Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File: eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier: ySnYvqdaSHcEiFjvyNO0tcVZ43mQ5NkV46Rps8eqiOw=
Subject key identifier: 5D:21:69:F8:4D:32:9C:40:CB:1B:D2:FF:DD:DD:F0:10:26:01:34:EA
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 019A153BBD4B4077304FEBEB13E418CDDD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number: 0F04
Signing time: Fri 24 Oct 2025 08:00:27 +0000
Manifest this update: Fri 24 Oct 2025 08:00:27 +0000
Manifest next update: Sat 25 Oct 2025 08:00:27 +0000
Files and hashes: 1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: SQtuzK3sp1+tcZcaRM0lcb5DgLJqjUW+rMVM5Dx/H6M=)
3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 07:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:3b:bd:4b:40:77:30:4f:eb:eb:13:e4:18:cd:dd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Oct 24 08:00:27 2025 GMT
Not After : Oct 25 08:00:27 2025 GMT
Subject: CN=5d2169f84d329c40cb1bd2ffddddf010260134ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:99:8d:6a:b0:ae:aa:c7:63:41:45:84:b1:
1d:c0:99:18:b7:a0:d4:b8:d9:87:68:be:7b:a8:e7:
c5:94:3e:b7:57:7e:34:a7:85:29:f8:e6:0d:54:7d:
ba:33:7b:a6:fc:36:df:2b:c6:19:13:a8:ee:79:02:
49:55:5d:ca:fd:07:8d:9c:78:e3:d3:6b:68:fe:5e:
3b:1e:d2:f8:94:62:95:65:e4:bd:fc:10:ed:88:f7:
74:cb:ad:96:eb:2e:56:1f:e1:ba:34:af:02:d6:5e:
70:87:07:15:4f:95:70:cf:0f:7f:1a:00:eb:5c:a2:
4e:25:ec:4d:7c:70:7b:c8:c0:45:bb:46:8f:fd:e6:
8d:f3:03:75:e7:af:4c:de:dd:2d:06:d0:26:74:48:
ec:20:a2:fa:e4:76:58:1a:c5:9e:3a:9b:67:a4:d5:
e0:01:d0:5a:68:8c:28:f6:1e:b0:d2:d8:8c:90:2b:
1d:e9:e3:32:1c:a9:c9:ab:9c:5c:11:ed:86:b9:65:
c0:39:89:0d:a1:5f:45:18:f7:05:18:55:33:93:13:
8b:14:85:4e:c5:ce:2a:59:28:f4:15:7d:7a:45:86:
65:de:18:1a:07:34:b1:3c:87:19:e7:71:4e:51:58:
23:84:78:6c:31:3d:29:50:3c:25:50:20:d0:87:59:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:21:69:F8:4D:32:9C:40:CB:1B:D2:FF:DD:DD:F0:10:26:01:34:EA
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9a:44:ac:94:2b:c0:4c:78:9b:c7:9d:46:28:a0:79:89:8d:
62:a3:96:1a:19:79:f1:4a:75:37:95:ae:91:9b:a9:d2:6d:10:
e7:48:62:0c:fb:07:28:29:3d:f5:47:ed:76:96:09:13:53:53:
45:eb:5f:06:1f:d7:75:07:e1:5a:4a:3d:1a:43:18:3a:aa:71:
35:8d:72:e8:76:d0:db:7e:fc:5d:7c:f7:d3:92:b4:c9:76:6c:
ea:d8:de:ab:e5:e4:5a:a2:ba:34:55:9c:6d:ea:36:9c:57:1a:
90:c0:60:bc:23:54:5f:b7:c6:8a:05:fa:58:7e:3e:fa:cc:49:
34:75:d4:25:76:30:c2:93:97:0f:86:c5:d0:14:27:96:17:b0:
29:27:76:5f:3d:08:d7:c8:fc:c2:d1:8b:0b:17:a1:e3:4f:c5:
34:3b:b5:6f:70:7e:c5:54:b8:0e:40:28:11:7a:fb:12:c0:16:
dd:1e:ed:eb:0b:d6:ad:98:16:ab:5d:f6:d7:2e:08:ee:b1:33:
d7:b4:69:e7:ec:5b:27:d6:0f:2f:b8:6e:0b:44:69:96:6d:59:
ab:b4:72:f9:2d:fd:53:e4:95:9c:b3:18:01:ab:58:c3:2f:ce:
c2:07:b4:4e:d3:da:30:ff:b9:11:b0:c7:08:cb:81:f1:aa:ff:
2f:96:ec:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoVO71LQHcwT+vrE+QYzd0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjUxMDI0MDgwMDI3WhcNMjUxMDI1MDgwMDI3WjAzMTEwLwYDVQQD
Eyg1ZDIxNjlmODRkMzI5YzQwY2IxYmQyZmZkZGRkZjAxMDI2MDEzNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+uZjWqwrqrHY0FFhLEdwJkYt6DU
uNmHaL57qOfFlD63V340p4Up+OYNVH26M3um/DbfK8YZE6jueQJJVV3K/QeNnHjj
02to/l47HtL4lGKVZeS9/BDtiPd0y62W6y5WH+G6NK8C1l5whwcVT5Vwzw9/GgDr
XKJOJexNfHB7yMBFu0aP/eaN8wN1569M3t0tBtAmdEjsIKL65HZYGsWeOptnpNXg
AdBaaIwo9h6w0tiMkCsd6eMyHKnJq5xcEe2GuWXAOYkNoV9FGPcFGFUzkxOLFIVO
xc4qWSj0FX16RYZl3hgaBzSxPIcZ53FOUVgjhHhsMT0pUDwlUCDQh1m3YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0hafhNMpxAyxvS/93d8BAmATTqMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEppErJQr
wEx4m8edRiigeYmNYqOWGhl58Up1N5WukZup0m0Q50hiDPsHKCk99UftdpYJE1NT
RetfBh/XdQfhWko9GkMYOqpxNY1y6HbQ2378XXz305K0yXZs6tjeq+XkWqK6NFWc
beo2nFcakMBgvCNUX7fGigX6WH4++sxJNHXUJXYwwpOXD4bF0BQnlhewKSd2Xz0I
18j8wtGLCxeh40/FNDu1b3B+xVS4DkAoEXr7EsAW3R7t6wvWrZgWq1321y4I7rEz
17Rp5+xbJ9YPL7huC0Rplm1Zq7Ry+S39U+SVnLMYAatYwy/Owge0TtPaMP+5EbDH
CMuB8ar/L5bsdA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 10:31:55 2025 by rpki-client