Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
File: egm3YjoIVFfYx2tJTs2ITY_vpNE.mft (raw, json)
Hash identifier: dRyIuJb0yFBDd+uqY5Q7IG6VKb94yj4dNJlhbRjA1O0=
Subject key identifier: ED:1F:39:7F:3C:9F:6E:29:97:FF:73:74:34:59:60:E7:31:0D:9B:46
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Certificate issuer: /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial: 019A09DC34006145248FE768F476266798DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
Manifest number: 3D
Signing time: Wed 22 Oct 2025 03:00:17 +0000
Manifest this update: Wed 22 Oct 2025 03:00:17 +0000
Manifest next update: Thu 23 Oct 2025 03:00:17 +0000
Files and hashes: 1: BM0t-14d93ZG0R2K9vbiuUEqvH0.roa (hash: zILQAxauVBbxhkjsH77rTPNJrcJf7t+yGNN3JFnYJQc=)
2: FRQ7pByc3-uT5IL1xIxyImuQ-ow.roa (hash: AUFJunnKVDTZkyRZJ9wDpcrSrFiyzDTU1XjQT8n+JqU=)
3: egm3YjoIVFfYx2tJTs2ITY_vpNE.crl (hash: vXPffmmnttyt+yfCcGT+WGrNmGrsNnDVfdk8HyhG1gM=)
4: h6j3PofcBQDmfTGah59b1zPMf8o.roa (hash: q+IYqPK8ZddReCwkNGJqqDDyQQjRAwXJSYw+Ehyh7O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:34:00:61:45:24:8f:e7:68:f4:76:26:67:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Validity
Not Before: Oct 22 03:00:17 2025 GMT
Not After : Oct 23 03:00:17 2025 GMT
Subject: CN=ed1f397f3c9f6e2997ff7374345960e7310d9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:e5:b6:a1:d6:2b:57:47:1e:e7:03:ac:20:
76:04:a1:37:87:c4:80:9b:97:76:be:b4:2d:29:fd:
b7:ac:44:e6:aa:2b:05:d4:87:22:87:ee:2a:ca:49:
4f:f4:85:37:11:0b:b0:d5:f6:fa:38:4a:f4:98:bd:
49:29:9e:f0:69:48:f4:3d:ef:81:81:87:bc:71:44:
c8:07:c2:83:a1:89:2f:cf:6b:74:b7:e8:fe:94:54:
71:79:2b:68:d0:3c:e9:05:2a:2b:77:fe:5c:8e:fd:
1f:df:fa:00:c1:a6:ac:c1:bc:69:da:de:80:41:82:
90:18:f9:70:bc:03:c4:e2:f4:44:a9:6e:73:72:5c:
28:51:27:bf:4f:a1:48:ae:2f:58:e0:68:5d:2e:0e:
49:9c:0f:15:94:ee:ed:ab:c9:0f:f5:a0:51:3e:d5:
22:5e:d4:59:e0:89:b6:e7:d6:1b:80:fa:45:73:bb:
dc:57:bf:8d:d0:ed:90:2e:26:a4:44:04:0b:26:9f:
85:79:35:79:44:ad:39:35:d6:ca:36:5d:45:b1:39:
f8:ef:c9:ff:91:dc:47:ab:e2:12:b5:36:7d:ec:6f:
a4:fc:9b:69:6c:65:3f:8b:7e:3b:c1:ff:c4:59:d4:
4a:44:87:0c:dc:20:12:6c:11:43:19:13:67:80:a7:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1F:39:7F:3C:9F:6E:29:97:FF:73:74:34:59:60:E7:31:0D:9B:46
X509v3 Authority Key Identifier:
keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:10:ea:b7:59:5b:43:f8:8b:ab:4b:1f:79:1b:f7:cd:26:49:
00:9d:54:46:3d:3b:06:2f:a4:45:4a:98:e1:e5:dc:fc:27:e4:
fc:62:c4:cd:00:91:95:5a:db:1e:42:3d:88:ed:91:89:18:b6:
aa:7a:10:d8:03:be:90:33:83:45:e3:83:cc:6c:b8:e1:7c:86:
c5:3e:ef:7a:b9:7f:8d:cd:a2:a9:fd:24:10:30:81:d3:ab:40:
94:eb:78:0d:79:48:67:26:16:ad:98:c0:c6:c0:d6:56:2a:7a:
77:cd:ee:3c:fb:cd:d3:84:29:c2:cc:66:b0:42:d2:8c:f8:ed:
13:a3:28:23:08:50:56:26:96:a3:91:ae:3a:92:33:e1:f7:33:
f0:4a:0e:3c:af:24:64:57:c5:ac:73:92:cf:37:22:9a:03:d0:
99:0a:58:96:b6:dd:08:da:93:a1:41:93:6a:b1:3d:46:b8:7b:
27:16:54:7a:72:c1:d8:2d:10:0a:24:d6:92:05:12:cc:2a:60:
a7:b5:3b:84:15:84:ac:9b:61:7d:47:88:67:62:08:6e:1d:0e:
35:0b:2a:0f:da:c7:37:f3:e3:22:aa:7e:99:d4:22:0c:d4:2b:
39:b4:89:e7:c2:91:68:0a:6d:d8:db:da:7a:9e:85:56:f2:1a:
39:54:04:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoJ3DQAYUUkj+do9HYmZ5jcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMDliNzYyM2EwODU0NTdkOGM3NmI0OTRlY2Q4ODRkOGZl
ZmE0ZDEwHhcNMjUxMDIyMDMwMDE3WhcNMjUxMDIzMDMwMDE3WjAzMTEwLwYDVQQD
EyhlZDFmMzk3ZjNjOWY2ZTI5OTdmZjczNzQzNDU5NjBlNzMxMGQ5YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTjltqHWK1dHHucDrCB2BKE3h8SA
m5d2vrQtKf23rETmqisF1Icih+4qyklP9IU3EQuw1fb6OEr0mL1JKZ7waUj0Pe+B
gYe8cUTIB8KDoYkvz2t0t+j+lFRxeSto0DzpBSord/5cjv0f3/oAwaaswbxp2t6A
QYKQGPlwvAPE4vREqW5zclwoUSe/T6FIri9Y4GhdLg5JnA8VlO7tq8kP9aBRPtUi
XtRZ4Im259YbgPpFc7vcV7+N0O2QLiakRAQLJp+FeTV5RK05NdbKNl1FsTn478n/
kdxHq+IStTZ97G+k/JtpbGU/i347wf/EWdRKRIcM3CASbBFDGRNngKfz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0fOX88n24pl/9zdDRZYOcxDZtGMB8GA1UdIwQY
MBaAFHoJt2I6CFRX2MdrSU7NiE2P76TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMDcwMzUtNjE5Mi00NWVmLTg4YWQt
ZTg5ZTQxYzViMTA2LzEvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kMDcwMzUtNjE5Mi00NWVmLTg4YWQtZTg5ZTQxYzViMTA2
LzEvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshDqt1lb
Q/iLq0sfeRv3zSZJAJ1URj07Bi+kRUqY4eXc/Cfk/GLEzQCRlVrbHkI9iO2RiRi2
qnoQ2AO+kDODReODzGy44XyGxT7verl/jc2iqf0kEDCB06tAlOt4DXlIZyYWrZjA
xsDWVip6d83uPPvN04QpwsxmsELSjPjtE6MoIwhQViaWo5GuOpIz4fcz8EoOPK8k
ZFfFrHOSzzcimgPQmQpYlrbdCNqToUGTarE9Rrh7JxZUenLB2C0QCiTWkgUSzCpg
p7U7hBWErJthfUeIZ2IIbh0ONQsqD9rHN/PjIqp+mdQiDNQrObSJ58KRaApt2Nva
ep6FVvIaOVQEYQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 11:44:04 2025 by rpki-client