Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: jfMrmpOXdwjw6NGun6eT+IA1gVHi7K/KpBake9dWVZA=
Subject key identifier: 20:BB:81:35:26:31:F2:E8:8C:0C:84:CD:31:62:EC:E4:7D:98:D9:5B
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019A14970C3055553D69DF370117B4ED3928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0E27
Signing time: Fri 24 Oct 2025 05:00:34 +0000
Manifest this update: Fri 24 Oct 2025 05:00:34 +0000
Manifest next update: Sat 25 Oct 2025 05:00:34 +0000
Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=)
2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: 2Lda8DkSSHMy+Klgy/FkMK9TmBA6w97s6aEmGidjRsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:97:0c:30:55:55:3d:69:df:37:01:17:b4:ed:39:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Oct 24 05:00:34 2025 GMT
Not After : Oct 25 05:00:34 2025 GMT
Subject: CN=20bb81352631f2e88c0c84cd3162ece47d98d95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:32:a0:a6:8b:36:22:83:82:d4:7c:7b:fe:
01:56:02:be:14:7d:43:2a:b1:0f:d1:48:3e:f9:15:
3a:0c:94:84:e4:9f:ec:ed:dd:30:ab:a9:26:77:c5:
4f:9d:b9:c9:5d:79:50:dc:81:a7:71:7d:86:22:dc:
18:34:6b:73:88:f9:24:d6:99:41:f5:cd:66:f5:70:
5a:e0:85:9b:30:bc:a4:d5:1f:32:8f:93:7c:be:9c:
cf:53:6c:41:56:e3:3f:4c:7f:b0:00:08:f2:b2:bb:
9d:97:82:77:db:31:19:33:b0:e9:2e:20:2f:1c:29:
76:94:01:00:65:b2:d0:07:a9:d2:54:af:e7:4c:f7:
dc:d9:47:0f:9d:8c:16:29:db:a3:74:c4:19:5c:40:
6a:4b:5f:d9:a4:c5:1a:1d:ed:c4:66:7c:25:8e:11:
df:6a:e7:e9:df:48:b9:de:a5:04:3c:75:f0:53:49:
53:a5:f1:78:53:72:b7:90:e4:da:35:29:14:b3:1c:
b5:e3:16:f2:47:cb:52:34:f6:f3:33:39:a3:e9:46:
43:1d:cd:60:23:e5:48:74:b9:7f:75:71:e5:2d:4d:
77:9d:cc:f7:e9:f8:a1:9d:76:ee:2e:22:3d:ef:9e:
af:50:81:55:60:bd:53:95:a5:87:fa:d7:1e:b9:6e:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:81:35:26:31:F2:E8:8C:0C:84:CD:31:62:EC:E4:7D:98:D9:5B
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c9:e8:dc:ee:71:d3:c3:65:e6:22:ae:79:36:51:ae:3d:66:
a9:b9:d4:0e:ee:18:dc:1d:4e:03:ae:57:37:2d:9b:cc:4b:7b:
04:4c:e1:db:79:a6:e9:8e:bb:d7:06:8c:b3:47:8f:67:fd:55:
b4:24:33:06:7d:66:54:30:36:9d:05:b0:6a:5b:31:2a:f4:ea:
0a:76:36:94:f3:e1:af:f1:05:fd:ee:6b:48:ca:68:90:38:aa:
81:b6:ee:ce:95:a5:53:0a:7d:eb:96:9a:a6:f2:2b:bd:55:1c:
57:fe:ca:b3:b5:95:9b:f0:c8:a5:fb:c1:cf:d1:93:a5:3c:24:
47:ea:26:27:1c:f2:14:48:5c:b1:ea:27:dd:51:aa:99:c5:7f:
3b:61:e7:5e:79:a8:47:a7:2f:59:12:12:4a:c2:a4:dd:6e:b2:
5b:1e:3f:5e:49:1a:b3:43:b0:f9:df:b7:2b:c7:49:7b:81:9c:
34:86:04:7b:b3:f6:4a:48:55:7d:08:a6:2d:5f:92:ae:9c:43:
3c:a9:78:c0:37:7a:30:4f:11:01:4b:61:00:dd:d1:22:a2:bf:
ae:0e:b0:35:71:89:46:3f:35:40:43:4c:f2:da:23:17:b7:c5:
47:5e:e4:2f:ef:87:59:0c:b9:31:de:ef:50:89:c1:8b:c2:5e:
bc:22:79:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoUlwwwVVU9ad83ARe07TkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh
YzA4NTkwHhcNMjUxMDI0MDUwMDM0WhcNMjUxMDI1MDUwMDM0WjAzMTEwLwYDVQQD
EygyMGJiODEzNTI2MzFmMmU4OGMwYzg0Y2QzMTYyZWNlNDdkOThkOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+4yoKaLNiKDgtR8e/4BVgK+FH1D
KrEP0Ug++RU6DJSE5J/s7d0wq6kmd8VPnbnJXXlQ3IGncX2GItwYNGtziPkk1plB
9c1m9XBa4IWbMLyk1R8yj5N8vpzPU2xBVuM/TH+wAAjysrudl4J32zEZM7DpLiAv
HCl2lAEAZbLQB6nSVK/nTPfc2UcPnYwWKdujdMQZXEBqS1/ZpMUaHe3EZnwljhHf
aufp30i53qUEPHXwU0lTpfF4U3K3kOTaNSkUsxy14xbyR8tSNPbzMzmj6UZDHc1g
I+VIdLl/dXHlLU13ncz36fihnXbuLiI9756vUIFVYL1TlaWH+tceuW5bOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC7gTUmMfLojAyEzTFi7OR9mNlbMB8GA1UdIwQY
MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt
ZWYyMTkzODFmMTBlLzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl
LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcno3O5x
08Nl5iKueTZRrj1mqbnUDu4Y3B1OA65XNy2bzEt7BEzh23mm6Y671waMs0ePZ/1V
tCQzBn1mVDA2nQWwalsxKvTqCnY2lPPhr/EF/e5rSMpokDiqgbbuzpWlUwp965aa
pvIrvVUcV/7Ks7WVm/DIpfvBz9GTpTwkR+omJxzyFEhcseon3VGqmcV/O2HnXnmo
R6cvWRISSsKk3W6yWx4/Xkkas0Ow+d+3K8dJe4GcNIYEe7P2SkhVfQimLV+SrpxD
PKl4wDd6ME8RAUthAN3RIqK/rg6wNXGJRj81QENM8tojF7fFR17kL++HWQy5Md7v
UInBi8JevCJ5zQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:54:09 2025 by rpki-client