Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
File: eIGF2YREhCtpfiv97jlgqT8nru0.mft (raw, json)
Hash identifier: zzKR6Mq3h7R/muIqX1BBMWaT7b7rSwM6Zq4U4aSnhSE=
Subject key identifier: C0:3F:7F:9D:FC:93:04:5A:C4:09:A4:BA:06:5B:51:C1:1D:DE:C9:CB
Authority key identifier: 78:81:85:D9:84:44:84:2B:69:7E:2B:FD:EE:39:60:A9:3F:27:AE:ED
Certificate issuer: /CN=788185d98444842b697e2bfdee3960a93f27aeed
Certificate serial: 01992367BE6970C90DBD319987AA8C41DBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
Manifest number: CA
Signing time: Sun 07 Sep 2025 09:00:25 +0000
Manifest this update: Sun 07 Sep 2025 09:00:25 +0000
Manifest next update: Mon 08 Sep 2025 09:00:25 +0000
Files and hashes: 1: eIGF2YREhCtpfiv97jlgqT8nru0.crl (hash: N560UQ2RvAEHwmFYsn8IrosMS2AfsDvmuz+1Plirim4=)
2: vs1dOMKwDJJ5uaYkiRvlWR6leYM.roa (hash: Qar6zUY49SmNjrFs4ROqa7Zsokz8zuJ+RB9gpxiLG9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:be:69:70:c9:0d:bd:31:99:87:aa:8c:41:db:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788185d98444842b697e2bfdee3960a93f27aeed
Validity
Not Before: Sep 7 09:00:25 2025 GMT
Not After : Sep 8 09:00:25 2025 GMT
Subject: CN=c03f7f9dfc93045ac409a4ba065b51c11ddec9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:ff:b5:04:35:4c:9a:4c:62:17:95:5b:d4:
2b:9d:68:2c:2f:84:6d:50:32:ce:af:56:23:78:8e:
9d:ba:24:a7:30:75:c6:e6:c8:a0:cc:17:8f:5a:8b:
5f:0d:d7:8d:77:ac:5d:e0:a7:50:37:32:48:23:94:
37:97:e8:30:c9:e2:68:fa:a3:8a:13:a2:29:e6:25:
af:c6:2a:eb:89:56:ae:41:eb:5a:80:b4:aa:bb:da:
12:3e:35:b1:1f:9c:a7:5e:8f:51:8f:01:22:b9:f3:
27:93:ef:8c:c8:00:f1:4c:4c:99:70:29:64:03:94:
b0:49:3b:41:6d:c9:bd:86:0a:03:f5:81:a9:d0:8e:
29:02:98:0a:92:e5:f4:48:d4:86:12:68:48:70:0c:
7f:93:2d:88:cb:54:42:6f:15:14:5d:a8:21:4b:60:
a8:3e:d1:18:b3:b3:60:75:07:9c:a7:3e:3e:b9:a0:
64:03:04:fc:f4:3e:46:f9:4c:0f:33:63:46:e7:93:
20:be:43:f9:ce:75:38:99:9c:86:6a:16:8c:63:0a:
73:b7:68:98:50:2a:2b:2a:bd:c1:1d:88:98:99:bb:
a0:f4:e4:13:3b:9b:71:0a:03:6f:bc:75:b9:2b:e6:
74:62:c5:f9:52:1d:21:07:62:e6:34:73:2d:f7:d4:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3F:7F:9D:FC:93:04:5A:C4:09:A4:BA:06:5B:51:C1:1D:DE:C9:CB
X509v3 Authority Key Identifier:
keyid:78:81:85:D9:84:44:84:2B:69:7E:2B:FD:EE:39:60:A9:3F:27:AE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:08:92:5a:40:80:76:2e:1a:c3:d9:74:2b:1e:1d:cc:48:
28:ff:8c:6f:42:78:63:15:a5:3c:0e:f1:26:d0:e5:b6:ec:a5:
f1:6b:f0:5a:e9:86:3b:db:a2:37:53:26:27:33:40:31:88:43:
03:1f:93:93:37:02:1f:ae:53:34:d6:ac:8a:e8:f7:82:80:e5:
4d:79:35:fc:86:8b:82:47:08:9b:39:65:90:ac:02:7b:e7:81:
3f:d3:17:1c:8e:af:8e:cd:d9:4c:eb:fe:33:42:ff:c2:3d:13:
72:6f:87:8a:c0:83:60:89:82:3d:57:e4:6c:7e:38:76:1f:31:
e6:24:07:b4:fc:92:a6:c2:92:8f:4a:75:6e:41:f7:ce:1a:7f:
be:43:8a:3d:25:40:ce:2a:40:94:c8:4b:27:d8:40:19:9c:7e:
7a:fa:b9:1c:c7:bf:28:b6:62:61:c0:47:37:10:6f:78:c6:34:
ca:7e:20:02:b9:80:4c:49:dd:4b:86:a3:37:b3:15:d2:08:23:
5d:03:8e:84:03:2b:fe:4c:27:01:b0:8c:bc:77:71:d9:68:9d:
7a:2c:b5:da:3b:16:af:2d:f5:57:f8:d9:a2:36:d2:b1:f7:7b:
4d:d4:2b:6b:6f:8b:0b:db:88:4b:1a:9d:bb:1f:58:04:47:76:
d8:12:ac:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ75pcMkNvTGZh6qMQdvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODE4NWQ5ODQ0NDg0MmI2OTdlMmJmZGVlMzk2MGE5M2Yy
N2FlZWQwHhcNMjUwOTA3MDkwMDI1WhcNMjUwOTA4MDkwMDI1WjAzMTEwLwYDVQQD
EyhjMDNmN2Y5ZGZjOTMwNDVhYzQwOWE0YmEwNjViNTFjMTFkZGVjOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCD/tQQ1TJpMYheVW9QrnWgsL4Rt
UDLOr1YjeI6duiSnMHXG5sigzBePWotfDdeNd6xd4KdQNzJII5Q3l+gwyeJo+qOK
E6Ip5iWvxirriVauQetagLSqu9oSPjWxH5ynXo9RjwEiufMnk++MyADxTEyZcClk
A5SwSTtBbcm9hgoD9YGp0I4pApgKkuX0SNSGEmhIcAx/ky2Iy1RCbxUUXaghS2Co
PtEYs7NgdQecpz4+uaBkAwT89D5G+UwPM2NG55MgvkP5znU4mZyGahaMYwpzt2iY
UCorKr3BHYiYmbug9OQTO5txCgNvvHW5K+Z0YsX5Uh0hB2LmNHMt99TAkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA/f538kwRaxAmkugZbUcEd3snLMB8GA1UdIwQY
MBaAFHiBhdmERIQraX4r/e45YKk/J67tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUlHRjJZUkVoQ3RwZml2OTdqbGdxVDhucnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85YjE1MjItOGNiMC00YzllLThiZTAt
MWE5YjQ1ZTE0NTU3LzEvZUlHRjJZUkVoQ3RwZml2OTdqbGdxVDhucnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85YjE1MjItOGNiMC00YzllLThiZTAtMWE5YjQ1ZTE0NTU3
LzEvZUlHRjJZUkVoQ3RwZml2OTdqbGdxVDhucnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAwIklpA
gHYuGsPZdCseHcxIKP+Mb0J4YxWlPA7xJtDltuyl8WvwWumGO9uiN1MmJzNAMYhD
Ax+TkzcCH65TNNasiuj3goDlTXk1/IaLgkcImzllkKwCe+eBP9MXHI6vjs3ZTOv+
M0L/wj0Tcm+HisCDYImCPVfkbH44dh8x5iQHtPySpsKSj0p1bkH3zhp/vkOKPSVA
zipAlMhLJ9hAGZx+evq5HMe/KLZiYcBHNxBveMY0yn4gArmATEndS4ajN7MV0ggj
XQOOhAMr/kwnAbCMvHdx2Wideiy12jsWry31V/jZojbSsfd7TdQra2+LC9uISxqd
ux9YBEd22BKskQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:11:17 2025 by rpki-client