Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File: eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier: L5JIRawrwKP7sUUNITQOZmLttwlzvu0a/SZucEjj6Cc=
Subject key identifier: 11:18:CC:1A:77:E9:4F:9A:15:83:96:EE:FD:AC:DD:D9:C3:B8:33:FA
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial: 019A0D826D69C283E235E8C56C5A088682D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number: 0948
Signing time: Wed 22 Oct 2025 20:00:42 +0000
Manifest this update: Wed 22 Oct 2025 20:00:42 +0000
Manifest next update: Thu 23 Oct 2025 20:00:42 +0000
Files and hashes: 1: 7u9HNLxm9pcYaogfDQxcvTuVdBc.roa (hash: O3tVTVyLgMTQRdcIzr5g60UdATSZQkZBfh6yZ+9zJBw=)
2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: 4mKnP693dAc/e0D/yrtZG9YCWsJ+PX6RD7nUB8jJZf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:82:6d:69:c2:83:e2:35:e8:c5:6c:5a:08:86:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Validity
Not Before: Oct 22 20:00:42 2025 GMT
Not After : Oct 23 20:00:42 2025 GMT
Subject: CN=1118cc1a77e94f9a158396eefdacddd9c3b833fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:fe:f6:0d:62:5e:62:d8:4b:06:0e:24:42:
09:c6:b4:c3:2a:64:13:04:07:81:1d:4e:23:3b:20:
be:8d:70:ec:4a:77:72:f9:dd:00:16:cc:57:ae:fb:
59:b6:25:33:02:ed:46:77:85:c0:04:76:89:01:d2:
56:59:eb:4d:5e:b1:ed:11:53:fb:4b:8c:14:3f:84:
ca:f1:ee:d4:d6:ed:44:72:0d:59:9a:7d:33:ff:ea:
09:c1:91:81:a3:00:09:95:ed:8e:a2:63:0b:dd:ba:
86:0e:6e:f4:07:8c:4d:16:ea:f3:eb:43:6a:40:c1:
26:e8:4a:ba:95:b1:68:90:5e:e8:98:b8:54:11:04:
8c:03:d6:1b:1e:5f:d5:27:45:89:a1:8b:f0:f5:d4:
93:46:f3:2a:1c:40:af:f7:8a:af:6a:76:ba:0c:36:
ca:cb:aa:25:f6:4f:be:ba:15:a9:6b:7e:af:58:d5:
d8:51:98:9c:5e:7c:c6:d4:dc:d7:50:94:b5:2a:aa:
7f:92:f9:a3:0c:cd:8b:25:06:4c:71:f8:a9:26:14:
26:60:f1:8d:de:ff:3b:f9:13:32:8a:a8:71:82:c8:
c3:eb:6e:de:0c:02:02:f2:57:23:e0:af:6f:f2:d3:
fa:25:aa:3f:15:59:ad:c7:b6:c1:05:64:5c:6a:26:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:CC:1A:77:E9:4F:9A:15:83:96:EE:FD:AC:DD:D9:C3:B8:33:FA
X509v3 Authority Key Identifier:
keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e3:17:58:a7:dc:32:63:38:1e:90:80:39:15:70:04:55:03:
ea:7b:1d:14:71:fe:4a:e3:21:cc:85:c8:db:f9:55:87:6e:7d:
ee:13:cf:0f:a1:10:07:3d:2c:ed:9c:b9:e6:05:81:14:4c:84:
cc:9b:bd:df:d0:ff:a6:35:d0:31:84:99:40:1d:96:84:3a:c5:
ac:0b:1e:2e:e4:e4:39:4b:8f:ea:30:1a:5c:06:a9:64:42:dc:
0b:e7:47:52:41:30:df:a6:fe:b4:36:78:b8:0f:6b:91:41:ed:
e0:b5:24:3c:3f:f3:08:db:56:06:ba:82:87:42:c7:76:1f:de:
bf:6f:d9:cf:11:36:10:73:c5:d1:0d:9e:76:5d:ff:0a:e6:55:
ec:a2:2b:16:a4:50:08:72:85:72:44:02:06:37:9a:fa:98:56:
c0:ae:87:ce:54:82:18:83:da:51:a0:da:db:39:5c:7b:76:79:
a1:3c:ad:5c:37:ad:9b:2b:fc:25:3b:9a:e2:ea:43:cc:4c:63:
de:19:61:0f:76:82:4f:f9:5a:d6:ee:91:e3:cf:42:f5:a7:b8:
05:ad:d8:51:8d:9c:c2:5c:3a:98:bf:86:ba:d6:4d:ef:62:8c:
fe:ec:a8:64:3c:c1:47:75:10:46:8f:93:58:8a:56:b3:c3:ce:
14:f1:91:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoNgm1pwoPiNejFbFoIhoLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MmY5ZjNiYmJlMGI1MWVhOWU5YjJlOTZjNjg2ODc0OGZh
MDc4ZjcwHhcNMjUxMDIyMjAwMDQyWhcNMjUxMDIzMjAwMDQyWjAzMTEwLwYDVQQD
EygxMTE4Y2MxYTc3ZTk0ZjlhMTU4Mzk2ZWVmZGFjZGRkOWMzYjgzM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9x/+9g1iXmLYSwYOJEIJxrTDKmQT
BAeBHU4jOyC+jXDsSndy+d0AFsxXrvtZtiUzAu1Gd4XABHaJAdJWWetNXrHtEVP7
S4wUP4TK8e7U1u1Ecg1Zmn0z/+oJwZGBowAJle2OomML3bqGDm70B4xNFurz60Nq
QMEm6Eq6lbFokF7omLhUEQSMA9YbHl/VJ0WJoYvw9dSTRvMqHECv94qvana6DDbK
y6ol9k++uhWpa36vWNXYUZicXnzG1NzXUJS1Kqp/kvmjDM2LJQZMcfipJhQmYPGN
3v87+RMyiqhxgsjD627eDAIC8lcj4K9v8tP6Jao/FVmtx7bBBWRcaiY1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEYzBp36U+aFYOW7v2s3dnDuDP6MB8GA1UdIwQY
MBaAFHgvnzu74LUeqemy6WxoaHSPoHj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQt
NzQzYzMwODAxZmYxLzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQtNzQzYzMwODAxZmYx
LzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+MXWKfc
MmM4HpCAORVwBFUD6nsdFHH+SuMhzIXI2/lVh2597hPPD6EQBz0s7Zy55gWBFEyE
zJu939D/pjXQMYSZQB2WhDrFrAseLuTkOUuP6jAaXAapZELcC+dHUkEw36b+tDZ4
uA9rkUHt4LUkPD/zCNtWBrqCh0LHdh/ev2/ZzxE2EHPF0Q2edl3/CuZV7KIrFqRQ
CHKFckQCBjea+phWwK6HzlSCGIPaUaDa2zlce3Z5oTytXDetmyv8JTua4upDzExj
3hlhD3aCT/la1u6R489C9ae4Ba3YUY2cwlw6mL+GutZN72KM/uyoZDzBR3UQRo+T
WIpWs8POFPGRUQ==
-----END CERTIFICATE-----
Generated at Thu Oct 23 05:23:23 2025 by rpki-client