Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
File: eIeO3aauSgFH23C2YQXP0X8gZqM.mft (raw, json)
Hash identifier: qHBHi+KCFIoVpqyjpZO4/zIOPZ4WWH32pqq6Tu4LhRc=
Subject key identifier: DF:3D:C1:32:58:80:62:25:66:7D:BC:4B:AF:D4:DE:03:F7:84:71:38
Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Certificate issuer: /CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Certificate serial: 019A1A2AF2D48A55E427BD2D156DDCBD93DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
Manifest number: 1682
Signing time: Sat 25 Oct 2025 07:00:13 +0000
Manifest this update: Sat 25 Oct 2025 07:00:13 +0000
Manifest next update: Sun 26 Oct 2025 07:00:13 +0000
Files and hashes: 1: eIeO3aauSgFH23C2YQXP0X8gZqM.crl (hash: Va/yRsStCFG55Bz/2xXgmrIWgMy4YFUEhqi05OexoSM=)
2: t0DJyinn4llKKpeCe0OBlE_2NVY.roa (hash: NAk4z+1h3HiDOuSQgX+6rT4C+GeWqbjHTxsOaoe1l/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2a:f2:d4:8a:55:e4:27:bd:2d:15:6d:dc:bd:93:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Validity
Not Before: Oct 25 07:00:13 2025 GMT
Not After : Oct 26 07:00:13 2025 GMT
Subject: CN=df3dc13258806225667dbc4bafd4de03f7847138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:77:06:d5:58:a5:c3:9c:f0:40:4b:1b:8e:89:
1c:e2:f6:3c:95:0e:16:fd:40:ec:06:5f:2d:e5:cf:
24:e1:c0:3d:cb:73:f2:60:78:95:5b:c8:9f:5c:f5:
66:f8:90:4c:b4:13:f0:09:ed:09:77:1b:4c:0d:3c:
c9:57:7d:71:66:40:0b:7a:f9:a5:a3:f6:54:da:06:
3e:6e:69:79:0b:0c:fb:cf:45:8c:2e:74:c1:8e:c1:
ca:2a:82:df:8a:ad:b0:83:b6:ed:0b:09:62:bd:6d:
c7:24:9c:51:f9:76:88:a5:7b:8a:11:79:df:16:ea:
00:25:0b:d9:59:c9:f5:4d:60:46:4c:a2:8d:63:d2:
04:2c:98:83:69:05:8d:ff:40:e5:ed:ab:53:b3:b4:
12:c7:91:f1:b2:2b:81:bd:f2:95:c7:55:60:82:03:
62:06:8c:2c:28:7e:71:33:6e:fc:42:af:77:33:ea:
58:33:c9:3a:4a:21:8b:83:5d:fb:86:ff:7c:1f:78:
29:1d:37:b1:de:29:ff:5a:e3:e2:29:eb:1a:33:36:
56:b9:3e:9f:3b:9c:fe:ac:5f:e5:48:d7:83:30:8e:
5c:43:ce:ec:96:5c:2c:b0:ea:ca:99:e2:04:b5:f4:
ae:ee:c5:1e:a9:61:6f:e5:6c:f9:c2:d6:f5:bc:22:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:C1:32:58:80:62:25:66:7D:BC:4B:AF:D4:DE:03:F7:84:71:38
X509v3 Authority Key Identifier:
keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c3:8a:d8:f0:3d:de:3b:74:86:29:db:67:8a:5e:ad:2b:fd:
3e:74:1a:d0:e3:87:d0:ff:af:21:45:b3:df:04:3c:a2:74:8a:
8b:c0:71:eb:4e:05:af:d0:5f:f8:3f:5f:e5:b3:68:e1:b8:52:
c4:2c:5d:db:d7:d0:a9:a6:4d:e5:ea:5c:29:30:db:a0:4d:06:
40:da:15:bf:50:b4:27:ec:c2:0a:17:61:a7:3c:d9:3d:fd:58:
65:25:de:09:b3:b5:7a:62:c7:82:58:d2:61:90:9b:e4:67:ba:
31:86:38:f4:8e:a3:74:5b:58:76:b4:6f:a8:6f:c8:ce:f8:c7:
1b:3a:fd:7e:78:51:87:6c:70:c4:46:9e:6a:31:d7:66:b4:be:
33:63:5e:ff:f4:b4:09:9f:92:37:4c:36:c0:26:c7:58:34:7d:
c2:b5:94:b0:58:f4:a7:2f:0f:c5:b0:71:7a:f1:7c:cd:4e:3f:
d0:4b:d7:47:42:9c:7d:66:3c:5b:9d:23:7c:a0:fb:75:ac:d4:
bf:82:7d:4e:3d:69:09:3a:bd:4b:69:f1:12:56:a4:8a:a8:ec:
40:12:05:ae:e0:4b:5b:6c:73:e9:33:27:4f:ab:5c:74:92:86:
14:c9:a1:c6:ca:dc:c5:9d:cc:de:6c:54:63:a4:d4:7d:a1:f3:
4d:c6:6b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaKvLUilXkJ70tFW3cvZPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODc4ZWRkYTZhZTRhMDE0N2RiNzBiNjYxMDVjZmQxN2Yy
MDY2YTMwHhcNMjUxMDI1MDcwMDEzWhcNMjUxMDI2MDcwMDEzWjAzMTEwLwYDVQQD
EyhkZjNkYzEzMjU4ODA2MjI1NjY3ZGJjNGJhZmQ0ZGUwM2Y3ODQ3MTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XcG1Vilw5zwQEsbjokc4vY8lQ4W
/UDsBl8t5c8k4cA9y3PyYHiVW8ifXPVm+JBMtBPwCe0JdxtMDTzJV31xZkALevml
o/ZU2gY+bml5Cwz7z0WMLnTBjsHKKoLfiq2wg7btCwlivW3HJJxR+XaIpXuKEXnf
FuoAJQvZWcn1TWBGTKKNY9IELJiDaQWN/0Dl7atTs7QSx5HxsiuBvfKVx1VgggNi
BowsKH5xM278Qq93M+pYM8k6SiGLg137hv98H3gpHTex3in/WuPiKesaMzZWuT6f
O5z+rF/lSNeDMI5cQ87sllwssOrKmeIEtfSu7sUeqWFv5Wz5wtb1vCLVxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN89wTJYgGIlZn28S6/U3gP3hHE4MB8GA1UdIwQY
MBaAFHiHjt2mrkoBR9twtmEFz9F/IGajMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mODc0MjItM2M4ZS00YjUxLWJhYjgt
MmUzZWQ1YTE3MDk4LzEvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mODc0MjItM2M4ZS00YjUxLWJhYjgtMmUzZWQ1YTE3MDk4
LzEvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsOK2PA9
3jt0hinbZ4perSv9PnQa0OOH0P+vIUWz3wQ8onSKi8Bx604Fr9Bf+D9f5bNo4bhS
xCxd29fQqaZN5epcKTDboE0GQNoVv1C0J+zCChdhpzzZPf1YZSXeCbO1emLHgljS
YZCb5Ge6MYY49I6jdFtYdrRvqG/IzvjHGzr9fnhRh2xwxEaeajHXZrS+M2Ne//S0
CZ+SN0w2wCbHWDR9wrWUsFj0py8PxbBxevF8zU4/0EvXR0KcfWY8W50jfKD7dazU
v4J9Tj1pCTq9S2nxElakiqjsQBIFruBLW2xz6TMnT6tcdJKGFMmhxsrcxZ3M3mxU
Y6TUfaHzTcZr8Q==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:33:42 2025 by rpki-client