Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File: eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier: G73XftOL1sRWjdJtljC5/goBzAJfa1IQIfqHz+4mBBA=
Subject key identifier: 57:70:56:5C:0E:ED:E2:4D:6B:32:7D:D1:FF:9E:51:2A:D4:39:B1:97
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer: /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial: 019A2EC4D2AC788B456B58FF167F2DEEC76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number: 08EA
Signing time: Wed 29 Oct 2025 07:00:42 +0000
Manifest this update: Wed 29 Oct 2025 07:00:42 +0000
Manifest next update: Thu 30 Oct 2025 07:00:42 +0000
Files and hashes: 1: 4nxR8Cxl20Qx8l54ebHfYex0okU.roa (hash: t9zbsq/Krtk5PxUO6ZUUhhC5Dk5KGf8sczc82Xlxw4s=)
2: FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa (hash: sERrGBENBVLLIjmvI4dssKvhdqbG5h/21qxwv4zx0B0=)
3: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: IAvkdv3eeu+JnOPJg4x//mSGK2kNQz0VZ/trjW7/1ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:c4:d2:ac:78:8b:45:6b:58:ff:16:7f:2d:ee:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
Validity
Not Before: Oct 29 07:00:42 2025 GMT
Not After : Oct 30 07:00:42 2025 GMT
Subject: CN=5770565c0eede24d6b327dd1ff9e512ad439b197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:82:44:56:0d:3d:32:cf:38:59:36:3c:fa:
fa:27:46:f2:16:db:20:12:b4:e7:f4:34:58:1b:53:
e4:04:38:37:eb:e3:4b:e2:71:c7:45:90:24:49:da:
69:18:45:18:be:84:ca:c9:08:7d:8d:dd:39:5c:5e:
9c:ac:db:6e:86:82:1f:22:64:05:63:69:b5:44:f5:
97:62:db:a1:dc:58:b5:48:1c:62:d2:67:67:6d:b3:
78:ab:e2:e7:3c:0d:3d:ce:e5:47:21:2e:70:19:af:
5c:69:73:66:a2:0c:11:29:6c:5d:87:22:0a:01:a1:
d5:b7:84:33:4c:a9:a7:56:88:49:83:cf:7a:c5:47:
90:9b:96:92:8f:20:68:22:4f:01:a9:ef:c5:fe:69:
16:65:5a:ce:4c:c5:1e:74:d4:fd:58:94:17:cf:d9:
3f:ea:79:97:f4:37:f7:75:78:0e:f3:df:cf:61:fa:
2f:fe:16:c1:98:b4:75:87:90:0f:62:88:19:17:25:
27:67:f8:2a:e9:68:9b:d9:52:44:ec:00:cb:fc:10:
98:84:29:52:ea:67:c9:cb:5c:69:dd:1d:14:6a:84:
7a:8c:2d:91:76:2e:3e:3c:73:e2:c0:8f:2c:c3:be:
44:56:9a:82:b2:02:ff:73:16:41:78:68:8c:cb:77:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:70:56:5C:0E:ED:E2:4D:6B:32:7D:D1:FF:9E:51:2A:D4:39:B1:97
X509v3 Authority Key Identifier:
keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:36:29:17:ea:43:ae:77:a0:4a:d7:4a:c4:f4:f7:41:f6:9d:
01:ca:74:ca:f3:4f:4e:7f:b4:17:c6:2d:d4:3c:14:e7:83:e3:
20:5a:53:9f:0a:86:67:1c:0a:f6:93:cf:e1:2a:15:f5:47:40:
5b:b0:e4:26:71:07:26:41:21:1a:14:21:c0:ba:38:e3:e8:d6:
b5:e7:55:3a:aa:7d:a1:36:a3:47:fa:39:ec:10:a9:e6:67:89:
c4:9a:69:60:0b:fe:36:1a:78:90:83:0a:bf:fb:e7:55:ea:d1:
ac:8b:b3:cf:3b:c3:86:9e:00:a5:62:79:16:9d:c9:21:4f:39:
8c:5e:2d:4c:fb:65:e9:12:ad:3a:98:49:48:64:b6:24:24:09:
17:67:21:0f:81:b6:70:c1:a6:33:78:50:22:d5:d8:c2:0c:75:
3a:ac:0c:f6:dc:8b:1b:f8:d5:58:f1:3f:55:61:3c:94:94:ae:
17:ee:de:c9:a3:9f:e2:20:36:a7:f5:b0:4d:1b:79:dc:89:62:
fb:99:6f:44:b5:04:61:80:8c:cf:36:6c:32:3f:53:5e:7a:93:
ca:13:d2:59:93:3e:d9:07:05:4c:da:6f:06:e5:99:b4:60:ec:
2f:f4:c9:df:82:0d:0b:9a:87:17:ba:ee:81:d6:b0:fd:06:9c:
e2:6a:7f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouxNKseItFa1j/Fn8t7sdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njg4MTgyYjhmMjUzYzVjZjk0NjI5NDc4NmI3OTAxNDM1
ZmM4YzMwHhcNMjUxMDI5MDcwMDQyWhcNMjUxMDMwMDcwMDQyWjAzMTEwLwYDVQQD
Eyg1NzcwNTY1YzBlZWRlMjRkNmIzMjdkZDFmZjllNTEyYWQ0MzliMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VaCRFYNPTLPOFk2PPr6J0byFtsg
ErTn9DRYG1PkBDg36+NL4nHHRZAkSdppGEUYvoTKyQh9jd05XF6crNtuhoIfImQF
Y2m1RPWXYtuh3Fi1SBxi0mdnbbN4q+LnPA09zuVHIS5wGa9caXNmogwRKWxdhyIK
AaHVt4QzTKmnVohJg896xUeQm5aSjyBoIk8Bqe/F/mkWZVrOTMUedNT9WJQXz9k/
6nmX9Df3dXgO89/PYfov/hbBmLR1h5APYogZFyUnZ/gq6Wib2VJE7ADL/BCYhClS
6mfJy1xp3R0UaoR6jC2Rdi4+PHPiwI8sw75EVpqCsgL/cxZBeGiMy3fkFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdwVlwO7eJNazJ90f+eUSrUObGXMB8GA1UdIwQY
MBaAFHhogYK48lPFz5RilHhreQFDX8jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYt
Yzg2YzJmYzZjNjFiLzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYtYzg2YzJmYzZjNjFi
LzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijYpF+pD
rnegStdKxPT3QfadAcp0yvNPTn+0F8Yt1DwU54PjIFpTnwqGZxwK9pPP4SoV9UdA
W7DkJnEHJkEhGhQhwLo44+jWtedVOqp9oTajR/o57BCp5meJxJppYAv+Nhp4kIMK
v/vnVerRrIuzzzvDhp4ApWJ5Fp3JIU85jF4tTPtl6RKtOphJSGS2JCQJF2chD4G2
cMGmM3hQItXYwgx1OqwM9tyLG/jVWPE/VWE8lJSuF+7eyaOf4iA2p/WwTRt53Ili
+5lvRLUEYYCMzzZsMj9TXnqTyhPSWZM+2QcFTNpvBuWZtGDsL/TJ34INC5qHF7ru
gdaw/Qac4mp/Ag==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:10:52 2025 by rpki-client