Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
File: EADA16WawvWYBOfDUV8UzS_VDZc.mft (raw, json)
Hash identifier: XOV8Hawcc7EhS5ldEi1CNZu2GP0ms/weSX2GAqyT40o=
Subject key identifier: FD:5F:BC:86:40:89:91:0B:48:E1:C3:74:7D:0E:FB:D4:EB:10:5C:4B
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Certificate issuer: /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial: 019A25535B27127E21A0E03937522FAF3977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 11:00:11 +0000
Manifest this update: Mon 27 Oct 2025 11:00:11 +0000
Manifest next update: Tue 28 Oct 2025 11:00:11 +0000
Files and hashes: 1: EADA16WawvWYBOfDUV8UzS_VDZc.crl (hash: d8pKooXp3Ef56Z98+spJmpXtHI7YQbGhJ2U4oB2TnsY=)
2: Pjo3RDAsopUeM78b85_QPN1-7VI.roa (hash: I/2zLP79cKW8Js/ksFDd8QdVZcG00HVdVbP2kBa1g/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:5b:27:12:7e:21:a0:e0:39:37:52:2f:af:39:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Validity
Not Before: Oct 27 11:00:11 2025 GMT
Not After : Oct 28 11:00:11 2025 GMT
Subject: CN=fd5fbc864089910b48e1c3747d0efbd4eb105c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:65:f0:24:33:77:9c:0d:44:bb:9b:e4:83:
9e:a4:f7:ac:d3:03:0b:be:4a:2e:2f:66:fd:40:51:
67:03:91:cc:d9:6e:a7:d9:db:37:2d:8b:5c:51:38:
39:95:57:47:e1:76:38:f5:7a:5b:61:4f:03:f4:ad:
f1:6c:ac:1a:7e:87:ba:03:40:c4:24:a1:fa:ed:8d:
22:3e:15:79:a5:c1:88:36:22:f4:41:12:ef:10:b3:
bc:1f:dc:36:99:86:5b:9b:94:2f:7a:70:7f:14:b8:
38:bf:8b:9c:8d:21:30:23:e4:df:c5:e0:6f:e0:08:
67:44:4e:67:8d:15:c7:1c:be:1e:da:54:77:7e:8c:
8a:bf:4b:59:fa:a4:54:de:54:4c:c0:f9:56:3d:f1:
76:3e:88:82:e6:07:4c:8e:f6:12:ff:33:6c:97:32:
22:b8:1c:96:43:4a:54:d3:00:84:da:2b:02:f3:47:
c6:26:2c:c8:fb:ad:16:15:0f:05:4f:99:0c:c3:70:
09:81:c9:33:97:9c:74:d6:07:04:7e:11:9f:2d:d9:
69:36:d3:b2:a2:82:f1:f3:1a:93:10:7d:ac:47:81:
49:44:49:9d:8a:a8:bc:b9:35:c6:a3:a7:bf:09:ca:
82:fe:6e:12:2e:66:c7:30:9d:a3:af:10:c3:98:b4:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5F:BC:86:40:89:91:0B:48:E1:C3:74:7D:0E:FB:D4:EB:10:5C:4B
X509v3 Authority Key Identifier:
keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0f:63:cd:5f:55:67:7b:ca:07:5c:53:3b:37:11:c8:34:af:
cf:64:fd:89:28:34:25:0e:4d:3c:56:22:5a:94:bb:a6:46:6f:
c5:d0:8c:65:ff:49:2b:b0:61:8f:91:9b:6a:bb:69:5f:2d:21:
19:c6:f5:4a:3b:48:55:bb:8a:53:22:d0:79:8e:fe:21:7e:d4:
3a:79:96:12:81:d0:6c:11:c9:7c:df:2b:bb:b6:fc:68:ba:f9:
91:28:81:1e:43:de:65:39:ce:89:6b:9f:c4:e7:ba:5d:29:5d:
65:ce:91:f2:cb:34:6f:fc:c4:db:71:23:01:c8:f0:c5:cc:a5:
54:55:61:d0:0f:d5:d0:fc:78:c3:21:ce:a9:7a:8a:73:9d:f9:
e2:b3:0c:21:b2:09:c0:90:48:99:a9:a8:95:4d:bb:d5:59:1f:
6f:6f:6d:3e:d1:49:1d:5f:15:88:c7:b3:18:f6:85:d7:3f:c9:
d3:16:05:8f:04:b5:41:e7:65:37:a0:06:38:ee:a1:ed:7b:4b:
8d:fc:37:3b:89:7e:d5:2a:18:09:43:d4:33:1b:56:21:86:cb:
70:2f:a7:fe:32:ca:44:f1:09:d9:f1:89:cd:0b:42:3e:38:58:
c3:62:d6:f9:a3:42:cb:aa:91:6f:55:6a:e9:d5:3d:be:1b:70:
a6:b3:38:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU1snEn4hoOA5N1Ivrzl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDBjMGQ3YTU5YWMyZjU5ODA0ZTdjMzUxNWYxNGNkMmZk
NTBkOTcwHhcNMjUxMDI3MTEwMDExWhcNMjUxMDI4MTEwMDExWjAzMTEwLwYDVQQD
EyhmZDVmYmM4NjQwODk5MTBiNDhlMWMzNzQ3ZDBlZmJkNGViMTA1YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMll8CQzd5wNRLub5IOepPes0wML
vkouL2b9QFFnA5HM2W6n2ds3LYtcUTg5lVdH4XY49XpbYU8D9K3xbKwafoe6A0DE
JKH67Y0iPhV5pcGINiL0QRLvELO8H9w2mYZbm5QvenB/FLg4v4ucjSEwI+TfxeBv
4AhnRE5njRXHHL4e2lR3foyKv0tZ+qRU3lRMwPlWPfF2PoiC5gdMjvYS/zNslzIi
uByWQ0pU0wCE2isC80fGJizI+60WFQ8FT5kMw3AJgckzl5x01gcEfhGfLdlpNtOy
ooLx8xqTEH2sR4FJREmdiqi8uTXGo6e/CcqC/m4SLmbHMJ2jrxDDmLRVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1fvIZAiZELSOHDdH0O+9TrEFxLMB8GA1UdIwQY
MBaAFBAAwNelmsL1mATnw1FfFM0v1Q2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2It
ZWEzODQyMGIyNTc5LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2ItZWEzODQyMGIyNTc5
LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ9jzV9V
Z3vKB1xTOzcRyDSvz2T9iSg0JQ5NPFYiWpS7pkZvxdCMZf9JK7Bhj5GbartpXy0h
Gcb1SjtIVbuKUyLQeY7+IX7UOnmWEoHQbBHJfN8ru7b8aLr5kSiBHkPeZTnOiWuf
xOe6XSldZc6R8ss0b/zE23EjAcjwxcylVFVh0A/V0Px4wyHOqXqKc5354rMMIbIJ
wJBImamolU271Vkfb29tPtFJHV8ViMezGPaF1z/J0xYFjwS1QedlN6AGOO6h7XtL
jfw3O4l+1SoYCUPUMxtWIYbLcC+n/jLKRPEJ2fGJzQtCPjhYw2LW+aNCy6qRb1Vq
6dU9vhtwprM4HA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:50:00 2025 by rpki-client