yrz4PI1y6X09J6Yozsxn/mM=
Subject key identifier: 60:6C:28:74:A5:35:A5:6B:8D:77:BA:CE:72:19:76:F4:F5:EB:1B:31
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer: /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial: 019A70DC48FDC219381B6D1AD1A0E81A48A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number: 0308
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: 7HBDmlNLOBDlfy2W42PcKGMW7rOA0vWcbbMmPf2tza8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:48:fd:c2:19:38:1b:6d:1a:d1:a0:e8:1a:48:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=606c2874a535a56b8d77bace721976f4f5eb1b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:a3:2c:b1:c3:67:23:70:47:e2:cd:21:c5:
ef:44:be:cc:23:63:d4:d7:fe:e7:6f:51:a3:ff:81:
fc:82:bd:43:16:f5:60:61:ef:f8:fd:74:d2:89:da:
cf:39:30:c2:50:83:d4:94:a6:39:b7:e8:d3:ef:8e:
b0:03:8b:fb:ea:0d:e8:61:12:89:57:49:99:06:92:
fa:86:99:66:39:76:a1:e2:00:ce:21:c3:73:a1:43:
e1:14:65:b1:84:e6:67:24:e7:bf:04:b1:fb:9e:9d:
71:04:d7:2b:ad:c1:c0:3a:4d:e1:c1:eb:22:f0:16:
fb:d6:7c:3f:4e:08:36:fa:4c:25:d3:f9:cf:82:c0:
a7:db:18:c3:b9:c8:38:78:13:63:66:b0:d2:67:3d:
40:c6:ef:bc:56:b2:63:a0:cf:c0:3f:75:16:d3:11:
d4:f9:e6:d9:99:04:c0:2f:94:90:f3:dd:84:70:c2:
24:26:76:e3:9d:32:12:a1:26:0a:b3:3e:ce:6e:46:
5b:e1:02:52:48:90:0f:fe:8b:1a:3a:2f:d4:34:16:
b0:5b:a3:77:25:01:e2:8d:0f:14:7f:f0:2b:be:06:
f6:57:eb:bc:97:c6:2b:ac:a4:5e:d2:c0:50:94:ae:
b1:c2:b5:d6:97:3b:1c:95:24:94:48:fc:b3:fb:7f:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6C:28:74:A5:35:A5:6B:8D:77:BA:CE:72:19:76:F4:F5:EB:1B:31
X509v3 Authority Key Identifier:
keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:d3:d2:52:9b:ba:8f:61:bd:01:78:dc:a3:0d:e8:29:14:
09:df:7e:87:55:7f:d5:b5:c2:bd:a5:ed:c7:92:21:55:66:ab:
cf:b7:22:2e:81:77:29:9a:ad:81:7a:80:ea:fb:1c:67:b4:2c:
d5:f8:0f:19:95:e6:0d:dd:54:40:65:b3:ba:d0:2b:dd:f4:f5:
3f:78:69:53:f2:64:75:39:c9:ac:70:b6:40:7a:88:f8:f0:23:
16:e6:a4:87:38:47:38:c6:04:0a:89:50:0a:c8:9c:c3:2e:40:
ad:d6:7e:b7:8a:e0:07:9d:28:3f:04:e9:61:ad:5b:53:f4:50:
e0:99:84:d9:a7:e0:79:9a:65:2c:5b:d3:90:49:c6:4f:df:17:
d1:b6:9a:8d:9d:b0:16:79:1a:f6:f3:e3:b0:30:52:4c:8f:e7:
3c:1f:ff:eb:67:06:85:03:0a:ec:f1:fa:41:0a:98:e4:82:6c:
1d:02:c1:27:b3:ec:4d:9d:22:9f:36:85:36:59:b9:e6:68:ef:
d1:d1:fd:bf:83:55:b5:6e:78:b9:17:c3:64:1c:b3:32:46:f2:
80:ea:d3:66:78:5c:ca:01:45:8d:1a:ec:93:3a:d0:fa:14:39:
90:f5:4c:75:e2:b3:a7:93:07:09:66:83:ad:e0:cd:c1:63:74:
09:64:b4:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3Ej9whk4G20a0aDoGkipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDhhZjc4ZTZmYmFkMmVlN2UyZDBjZWI4NmJhMzhiZmE1
NDhlMWIwHhcNMjUxMTExMDMwMTE2WhcNMjUxMTEyMDMwMTE2WjAzMTEwLwYDVQQD
Eyg2MDZjMjg3NGE1MzVhNTZiOGQ3N2JhY2U3MjE5NzZmNGY1ZWIxYjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbmjLLHDZyNwR+LNIcXvRL7MI2PU
1/7nb1Gj/4H8gr1DFvVgYe/4/XTSidrPOTDCUIPUlKY5t+jT746wA4v76g3oYRKJ
V0mZBpL6hplmOXah4gDOIcNzoUPhFGWxhOZnJOe/BLH7np1xBNcrrcHAOk3hwesi
8Bb71nw/Tgg2+kwl0/nPgsCn2xjDucg4eBNjZrDSZz1Axu+8VrJjoM/AP3UW0xHU
+ebZmQTAL5SQ892EcMIkJnbjnTISoSYKsz7ObkZb4QJSSJAP/osaOi/UNBawW6N3
JQHijQ8Uf/Arvgb2V+u8l8YrrKRe0sBQlK6xwrXWlzsclSSUSPyz+39DHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBsKHSlNaVrjXe6znIZdvT16xsxMB8GA1UdIwQY
MBaAFHjYr3jm+60u5+LQzrhro4v6VI4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTk2ZDgtZWEyZi00YmY3LWI4MDIt
NzM0MTQxZGUzNTc2LzEvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80MTk2ZDgtZWEyZi00YmY3LWI4MDItNzM0MTQxZGUzNTc2
LzEvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxjT0lKb
uo9hvQF43KMN6CkUCd9+h1V/1bXCvaXtx5IhVWarz7ciLoF3KZqtgXqA6vscZ7Qs
1fgPGZXmDd1UQGWzutAr3fT1P3hpU/JkdTnJrHC2QHqI+PAjFuakhzhHOMYEColQ
Csicwy5ArdZ+t4rgB50oPwTpYa1bU/RQ4JmE2afgeZplLFvTkEnGT98X0baajZ2w
Fnka9vPjsDBSTI/nPB//62cGhQMK7PH6QQqY5IJsHQLBJ7PsTZ0inzaFNlm55mjv
0dH9v4NVtW54uRfDZByzMkbygOrTZnhcygFFjRrskzrQ+hQ5kPVMdeKzp5MHCWaD
reDNwWN0CWS0Rw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:04 2025 by rpki-client