Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: BF/HeeQYrQ2qe/Y/HWJb2MoscLyUVzedGKDkDWd6yXY=
Subject key identifier: DF:B5:9A:5C:07:B9:53:64:1C:10:36:25:A0:14:0D:D6:9D:D5:8B:84
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 019A725C6C82DF621773FB8489C68EA3B584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:00:50 +0000
Manifest this update: Tue 11 Nov 2025 10:00:50 +0000
Manifest next update: Wed 12 Nov 2025 10:00:50 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: OhzaAkikZetAinU+OqswuQDhmCImrGsXUjfW8tS+RgE=)
2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6c:82:df:62:17:73:fb:84:89:c6:8e:a3:b5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Nov 11 10:00:50 2025 GMT
Not After : Nov 12 10:00:50 2025 GMT
Subject: CN=dfb59a5c07b953641c103625a0140dd69dd58b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:f3:af:84:09:5d:1b:37:31:0e:50:1e:35:
54:81:1f:08:9d:79:47:a7:94:56:9a:86:60:06:e2:
ec:ad:20:05:76:f4:9c:03:33:d3:b6:c8:20:52:cd:
5a:0b:43:0c:0b:ee:69:73:25:87:46:39:0e:a6:f9:
89:82:eb:5c:52:e3:6b:55:dd:fc:bf:0c:8a:9c:ca:
e1:d2:f3:09:18:d7:9d:9b:56:54:24:7d:0a:97:c5:
f4:77:b6:05:02:76:6f:84:06:d4:a5:6b:ff:82:45:
29:67:5f:1e:89:26:db:c1:95:b0:55:92:08:9d:0b:
f1:c9:25:a7:88:75:6d:e8:2d:51:31:5d:77:f4:78:
a1:bd:18:14:66:5c:70:bd:da:30:9b:fc:c2:2b:09:
52:7a:7c:14:f1:db:05:c3:23:f6:b5:ac:37:0a:3c:
8e:08:ff:a3:e9:40:95:61:60:25:1e:7d:2b:b1:a1:
f2:8c:d8:bb:2e:03:56:6c:03:07:0e:03:0a:72:78:
49:95:7e:01:6d:1a:b2:51:f3:62:cd:20:c1:7a:91:
58:bd:d7:f9:70:e0:57:8a:74:4f:04:fe:50:06:1e:
b5:81:9c:06:52:22:0a:65:4e:46:ae:f4:74:02:5c:
c7:66:03:2e:f7:21:a5:e4:06:b5:20:dd:93:1e:bd:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B5:9A:5C:07:B9:53:64:1C:10:36:25:A0:14:0D:D6:9D:D5:8B:84
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:12:e9:e2:7d:09:76:22:ac:61:a2:8c:e4:aa:21:34:b9:71:
17:20:b7:0e:01:83:9b:9e:bb:6c:c3:9c:e1:9a:2a:a8:fd:9c:
38:52:d6:ff:e0:30:e8:a9:8d:41:96:18:e0:fa:2d:f7:dd:4e:
9c:c0:4f:49:2e:cd:43:cb:13:73:86:39:f7:e3:68:c7:bc:c7:
7a:aa:d8:6b:fa:a9:f5:26:82:c6:51:b8:4e:20:67:c7:ab:65:
2a:44:c1:b5:68:c9:5d:ce:99:2b:97:f4:52:28:cb:01:ee:6a:
a8:01:86:68:55:ba:b4:d1:5b:5b:b7:a4:d1:0c:ba:50:6b:e0:
bd:c4:40:ef:bd:3c:7d:c8:dc:3a:4c:75:78:c8:2d:85:b5:49:
cf:de:c5:e3:17:73:56:dc:bc:60:59:04:e9:4f:7d:26:f1:f5:
13:7f:1d:f4:7b:c3:96:c2:28:88:a3:d1:ae:9c:e4:65:03:04:
80:ed:7c:d7:53:7e:69:ea:50:0d:ae:f9:e8:02:d6:15:01:4a:
86:09:b1:59:01:d4:9e:fb:ed:84:a8:5f:c6:7e:dd:7a:f8:e0:
5f:64:68:a7:f0:5b:64:dd:73:47:b1:71:4c:16:d8:6d:23:b1:
19:e3:f3:f9:2a:25:25:ce:00:f0:60:6c:c6:5f:ab:52:f4:ba:
a0:b4:d8:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXGyC32IXc/uEicaOo7WEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy
ZTkwODYwHhcNMjUxMTExMTAwMDUwWhcNMjUxMTEyMTAwMDUwWjAzMTEwLwYDVQQD
EyhkZmI1OWE1YzA3Yjk1MzY0MWMxMDM2MjVhMDE0MGRkNjlkZDU4Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSvzr4QJXRs3MQ5QHjVUgR8InXlH
p5RWmoZgBuLsrSAFdvScAzPTtsggUs1aC0MMC+5pcyWHRjkOpvmJgutcUuNrVd38
vwyKnMrh0vMJGNedm1ZUJH0Kl8X0d7YFAnZvhAbUpWv/gkUpZ18eiSbbwZWwVZII
nQvxySWniHVt6C1RMV139HihvRgUZlxwvdowm/zCKwlSenwU8dsFwyP2taw3CjyO
CP+j6UCVYWAlHn0rsaHyjNi7LgNWbAMHDgMKcnhJlX4BbRqyUfNizSDBepFYvdf5
cOBXinRPBP5QBh61gZwGUiIKZU5GrvR0AlzHZgMu9yGl5Aa1IN2THr3TZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+1mlwHuVNkHBA2JaAUDdad1YuEMB8GA1UdIwQY
MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt
MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0
LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxLp4n0J
diKsYaKM5KohNLlxFyC3DgGDm567bMOc4ZoqqP2cOFLW/+Aw6KmNQZYY4Pot991O
nMBPSS7NQ8sTc4Y59+Nox7zHeqrYa/qp9SaCxlG4TiBnx6tlKkTBtWjJXc6ZK5f0
UijLAe5qqAGGaFW6tNFbW7ek0Qy6UGvgvcRA7708fcjcOkx1eMgthbVJz97F4xdz
Vty8YFkE6U99JvH1E38d9HvDlsIoiKPRrpzkZQMEgO1811N+aepQDa756ALWFQFK
hgmxWQHUnvvthKhfxn7devjgX2Rop/BbZN1zR7FxTBbYbSOxGePz+SolJc4A8GBs
xl+rUvS6oLTYig==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:10 2025 by rpki-client