Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: o4YZWYAkG+BDZ00VieGYbH8FWzQgUteit870Gz83UI0=
Subject key identifier: A8:D0:65:87:06:D7:B5:E8:72:FD:A6:21:05:61:1F:38:04:DF:FA:0D
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 019A729394AC26EDE2B6A708D870121502DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 1460
Signing time: Tue 11 Nov 2025 11:01:05 +0000
Manifest this update: Tue 11 Nov 2025 11:01:05 +0000
Manifest next update: Wed 12 Nov 2025 11:01:05 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: WPDLOemMrK8UF76MA1IgSLS5DgDvc7wIMuxbX4kxmPM=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:94:ac:26:ed:e2:b6:a7:08:d8:70:12:15:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Nov 11 11:01:05 2025 GMT
Not After : Nov 12 11:01:05 2025 GMT
Subject: CN=a8d0658706d7b5e872fda62105611f3804dffa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:92:ce:7c:04:2c:20:4f:b1:27:d6:35:a5:
9b:7e:31:87:92:65:ca:15:a6:83:a5:18:ed:40:31:
20:b9:c8:a3:6b:92:d5:1b:f8:7b:fa:4d:57:ea:ed:
e0:53:da:57:40:87:d4:50:94:37:f5:ff:23:34:87:
1f:10:4b:7b:0c:99:73:21:a9:57:b9:64:a6:ca:ed:
2e:90:d6:73:c6:c3:3a:ab:9f:9f:ff:85:50:53:6d:
91:86:13:79:dc:7b:c1:5f:f5:4a:01:8e:1f:f7:51:
ae:7f:6f:6a:c0:97:4b:e2:c4:22:db:11:cf:ec:22:
ad:1d:58:7e:9b:41:45:6e:39:92:9f:41:1a:8d:d2:
c4:34:80:fe:95:52:d6:cc:ba:df:b1:cf:99:7e:d5:
eb:5f:78:ae:7a:97:ab:e8:d4:23:70:ad:b0:67:2e:
d8:30:f3:75:c6:e4:26:e2:f8:3b:aa:7e:2a:e7:b7:
47:43:82:77:8d:8e:be:63:c5:8b:2e:28:1d:ee:de:
3c:18:2e:d0:ea:57:ce:22:f3:6e:81:39:ed:72:a4:
08:25:c3:1e:91:4b:81:25:59:c0:28:9e:42:0d:8c:
59:6d:da:a5:a7:42:ec:ee:c6:50:00:b8:c8:7d:b1:
bd:9f:00:a0:1b:67:69:95:a7:0b:29:cb:3f:48:9c:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:65:87:06:D7:B5:E8:72:FD:A6:21:05:61:1F:38:04:DF:FA:0D
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:d1:b3:ea:ef:a2:eb:f9:27:df:32:88:2a:07:77:7c:2f:
0d:9e:bd:dc:c0:89:43:34:9c:59:fe:2a:7e:bc:67:a9:dc:59:
02:36:67:fe:e1:c0:14:38:f9:4b:b7:0b:a5:1f:5d:2a:12:ae:
51:91:e0:39:d9:b6:af:35:3e:2a:fa:b3:b6:44:20:47:dd:4c:
9e:d4:0c:46:5b:de:47:22:2f:c8:aa:c0:6d:7d:9f:87:9f:78:
90:79:09:38:b4:e9:62:c0:86:b5:44:8e:7e:c1:93:46:73:a3:
0f:30:3c:56:44:0f:b6:4b:18:4d:88:b1:7a:7a:b5:5f:0a:80:
4e:5d:44:61:92:43:3f:ff:d5:2a:4d:bf:9c:fc:44:f6:1b:2d:
a0:64:57:97:cc:51:44:82:89:69:6e:9c:23:91:f2:0e:be:58:
6b:19:28:d9:15:7c:21:df:08:c5:ae:2a:16:5a:5b:25:bd:da:
62:a7:a7:0b:6f:df:31:fb:e5:43:00:01:5c:b5:45:c0:1c:a7:
e2:cd:87:f3:7c:03:a8:f5:a8:8b:0a:80:9c:77:f2:95:4a:ee:
c7:a9:eb:93:ed:7b:43:60:87:43:9e:d4:45:c3:0c:e1:15:86:
02:1b:c3:48:29:75:c7:27:e7:8f:66:25:33:c4:f7:b2:20:a7:
1a:bf:22:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk5SsJu3itqcI2HASFQLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2FhYzcxZjE3ZWYwMzNjYjY1MzY3OTUzMzhmZGM3YmMw
ZjIyNjMwHhcNMjUxMTExMTEwMTA1WhcNMjUxMTEyMTEwMTA1WjAzMTEwLwYDVQQD
EyhhOGQwNjU4NzA2ZDdiNWU4NzJmZGE2MjEwNTYxMWYzODA0ZGZmYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPmSznwELCBPsSfWNaWbfjGHkmXK
FaaDpRjtQDEgucija5LVG/h7+k1X6u3gU9pXQIfUUJQ39f8jNIcfEEt7DJlzIalX
uWSmyu0ukNZzxsM6q5+f/4VQU22RhhN53HvBX/VKAY4f91Guf29qwJdL4sQi2xHP
7CKtHVh+m0FFbjmSn0EajdLENID+lVLWzLrfsc+ZftXrX3iueper6NQjcK2wZy7Y
MPN1xuQm4vg7qn4q57dHQ4J3jY6+Y8WLLigd7t48GC7Q6lfOIvNugTntcqQIJcMe
kUuBJVnAKJ5CDYxZbdqlp0Ls7sZQALjIfbG9nwCgG2dplacLKcs/SJx8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjQZYcG17Xocv2mIQVhHzgE3/oNMB8GA1UdIwQY
MBaAFHh6rHHxfvAzy2U2eVM4/ce8DyJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEt
ZDEyODY3YjQ2NzMzLzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEtZDEyODY3YjQ2NzMz
LzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlnRs+rv
ouv5J98yiCoHd3wvDZ693MCJQzScWf4qfrxnqdxZAjZn/uHAFDj5S7cLpR9dKhKu
UZHgOdm2rzU+KvqztkQgR91MntQMRlveRyIvyKrAbX2fh594kHkJOLTpYsCGtUSO
fsGTRnOjDzA8VkQPtksYTYixenq1XwqATl1EYZJDP//VKk2/nPxE9hstoGRXl8xR
RIKJaW6cI5HyDr5Yaxko2RV8Id8Ixa4qFlpbJb3aYqenC2/fMfvlQwABXLVFwByn
4s2H83wDqPWoiwqAnHfylUrux6nrk+17Q2CHQ57URcMM4RWGAhvDSCl1xyfnj2Yl
M8T3siCnGr8ihw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:28 2025 by rpki-client