Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier: UmsRSc8JTfX1nepZLuZUPldd5x3UmnMDTX9kfrF5wRE=
Subject key identifier: 35:76:78:FF:F3:65:4F:70:FC:55:C4:13:D5:73:03:03:6C:AB:29:D1
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 019A729362D4E2AC4A1D35017F0980D673A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number: 14BE
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=)
2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: 7vrIRJRC1B2PGhzVWjMQbI4dhfNRgIM/b/3zg0TVzDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:62:d4:e2:ac:4a:1d:35:01:7f:09:80:d6:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=357678fff3654f70fc55c413d57303036cab29d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:af:a8:5f:0f:8c:a9:62:b8:a5:d6:7b:b1:
1d:b0:3a:dc:24:a6:83:28:14:9a:6c:76:7b:8f:15:
c4:0d:ad:23:de:3d:fe:f6:77:f0:d1:62:58:20:4f:
84:9f:47:d4:42:73:ea:f6:fd:48:7b:fd:66:a7:21:
f7:cf:5f:4b:9e:bc:cb:09:93:2d:14:5f:79:60:60:
56:24:98:ca:76:f4:c4:92:e6:9b:4c:3a:d0:32:95:
f2:75:04:d5:73:09:d3:32:bf:a2:af:c3:71:95:80:
b4:4f:d0:a3:5e:0e:cf:a0:d2:f7:df:3d:8d:e6:65:
88:ef:b0:06:f6:b0:95:65:5d:a0:58:7d:69:24:c8:
43:a8:4f:1a:f7:ae:e4:f6:90:01:7b:82:45:6a:c3:
39:e7:b5:c7:76:26:10:8f:82:2f:f0:10:7f:5d:b0:
ab:7d:e0:04:1d:38:96:a9:2a:3b:ee:84:0d:18:db:
1b:7f:62:29:f7:9f:28:1d:fa:c8:f6:96:08:2c:8f:
f2:b4:e8:c9:4e:21:49:63:22:54:cd:29:48:2d:04:
35:d1:c4:ad:15:95:a7:45:3f:ac:9c:8b:5f:73:96:
d1:c3:83:68:b9:e1:ff:e7:50:48:3c:8c:ff:88:10:
73:77:ca:e9:0e:f2:d9:d8:03:88:05:04:81:ba:24:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:76:78:FF:F3:65:4F:70:FC:55:C4:13:D5:73:03:03:6C:AB:29:D1
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:29:51:dc:5f:b2:58:f1:6b:25:bc:5f:6b:8d:14:06:33:87:
f7:4c:c1:72:d5:cb:b0:4b:9f:45:24:5b:13:ba:fe:7a:30:3f:
b6:1a:04:79:79:23:4b:19:f7:ce:55:47:6d:c4:d3:94:43:73:
b5:e3:fb:fd:2e:30:d8:09:d9:26:f1:01:9e:b7:3c:f5:dd:a9:
d5:a4:b4:58:cb:2e:0b:ab:5d:dc:6b:8a:38:d8:8f:a5:1e:60:
65:87:d9:11:05:c4:db:31:17:a8:28:67:77:99:a7:3d:a1:ab:
0b:85:d1:74:4e:ee:b7:66:74:f8:94:48:bb:ff:9e:94:9c:8d:
fe:44:31:a4:f2:65:4e:3b:74:b0:e7:39:d9:83:24:80:ce:80:
62:8e:0f:80:bf:de:68:00:4d:d2:4e:b6:f6:78:94:45:37:84:
3b:48:fa:d5:9b:a8:ec:98:8e:96:be:44:89:44:53:0d:57:fd:
62:6a:79:49:50:34:80:65:59:ff:e6:7c:34:9a:f2:6a:7f:26:
00:c3:81:f4:3b:65:f1:d6:c6:4b:5f:5a:bf:1e:84:a8:78:b7:
10:2f:70:ef:96:05:2b:38:1c:af:ca:f3:8d:77:44:05:2b:e7:
63:03:13:ee:09:d9:25:99:ed:20:ea:ab:ab:c3:e7:0b:61:10:
6e:32:07:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk2LU4qxKHTUBfwmA1nOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYzc5ZThhMjdjZGU5OTExYmQ3ZGE2Mzg3M2M1Y2M1NThk
YmQ1MzEwHhcNMjUxMTExMTEwMDUzWhcNMjUxMTEyMTEwMDUzWjAzMTEwLwYDVQQD
EygzNTc2NzhmZmYzNjU0ZjcwZmM1NWM0MTNkNTczMDMwMzZjYWIyOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdGvqF8PjKliuKXWe7EdsDrcJKaD
KBSabHZ7jxXEDa0j3j3+9nfw0WJYIE+En0fUQnPq9v1Ie/1mpyH3z19LnrzLCZMt
FF95YGBWJJjKdvTEkuabTDrQMpXydQTVcwnTMr+ir8NxlYC0T9CjXg7PoNL33z2N
5mWI77AG9rCVZV2gWH1pJMhDqE8a967k9pABe4JFasM557XHdiYQj4Iv8BB/XbCr
feAEHTiWqSo77oQNGNsbf2Ip958oHfrI9pYILI/ytOjJTiFJYyJUzSlILQQ10cSt
FZWnRT+snItfc5bRw4NoueH/51BIPIz/iBBzd8rpDvLZ2AOIBQSBuiSUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV2eP/zZU9w/FXEE9VzAwNsqynRMB8GA1UdIwQY
MBaAFBHHnoonzemRG9faY4c8XMVY29UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmIt
Yjk5MzA1MTBkMGEwLzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmItYjk5MzA1MTBkMGEw
LzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbClR3F+y
WPFrJbxfa40UBjOH90zBctXLsEufRSRbE7r+ejA/thoEeXkjSxn3zlVHbcTTlENz
teP7/S4w2AnZJvEBnrc89d2p1aS0WMsuC6td3GuKONiPpR5gZYfZEQXE2zEXqChn
d5mnPaGrC4XRdE7ut2Z0+JRIu/+elJyN/kQxpPJlTjt0sOc52YMkgM6AYo4PgL/e
aABN0k629niURTeEO0j61Zuo7JiOlr5EiURTDVf9Ymp5SVA0gGVZ/+Z8NJryan8m
AMOB9Dtl8dbGS19avx6EqHi3EC9w75YFKzgcr8rzjXdEBSvnYwMT7gnZJZntIOqr
q8PnC2EQbjIHgw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:43 2025 by rpki-client