Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier: R2bkuGrnEPRV3C9S2xET0Ww/sma8sTUARsSJmM6k8y8=
Subject key identifier: 15:8D:BD:56:F1:75:44:E5:79:78:94:DE:D1:9C:B4:AC:0F:1C:FA:0A
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial: 019A71EEDABED391C79FEC61CE5AB9E712B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number: 03EE
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: n3Kg7VLjmXlsLQ5GX/saLe3hm0npGYDyKpTOatRBGtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:da:be:d3:91:c7:9f:ec:61:ce:5a:b9:e7:12:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=158dbd56f17544e5797894ded19cb4ac0f1cfa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:94:31:60:6d:63:77:65:b4:40:eb:3c:f6:
9b:00:8b:c7:ee:e1:5f:88:f3:a4:e5:08:9d:e0:af:
66:91:fd:68:67:2d:b5:ff:66:1d:8b:65:1a:18:56:
6d:15:ee:57:9a:b6:63:f6:09:ce:ad:44:60:e7:ad:
58:79:45:1d:2d:ea:4c:a0:67:fd:97:bb:3b:fa:bd:
d6:cb:d9:ab:90:a3:80:0a:28:66:5d:46:b4:bd:c8:
59:01:99:56:50:3b:b6:89:c2:62:fe:3a:34:ae:f3:
50:6d:b8:41:b7:3b:84:45:80:db:11:fc:a0:54:f8:
44:04:00:1f:86:17:b3:03:bf:0d:f8:96:5e:93:f4:
c6:cb:ff:9d:4b:4c:42:80:de:65:10:30:2a:79:08:
50:c0:96:4d:d7:ab:32:b6:a3:76:de:c1:74:c2:44:
ad:f4:34:9b:87:51:82:30:be:8b:1c:52:2e:c3:bb:
0c:a2:f0:4b:54:16:68:d6:a9:9a:27:5e:6c:e8:5b:
44:ee:93:89:37:89:18:6f:6f:f4:19:3d:ec:41:4e:
47:0f:21:36:be:b2:11:b5:45:f9:a9:be:96:36:6e:
07:93:3a:db:5d:ee:e6:89:3c:78:a7:34:78:26:0b:
80:0d:a8:48:ef:f3:dc:42:07:16:b9:ba:51:b3:44:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:BD:56:F1:75:44:E5:79:78:94:DE:D1:9C:B4:AC:0F:1C:FA:0A
X509v3 Authority Key Identifier:
keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c4:c9:59:c2:cb:61:0d:b0:0a:2b:3d:0e:26:2c:ae:4a:51:
c2:df:e6:58:d0:d7:6d:07:8b:dd:0a:9d:07:15:db:89:a1:bb:
9e:89:95:93:67:d9:1b:e9:c5:99:fc:a0:55:81:35:bc:43:42:
c7:2d:8f:d8:e7:7e:dc:ed:b7:aa:12:65:a5:d8:99:c0:63:b0:
85:13:8d:f6:02:16:42:4f:06:60:d8:1d:6d:c4:96:fd:db:4b:
30:46:64:28:75:5f:08:91:dd:8a:ba:a1:10:68:c0:6b:9d:13:
79:e1:6b:63:94:8c:bb:d6:6c:b7:44:1f:78:fb:a9:a1:7b:28:
8e:5d:f6:cc:85:3d:9e:53:eb:c2:74:5f:23:08:eb:08:15:19:
df:e3:b5:d9:b8:1d:33:fc:40:f8:f9:db:6a:d4:78:f8:dd:42:
22:58:de:02:07:d0:91:49:26:53:c1:01:36:c4:0a:3c:ab:19:
36:36:5f:4a:79:74:2f:1d:f9:ea:7e:8e:62:54:5b:b5:be:a6:
64:c3:c3:a2:01:48:03:d9:94:15:3b:8d:0a:c5:45:93:84:c5:
79:7a:21:a8:dc:84:5e:cc:78:ad:11:46:c5:84:00:83:d6:23:
44:fc:12:88:d7:c8:58:43:be:55:f9:fd:60:6c:f7:8f:d6:b8:
a5:0a:e3:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7tq+05HHn+xhzlq55xK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGVkZTY2MjIwM2Y0NTllOWIxOTZkMjMzODdhYzI5ZTRh
N2M0ZTUwHhcNMjUxMTExMDgwMTEwWhcNMjUxMTEyMDgwMTEwWjAzMTEwLwYDVQQD
EygxNThkYmQ1NmYxNzU0NGU1Nzk3ODk0ZGVkMTljYjRhYzBmMWNmYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy96UMWBtY3dltEDrPPabAIvH7uFf
iPOk5Qid4K9mkf1oZy21/2Ydi2UaGFZtFe5XmrZj9gnOrURg561YeUUdLepMoGf9
l7s7+r3Wy9mrkKOACihmXUa0vchZAZlWUDu2icJi/jo0rvNQbbhBtzuERYDbEfyg
VPhEBAAfhhezA78N+JZek/TGy/+dS0xCgN5lEDAqeQhQwJZN16sytqN23sF0wkSt
9DSbh1GCML6LHFIuw7sMovBLVBZo1qmaJ15s6FtE7pOJN4kYb2/0GT3sQU5HDyE2
vrIRtUX5qb6WNm4HkzrbXe7miTx4pzR4JguADahI7/PcQgcWubpRs0QX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWNvVbxdUTleXiU3tGctKwPHPoKMB8GA1UdIwQY
MBaAFHkO3mYiA/RZ6bGW0jOHrCnkp8TlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMt
YzVkNGMxNzhlY2I1LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMtYzVkNGMxNzhlY2I1
LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcTJWcLL
YQ2wCis9DiYsrkpRwt/mWNDXbQeL3QqdBxXbiaG7nomVk2fZG+nFmfygVYE1vENC
xy2P2Od+3O23qhJlpdiZwGOwhRON9gIWQk8GYNgdbcSW/dtLMEZkKHVfCJHdirqh
EGjAa50TeeFrY5SMu9Zst0QfePupoXsojl32zIU9nlPrwnRfIwjrCBUZ3+O12bgd
M/xA+PnbatR4+N1CIljeAgfQkUkmU8EBNsQKPKsZNjZfSnl0Lx356n6OYlRbtb6m
ZMPDogFIA9mUFTuNCsVFk4TFeXohqNyEXsx4rRFGxYQAg9YjRPwSiNfIWEO+Vfn9
YGz3j9a4pQrjVg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:39 2025 by rpki-client