Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File: eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier: mTuaUUZurzHR7BsyqCL5NaKowxFMMOKfgK5B4WPLtKM=
Subject key identifier: C6:F4:2E:83:88:C6:7C:0D:78:83:57:60:A3:1A:07:21:D0:FB:FB:0D
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 019A60FB6E07AD8F897C4EA0A0B02C9ACBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number: 0585
Signing time: Sat 08 Nov 2025 01:01:21 +0000
Manifest this update: Sat 08 Nov 2025 01:01:21 +0000
Manifest next update: Sun 09 Nov 2025 01:01:21 +0000
Files and hashes: 1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: YJcI7IOySHCw2iLcOYXqhvprOBR9Nn8eytyBRn0Wg9k=)
2: goX035Hv0elR2rCiATveFLxA4oU.roa (hash: HjIa5HxfoLHz1fNA8faR+9nXcT/qazkCcjt+nSvQMlE=)
3: rIYcuOWNo_aVxJgRl617C5BIy9Q.roa (hash: BxBO2U1Pwu966v6V4rQLz4pnONabIr2QJ+vjbhYc4wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:60:fb:6e:07:ad:8f:89:7c:4e:a0:a0:b0:2c:9a:cb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Nov 8 01:01:21 2025 GMT
Not After : Nov 9 01:01:21 2025 GMT
Subject: CN=c6f42e8388c67c0d78835760a31a0721d0fbfb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:b3:66:75:7b:15:01:f3:6c:a8:b9:0d:a5:
fc:75:f9:f1:c0:9d:17:d2:16:6b:31:5c:9f:e4:f6:
c8:c9:26:7f:ab:6e:bc:9d:3b:b5:ce:5f:71:95:34:
b7:05:ba:56:ab:be:6e:a5:55:ba:a2:da:b1:b7:05:
57:f4:6f:0e:4c:45:ed:e6:f4:80:64:79:a6:75:59:
ca:54:1a:ac:da:92:0e:49:d7:75:e2:56:39:b2:e4:
3c:80:e3:c4:e0:db:cb:e5:c3:f8:f8:22:01:91:a9:
45:0f:d3:35:ed:cd:f4:a5:a3:ca:de:42:ef:6f:56:
4d:5c:d1:d5:8d:e3:ce:d5:11:6c:65:47:cd:55:8f:
47:9d:00:b1:0d:fa:6e:df:f6:58:6a:32:4d:ec:d5:
25:0a:67:7b:33:ad:7e:aa:65:4a:41:e6:01:04:8a:
a0:1c:a7:e3:8c:49:d7:5f:9f:7b:89:75:41:45:7e:
ca:b5:1f:7d:7f:ef:a6:f7:4d:e5:21:06:e0:bf:dd:
c5:97:22:2a:2f:0f:b9:00:84:97:b6:ab:6a:75:28:
0f:c1:64:b4:88:ae:1c:64:50:4b:53:16:cf:92:30:
18:e0:2f:ca:4e:c6:fb:b8:f7:b2:7c:f8:4a:70:18:
64:86:3c:6a:09:d5:50:72:99:3e:c6:f2:8e:dc:99:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F4:2E:83:88:C6:7C:0D:78:83:57:60:A3:1A:07:21:D0:FB:FB:0D
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6f:d4:8a:44:3e:1c:06:f0:95:fc:99:8c:6c:6a:7e:65:46:
f7:42:e8:f4:80:46:a8:aa:31:d9:8b:e8:4b:cc:13:4c:ae:ac:
2e:50:7e:34:7e:b5:e6:42:78:fd:40:59:3e:52:1a:e7:e8:8b:
d7:35:ea:b2:74:c3:b4:2b:a7:cd:be:cd:7e:23:47:c9:e0:b1:
4b:27:52:36:ba:39:c6:78:78:12:d1:fb:dc:15:d7:c5:dd:c6:
ef:ca:4c:f5:e3:85:c0:78:87:b5:18:68:75:e3:fe:c2:b0:d4:
9f:f1:42:2b:92:58:89:27:56:32:72:26:b0:95:49:45:be:ee:
6a:4b:21:97:d5:9d:3f:7b:49:4c:2c:6d:8c:e1:60:5a:e0:94:
97:4f:f3:82:8d:11:04:3c:a4:16:43:5c:9e:d7:ad:ee:a5:52:
f5:dc:92:74:b0:6c:c6:4e:92:55:db:03:62:58:40:6c:77:31:
52:ac:ae:3c:eb:4e:14:c0:e1:37:ea:ea:0e:43:a3:38:a7:af:
73:db:6b:31:ad:fa:c5:f2:af:98:f1:a0:6b:94:f2:d8:ca:7d:
26:3b:b7:b6:e7:29:42:09:e1:0c:af:af:4f:2c:7a:1b:06:2a:
8e:03:97:96:36:c1:76:9d:68:1f:2b:0b:93:cc:69:81:91:8a:
6c:9e:23:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpg+24HrY+JfE6goLAsmsvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFkMGVhNzMwZmNmY2IyMTQ5OTk1Yzc4Mjg5YmYyZDZk
MTg2ZmMwHhcNMjUxMTA4MDEwMTIxWhcNMjUxMTA5MDEwMTIxWjAzMTEwLwYDVQQD
EyhjNmY0MmU4Mzg4YzY3YzBkNzg4MzU3NjBhMzFhMDcyMWQwZmJmYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugOzZnV7FQHzbKi5DaX8dfnxwJ0X
0hZrMVyf5PbIySZ/q268nTu1zl9xlTS3BbpWq75upVW6otqxtwVX9G8OTEXt5vSA
ZHmmdVnKVBqs2pIOSdd14lY5suQ8gOPE4NvL5cP4+CIBkalFD9M17c30paPK3kLv
b1ZNXNHVjePO1RFsZUfNVY9HnQCxDfpu3/ZYajJN7NUlCmd7M61+qmVKQeYBBIqg
HKfjjEnXX597iXVBRX7KtR99f++m903lIQbgv93FlyIqLw+5AISXtqtqdSgPwWS0
iK4cZFBLUxbPkjAY4C/KTsb7uPeyfPhKcBhkhjxqCdVQcpk+xvKO3Jm1DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMb0LoOIxnwNeINXYKMaByHQ+/sNMB8GA1UdIwQY
MBaAFHmh0OpzD8/LIUmZXHgom/LW0Yb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEt
ODBhOTFhZjQyYTY1LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEtODBhOTFhZjQyYTY1
LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqW/UikQ+
HAbwlfyZjGxqfmVG90Lo9IBGqKox2YvoS8wTTK6sLlB+NH615kJ4/UBZPlIa5+iL
1zXqsnTDtCunzb7NfiNHyeCxSydSNro5xnh4EtH73BXXxd3G78pM9eOFwHiHtRho
deP+wrDUn/FCK5JYiSdWMnImsJVJRb7uakshl9WdP3tJTCxtjOFgWuCUl0/zgo0R
BDykFkNcntet7qVS9dySdLBsxk6SVdsDYlhAbHcxUqyuPOtOFMDhN+rqDkOjOKev
c9trMa36xfKvmPGga5Ty2Mp9Jju3tucpQgnhDK+vTyx6GwYqjgOXljbBdp1oHysL
k8xpgZGKbJ4j7A==
-----END CERTIFICATE-----
Generated at Sat Nov 8 09:04:29 2025 by rpki-client