Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: njjqJdRxnte13MfvV46iVCkuiZafXHg5RtiYSsj4V+8=
Subject key identifier: CE:DD:CD:03:C5:AA:BE:62:9C:7D:79:74:D2:9B:17:98:B2:85:1B:AF
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019A4F2B27C4CE49AA5F4BBE71AF883E250E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0F81
Signing time: Tue 04 Nov 2025 14:00:19 +0000
Manifest this update: Tue 04 Nov 2025 14:00:19 +0000
Manifest next update: Wed 05 Nov 2025 14:00:19 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: +iL6hbIDoTKwzEKx501qBXjLAs/rkx8KBLnGHxsDThA=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: OVlT_pQqA08Q1UrNiKWeQjISths.roa (hash: R9hMVU1azsLDsV2kScsNqSIvknc94xA2JDe9jn5I16c=)
4: QRJe2bGhDZl-uF_MksH_-yAAdPM.roa (hash: sJzer8Dgec7IoDEanf1HmkhPf2w8HE2htP6s/ryl3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:27:c4:ce:49:aa:5f:4b:be:71:af:88:3e:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Nov 4 14:00:19 2025 GMT
Not After : Nov 5 14:00:19 2025 GMT
Subject: CN=ceddcd03c5aabe629c7d7974d29b1798b2851baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bc:0e:b2:86:19:a3:b8:a9:6d:69:9c:a4:3e:
86:49:f3:4a:c4:54:13:81:1b:38:21:d3:23:c7:b3:
24:56:d9:ab:88:79:34:d5:8d:49:4e:96:3f:ba:ee:
8b:ef:ab:3c:38:5e:d3:3e:7e:e0:4b:b4:e8:6c:0e:
d4:bb:0d:71:28:41:5b:69:05:f1:a6:19:71:d4:f0:
1e:bf:ba:7e:bf:4b:19:a2:83:9c:57:e8:19:cb:ee:
68:02:b8:ac:46:cd:27:9c:da:68:c4:86:b9:63:fb:
2f:f3:26:fa:46:51:51:a5:3c:59:2d:cf:75:b8:6d:
b8:f6:38:c2:02:85:5a:32:f1:18:d3:e7:c6:44:1d:
4d:9c:96:42:67:c8:ec:df:54:9e:e1:97:d9:95:73:
0b:05:40:57:19:65:3d:fb:ee:13:e7:92:d8:7f:f1:
db:11:4b:31:eb:02:dd:c2:ab:b3:86:aa:fd:e7:9b:
4e:e8:6c:35:c3:73:ac:90:46:52:c1:cf:fc:fa:1a:
de:6a:7d:cf:82:fd:3e:6e:3d:fe:f6:ba:61:8c:01:
79:e2:81:5e:28:cf:b4:f0:df:08:58:11:a8:a6:a7:
6c:25:a1:f4:f4:0a:79:66:90:9b:8c:3a:9e:07:6a:
68:12:ba:00:0b:bc:4c:ed:00:11:33:e0:69:e6:26:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DD:CD:03:C5:AA:BE:62:9C:7D:79:74:D2:9B:17:98:B2:85:1B:AF
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0d:83:cf:65:ec:d2:f3:38:22:60:f6:df:77:ac:00:84:70:
2c:88:4b:fd:a0:56:92:a6:de:03:bb:46:64:d8:91:ce:d0:3e:
7d:28:33:2a:62:18:3a:90:5c:ce:b6:41:3d:20:f6:ba:5c:d1:
dd:f8:2b:20:50:39:55:b6:33:50:6b:9c:57:a0:87:6d:6b:99:
aa:8c:0d:99:04:98:78:15:68:89:29:e0:88:b9:81:75:c2:3c:
9f:ec:30:f5:13:13:64:fd:fd:90:3b:c7:f6:80:76:79:05:33:
e0:eb:f7:03:7d:7a:88:a7:54:3e:0b:b2:88:48:a0:ad:45:30:
c9:6f:cc:96:bc:8e:ac:c0:8c:38:a3:6a:7e:c7:0d:35:40:f0:
69:8c:3e:84:c7:b9:ac:5d:35:6c:f2:9b:c5:f4:61:8a:58:67:
b5:bd:a0:42:f4:aa:32:53:be:a0:7b:54:f4:ec:05:36:15:a1:
a2:a0:c6:25:aa:24:28:b0:03:01:fa:b0:6b:3d:c7:50:a3:c8:
e2:0a:5c:5c:c8:74:90:78:3b:ae:63:6c:ab:50:ea:02:60:e8:
ae:06:98:96:67:51:7e:fb:50:5c:15:b6:af:dd:de:7e:2f:34:
74:a9:72:b2:18:e3:90:7a:2d:b4:8a:b0:c7:01:30:e9:1b:b1:
e7:fc:03:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKyfEzkmqX0u+ca+IPiUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzIxZWFkNmE0NTc1NjQzY2I3MDMwNjJjMDk2ODc1NWU4
MjgxZWIwHhcNMjUxMTA0MTQwMDE5WhcNMjUxMTA1MTQwMDE5WjAzMTEwLwYDVQQD
EyhjZWRkY2QwM2M1YWFiZTYyOWM3ZDc5NzRkMjliMTc5OGIyODUxYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rwOsoYZo7ipbWmcpD6GSfNKxFQT
gRs4IdMjx7MkVtmriHk01Y1JTpY/uu6L76s8OF7TPn7gS7TobA7Uuw1xKEFbaQXx
phlx1PAev7p+v0sZooOcV+gZy+5oArisRs0nnNpoxIa5Y/sv8yb6RlFRpTxZLc91
uG249jjCAoVaMvEY0+fGRB1NnJZCZ8js31Se4ZfZlXMLBUBXGWU9++4T55LYf/Hb
EUsx6wLdwquzhqr955tO6Gw1w3OskEZSwc/8+hrean3Pgv0+bj3+9rphjAF54oFe
KM+08N8IWBGopqdsJaH09Ap5ZpCbjDqeB2poEroAC7xM7QARM+Bp5iZRLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7dzQPFqr5inH15dNKbF5iyhRuvMB8GA1UdIwQY
MBaAFBByHq1qRXVkPLcDBiwJaHVegoHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQt
M2Q0YWU4MGZjNDVkLzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQtM2Q0YWU4MGZjNDVk
LzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ2Dz2Xs
0vM4ImD233esAIRwLIhL/aBWkqbeA7tGZNiRztA+fSgzKmIYOpBczrZBPSD2ulzR
3fgrIFA5VbYzUGucV6CHbWuZqowNmQSYeBVoiSngiLmBdcI8n+ww9RMTZP39kDvH
9oB2eQUz4Ov3A316iKdUPguyiEigrUUwyW/MlryOrMCMOKNqfscNNUDwaYw+hMe5
rF01bPKbxfRhilhntb2gQvSqMlO+oHtU9OwFNhWhoqDGJaokKLADAfqwaz3HUKPI
4gpcXMh0kHg7rmNsq1DqAmDorgaYlmdRfvtQXBW2r93efi80dKlyshjjkHottIqw
xwEw6Rux5/wDQQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:49:13 2025 by rpki-client