Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier: pX2SWV/XBV3fBZPsAPPMTKI/U8kmw273wkulmPmE+ps=
Subject key identifier: D6:38:7C:C5:AE:7A:2A:61:DA:A4:68:28:7C:96:00:01:EF:6A:4D:8B
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial: 019A725C95ABC37EAF37FB116070B0165886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: ojUxYZdo5D06bGjMlY5XIeQrtAgoyuKLMjQpPDXrBc0=)
2: 90qeQZqwuh0oi-oH9Ho2Hr4JeqU.roa (hash: yAfSfLIB/wlDkdhF0bN4I000INgGh/D9HhTP3okCxDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:95:ab:c3:7e:af:37:fb:11:60:70:b0:16:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=d6387cc5ae7a2a61daa468287c960001ef6a4d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:3f:83:00:64:14:6c:34:9a:71:75:07:5b:
b8:a2:04:18:06:d5:d0:40:d7:b5:f2:ce:62:54:3f:
05:8c:56:af:7c:3b:8b:3b:2c:fa:e4:02:05:02:bd:
32:e4:6c:e8:6f:06:ef:c3:01:81:8e:9f:d0:b4:e0:
d3:b5:98:b7:ba:7f:de:c0:1f:88:39:2c:6f:02:28:
6a:97:05:13:25:f9:a8:18:54:22:c4:72:f8:e5:39:
f3:39:9b:0c:cf:58:78:15:2f:3f:53:63:46:d4:c9:
4b:3a:12:00:53:06:9f:19:45:d0:3f:06:14:fa:a6:
66:76:81:ec:90:c4:2e:9a:ee:78:98:93:02:67:2b:
f5:c5:2e:2f:2b:28:ef:2b:56:8b:33:cd:69:fd:90:
d1:63:ab:6c:2e:ce:2b:7d:35:82:25:ad:e1:61:44:
09:91:9c:4e:dd:eb:26:80:ad:a7:3f:bf:07:c5:28:
8f:18:c8:af:df:89:e9:a9:0f:6b:b4:e1:f6:58:ae:
41:37:95:3a:f1:12:d7:b3:7e:74:59:ac:7f:8f:30:
a0:ae:86:6b:05:6d:d9:dd:49:37:18:a3:14:79:34:
b0:f7:12:1a:4c:1a:fc:aa:d8:62:78:7a:2d:e6:2b:
ce:cb:8f:86:64:10:97:3d:14:3d:f0:6f:2d:10:6b:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:7C:C5:AE:7A:2A:61:DA:A4:68:28:7C:96:00:01:EF:6A:4D:8B
X509v3 Authority Key Identifier:
keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:44:6b:69:ea:14:be:dd:eb:dd:b6:9d:fb:0b:6f:13:62:13:
db:82:00:52:e0:c9:94:53:06:f0:2e:f2:7a:7a:d0:86:69:74:
ad:1f:e2:56:29:0a:5a:de:32:bc:6d:95:db:30:ab:60:0a:b4:
87:eb:d8:af:44:d2:fc:b2:2c:55:01:ea:c5:d6:82:7c:bc:1a:
62:b4:68:99:7d:b6:ec:69:30:31:63:f1:81:87:38:f6:b0:f0:
23:21:0f:35:14:ba:17:7e:3a:37:62:7b:6d:b5:f6:dc:3b:23:
22:b7:80:4e:1e:21:2f:99:8e:c1:31:e7:7b:fd:cc:ac:6a:81:
86:49:d2:71:41:48:6c:2c:b0:52:fb:37:ad:8d:88:b5:84:a6:
29:33:1b:09:56:bc:bf:d1:a2:65:bf:64:11:e9:7f:1c:47:b3:
7d:15:3f:33:77:9e:ad:47:89:87:66:8a:1c:56:39:d1:d7:0f:
22:30:d6:06:e0:37:9d:1a:df:90:ad:4d:08:7c:1a:c4:8c:e8:
31:98:0b:b7:cb:37:8e:f7:2f:32:95:1d:bb:7c:10:af:33:36:
e4:f0:71:77:87:c5:25:22:a4:dd:27:55:83:bf:ef:87:e9:03:
4a:9d:0b:97:44:ed:a5:c6:ba:5f:87:9b:b2:b9:40:31:82:f7:
24:08:66:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJWrw36vN/sRYHCwFliGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDgyMDcyOWEwZjlhYmZiNmNhYzNiNWY5NmMyNzE5OGQ3
NjM5MWIwHhcNMjUxMTExMTAwMTAxWhcNMjUxMTEyMTAwMTAxWjAzMTEwLwYDVQQD
EyhkNjM4N2NjNWFlN2EyYTYxZGFhNDY4Mjg3Yzk2MDAwMWVmNmE0ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/M/gwBkFGw0mnF1B1u4ogQYBtXQ
QNe18s5iVD8FjFavfDuLOyz65AIFAr0y5GzobwbvwwGBjp/QtODTtZi3un/ewB+I
OSxvAihqlwUTJfmoGFQixHL45TnzOZsMz1h4FS8/U2NG1MlLOhIAUwafGUXQPwYU
+qZmdoHskMQumu54mJMCZyv1xS4vKyjvK1aLM81p/ZDRY6tsLs4rfTWCJa3hYUQJ
kZxO3esmgK2nP78HxSiPGMiv34npqQ9rtOH2WK5BN5U68RLXs350Wax/jzCgroZr
BW3Z3Uk3GKMUeTSw9xIaTBr8qthieHot5ivOy4+GZBCXPRQ98G8tEGtGJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY4fMWueiph2qRoKHyWAAHvak2LMB8GA1UdIwQY
MBaAFNRIIHKaD5q/tsrDtflsJxmNdjkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUt
NjE5NDkzNTZhOWEwLzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUtNjE5NDkzNTZhOWEw
LzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkRraeoU
vt3r3bad+wtvE2IT24IAUuDJlFMG8C7yenrQhml0rR/iVikKWt4yvG2V2zCrYAq0
h+vYr0TS/LIsVQHqxdaCfLwaYrRomX227GkwMWPxgYc49rDwIyEPNRS6F346N2J7
bbX23DsjIreATh4hL5mOwTHne/3MrGqBhknScUFIbCywUvs3rY2ItYSmKTMbCVa8
v9GiZb9kEel/HEezfRU/M3eerUeJh2aKHFY50dcPIjDWBuA3nRrfkK1NCHwaxIzo
MZgLt8s3jvcvMpUdu3wQrzM25PBxd4fFJSKk3SdVg7/vh+kDSp0Ll0Ttpca6X4eb
srlAMYL3JAhmEA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:39 2025 by rpki-client