Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: osiieCICt3Xmm6s0cXZTdtMKG5Fw2AUk4vsk5io/iBU=
Subject key identifier: 93:31:A6:A3:C1:12:09:E0:B9:4F:08:69:CD:72:74:E9:84:73:D2:46
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019A0ECB89F024B8FAFA334C9306FECF42FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 1409
Signing time: Thu 23 Oct 2025 02:00:11 +0000
Manifest this update: Thu 23 Oct 2025 02:00:11 +0000
Manifest next update: Fri 24 Oct 2025 02:00:11 +0000
Files and hashes: 1: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=)
2: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: l5YKf4WiNFE8udDG7HacKZRnq2eY/d44qNbr/XKHxvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:cb:89:f0:24:b8:fa:fa:33:4c:93:06:fe:cf:42:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Oct 23 02:00:11 2025 GMT
Not After : Oct 24 02:00:11 2025 GMT
Subject: CN=9331a6a3c11209e0b94f0869cd7274e98473d246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:ca:88:bb:4b:c3:90:52:20:23:7f:56:86:
c2:45:8c:02:e8:03:79:d4:ea:a5:87:3a:1c:84:b8:
8b:11:0e:df:d7:39:ae:fb:96:49:2a:7f:72:46:41:
21:51:f9:7b:90:d2:cf:73:51:1a:9f:eb:9f:fd:9e:
37:0a:61:67:8e:55:2c:46:fb:7d:7d:ce:08:48:88:
d1:c1:81:76:14:e7:e2:bd:46:cb:02:cd:d8:22:bd:
12:f6:e2:de:0f:26:ec:8f:95:26:c7:9f:4c:1e:c8:
1f:4d:1c:95:52:a3:74:a0:33:bc:c9:72:f4:48:f7:
49:2a:e7:8b:9c:a8:31:b7:89:97:6f:e3:02:a9:3a:
9c:60:8b:bf:40:4f:b5:6e:15:a2:95:96:cd:fc:3d:
a2:81:b4:8f:48:28:47:9d:d2:95:08:ad:18:92:3b:
6c:02:9d:c0:a6:f9:bc:fa:d7:19:87:a7:a4:56:a0:
21:c5:7c:25:44:23:ee:7c:60:7a:e6:16:cd:a9:78:
f8:2a:6d:1a:53:f7:f5:8f:09:fb:3c:d2:f1:aa:bd:
bb:3b:4e:73:83:9d:18:1d:bf:57:33:e6:d0:00:35:
30:2d:a1:96:27:9a:84:f4:68:30:7a:f4:4c:ed:4b:
0d:38:7a:70:5b:4f:a1:87:09:5d:3f:fd:e8:03:c7:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:A6:A3:C1:12:09:E0:B9:4F:08:69:CD:72:74:E9:84:73:D2:46
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cd:0d:28:56:e7:3a:16:dd:8e:b3:4b:64:85:db:8b:bb:9d:
2c:06:ec:57:2c:7d:ed:87:94:4f:b0:3d:ea:02:b2:56:87:63:
58:86:a3:7d:c2:e7:6e:24:89:17:89:59:4a:aa:7f:d9:e1:b8:
8c:b8:d8:34:2c:c2:3a:88:ca:d2:8b:52:3b:17:d9:43:b5:f4:
82:35:1b:1e:e2:90:dc:9c:61:37:6b:81:2f:ca:74:d0:b8:4c:
d2:3d:aa:80:e8:1c:dd:88:3f:6c:0d:6e:ea:bd:3f:e6:57:74:
04:87:c2:e2:46:6c:cb:06:d7:1d:65:fe:b3:c5:c9:47:52:e5:
71:00:4a:e3:aa:67:13:0f:ca:e7:fd:4d:e9:cd:e4:db:7b:db:
ff:eb:aa:67:9b:1f:2a:62:16:9c:95:49:0e:0e:cb:b2:bd:c8:
a9:23:e0:00:d2:52:db:c2:b6:85:48:96:52:90:ca:f3:8c:df:
6e:65:70:a9:03:55:a0:bc:cc:03:24:2f:d8:a8:23:58:78:68:
fa:0b:08:ec:54:e1:00:3a:43:4b:cd:18:80:2c:54:f9:84:d4:
ea:ff:74:6c:14:44:24:54:0c:ca:ad:a0:c5:5a:97:3d:8b:41:
1d:65:38:33:6f:01:46:24:7b:07:33:91:93:a4:bc:ca:ce:34:
79:45:1c:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoOy4nwJLj6+jNMkwb+z0L7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0
ZWI3YjkwHhcNMjUxMDIzMDIwMDExWhcNMjUxMDI0MDIwMDExWjAzMTEwLwYDVQQD
Eyg5MzMxYTZhM2MxMTIwOWUwYjk0ZjA4NjljZDcyNzRlOTg0NzNkMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+nKiLtLw5BSICN/VobCRYwC6AN5
1OqlhzochLiLEQ7f1zmu+5ZJKn9yRkEhUfl7kNLPc1Ean+uf/Z43CmFnjlUsRvt9
fc4ISIjRwYF2FOfivUbLAs3YIr0S9uLeDybsj5Umx59MHsgfTRyVUqN0oDO8yXL0
SPdJKueLnKgxt4mXb+MCqTqcYIu/QE+1bhWilZbN/D2igbSPSChHndKVCK0Ykjts
Ap3Apvm8+tcZh6ekVqAhxXwlRCPufGB65hbNqXj4Km0aU/f1jwn7PNLxqr27O05z
g50YHb9XM+bQADUwLaGWJ5qE9GgwevRM7UsNOHpwW0+hhwldP/3oA8ewjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMxpqPBEgnguU8Iac1ydOmEc9JGMB8GA1UdIwQY
MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt
NzU2OGExMGRmNDQzLzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz
LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABc0NKFbn
OhbdjrNLZIXbi7udLAbsVyx97YeUT7A96gKyVodjWIajfcLnbiSJF4lZSqp/2eG4
jLjYNCzCOojK0otSOxfZQ7X0gjUbHuKQ3JxhN2uBL8p00LhM0j2qgOgc3Yg/bA1u
6r0/5ld0BIfC4kZsywbXHWX+s8XJR1LlcQBK46pnEw/K5/1N6c3k23vb/+uqZ5sf
KmIWnJVJDg7Lsr3IqSPgANJS28K2hUiWUpDK84zfbmVwqQNVoLzMAyQv2KgjWHho
+gsI7FThADpDS80YgCxU+YTU6v90bBREJFQMyq2gxVqXPYtBHWU4M28BRiR7BzOR
k6S8ys40eUUcEg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 07:22:32 2025 by rpki-client