Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File: eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier: OkcUruA+/faghbmg8Nl+zZ+TYMxpt1ZRNZ3Ju0CFW8o=
Subject key identifier: D9:72:FB:9D:73:24:63:41:36:6C:6A:DA:53:03:3C:DF:4E:2E:99:AE
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial: 019A729401BDDA2B1E24681D514DA284F247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:01:33 +0000
Manifest this update: Tue 11 Nov 2025 11:01:33 +0000
Manifest next update: Wed 12 Nov 2025 11:01:33 +0000
Files and hashes: 1: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (hash: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=)
2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: o2nwhS2OBYRVA+c+jBKPOPsJuIQpI23h+y2P+fZUyDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:01:bd:da:2b:1e:24:68:1d:51:4d:a2:84:f2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Validity
Not Before: Nov 11 11:01:33 2025 GMT
Not After : Nov 12 11:01:33 2025 GMT
Subject: CN=d972fb9d73246341366c6ada53033cdf4e2e99ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:b0:74:e6:a7:5b:89:16:77:12:36:85:57:
e0:dd:a9:b8:aa:18:05:3c:3a:19:86:7a:69:4f:0a:
ab:d3:c5:cf:06:50:4e:35:f3:cb:74:e2:5f:d8:c2:
25:56:6a:77:a4:62:30:d9:0f:0b:55:62:ed:56:85:
28:bb:3c:46:57:28:f8:1a:54:e8:5e:05:2d:d8:b1:
84:88:df:06:b7:bd:d4:15:44:8a:ae:46:44:30:9c:
92:08:4a:0e:8f:1e:d7:78:d8:24:66:bf:96:ed:4d:
5c:b0:46:b7:39:4b:93:68:cf:39:c6:f4:be:39:b3:
c8:4d:f5:ff:48:df:7c:46:5c:d3:e2:ec:9e:79:ff:
39:0d:cc:b2:52:2d:f6:9d:d3:08:16:8a:51:81:18:
59:ce:16:09:ea:09:e9:95:31:be:00:5f:d1:70:7b:
1a:16:ab:ff:7e:b3:90:8c:67:b6:a9:bb:5e:02:c3:
e3:9c:db:17:e9:50:e6:c6:00:c3:42:e9:76:fe:65:
8c:10:0a:56:c0:30:c6:db:a1:ee:74:49:7e:cd:27:
1c:6b:12:cd:7c:4e:bd:6e:32:c3:38:7e:62:2f:66:
1d:16:f7:82:ec:a3:58:15:f3:1e:84:dd:27:ed:dd:
1e:b9:fe:6f:00:67:10:8c:75:b2:fa:6d:77:cb:61:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:72:FB:9D:73:24:63:41:36:6C:6A:DA:53:03:3C:DF:4E:2E:99:AE
X509v3 Authority Key Identifier:
keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:61:2e:cf:10:06:54:9e:3a:82:d3:26:bd:3d:f5:17:5f:82:
0d:c9:e7:e7:e2:16:c6:de:22:a9:f2:0b:56:47:e1:3f:be:99:
b3:10:8e:21:56:cd:5b:f0:17:35:a1:df:f0:8a:03:19:b8:fb:
2a:1f:c0:ca:39:ac:75:65:0f:78:0e:7d:e4:7f:69:c1:46:0e:
0c:a8:39:93:4c:2d:50:cf:06:72:33:06:36:ef:79:f7:46:e3:
7a:02:53:58:a5:08:14:89:5a:4f:93:ef:28:4b:58:cd:43:25:
b2:6a:69:77:7c:d6:2b:c7:42:6b:f5:81:93:62:44:4c:46:b5:
cf:ce:98:ce:b3:35:07:fc:64:8c:6f:fc:2d:7b:34:b2:22:3d:
0a:34:04:25:d5:d4:97:25:a4:a8:81:0d:1a:a4:c1:2d:17:31:
f2:ff:82:f9:3b:75:78:7c:e3:07:7f:e1:9f:49:1f:a7:06:36:
fc:a3:fb:94:42:00:11:da:3c:f8:21:48:9d:2c:36:b9:ef:e8:
f6:8d:c8:4d:5b:bb:a1:aa:06:4b:5d:bc:71:d6:a2:55:74:50:
af:b8:eb:f3:44:9e:df:af:9c:bc:d4:a0:a2:7e:9b:c5:35:31:
94:23:de:18:01:53:64:dc:89:44:28:21:da:c2:67:d9:91:15:
ff:75:d7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpylAG92iseJGgdUU2ihPJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NmE3N2VlNTJkY2VkNTI3Mzg5M2E3MWI5ZGJjYTNjNmU5
NjQ5NWYwHhcNMjUxMTExMTEwMTMzWhcNMjUxMTEyMTEwMTMzWjAzMTEwLwYDVQQD
EyhkOTcyZmI5ZDczMjQ2MzQxMzY2YzZhZGE1MzAzM2NkZjRlMmU5OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoywdOanW4kWdxI2hVfg3am4qhgF
PDoZhnppTwqr08XPBlBONfPLdOJf2MIlVmp3pGIw2Q8LVWLtVoUouzxGVyj4GlTo
XgUt2LGEiN8Gt73UFUSKrkZEMJySCEoOjx7XeNgkZr+W7U1csEa3OUuTaM85xvS+
ObPITfX/SN98RlzT4uyeef85DcyyUi32ndMIFopRgRhZzhYJ6gnplTG+AF/RcHsa
Fqv/frOQjGe2qbteAsPjnNsX6VDmxgDDQul2/mWMEApWwDDG26HudEl+zSccaxLN
fE69bjLDOH5iL2YdFveC7KNYFfMehN0n7d0euf5vAGcQjHWy+m13y2FbEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNly+51zJGNBNmxq2lMDPN9OLpmuMB8GA1UdIwQY
MBaAFHlqd+5S3O1Sc4k6cbnbyjxulklfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgt
M2YzMGNhMDg2ODcyLzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgtM2YzMGNhMDg2ODcy
LzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWEuzxAG
VJ46gtMmvT31F1+CDcnn5+IWxt4iqfILVkfhP76ZsxCOIVbNW/AXNaHf8IoDGbj7
Kh/AyjmsdWUPeA595H9pwUYODKg5k0wtUM8GcjMGNu9590bjegJTWKUIFIlaT5Pv
KEtYzUMlsmppd3zWK8dCa/WBk2JETEa1z86YzrM1B/xkjG/8LXs0siI9CjQEJdXU
lyWkqIENGqTBLRcx8v+C+Tt1eHzjB3/hn0kfpwY2/KP7lEIAEdo8+CFInSw2ue/o
9o3ITVu7oaoGS128cdaiVXRQr7jr80Se36+cvNSgon6bxTUxlCPeGAFTZNyJRCgh
2sJn2ZEV/3XXSg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:30 2025 by rpki-client