Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: mtR+A7V6uysYKSHONYSW1ycxjCOMerhtATfpC37Vqfw=
Subject key identifier: D9:11:79:B4:D0:39:9A:E3:23:00:C6:24:61:76:5B:9F:23:AA:7B:43
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019A2477C3FBF9EDE2615B8279B9FA6D4865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0E10
Signing time: Mon 27 Oct 2025 07:00:19 +0000
Manifest this update: Mon 27 Oct 2025 07:00:19 +0000
Manifest next update: Tue 28 Oct 2025 07:00:19 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: jtEAGyGKAwuyPRhZjazh5tjHcoTyKXMmVRds6sCfli8=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:c3:fb:f9:ed:e2:61:5b:82:79:b9:fa:6d:48:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Oct 27 07:00:19 2025 GMT
Not After : Oct 28 07:00:19 2025 GMT
Subject: CN=d91179b4d0399ae32300c62461765b9f23aa7b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:a3:6e:18:c0:07:28:28:08:c5:65:4a:47:
4e:72:2a:7c:cc:86:32:55:41:b1:19:59:b8:d0:21:
67:e3:5a:61:63:7d:d8:e0:c7:5e:c3:b7:a4:a0:be:
a3:8e:c2:b5:60:26:dc:38:13:2f:4c:14:f9:42:8d:
45:c8:b8:8d:5d:cf:b6:fa:e4:55:19:63:a6:22:2a:
a7:4c:4d:b5:8e:8b:a1:a1:30:1d:a2:f8:40:f4:60:
73:d3:e4:75:87:2f:79:18:1a:44:57:17:b4:b2:b5:
7d:81:4a:01:5f:2e:da:bc:2b:0f:15:7c:be:10:a9:
b1:cd:8d:8d:b0:20:d0:37:d1:21:00:a4:26:33:a6:
9f:9b:36:38:d9:28:11:9e:20:00:6f:af:ca:1e:f6:
26:51:6a:b2:26:4b:08:85:0d:d0:62:78:c4:22:b8:
c6:c2:76:4b:16:ae:dd:a1:dd:ae:19:8e:2f:a1:b8:
d3:35:69:c4:a8:eb:bc:93:8b:0a:14:9c:b4:19:71:
52:a2:fe:c1:a5:dc:b1:c7:d0:5b:61:32:53:1c:83:
ab:26:d4:bb:26:52:58:db:98:fa:b6:16:f0:4f:08:
25:79:91:76:0d:eb:a5:22:6e:3c:9e:b2:9f:84:18:
03:ad:0e:46:35:b8:8d:e1:42:e9:f0:0e:27:c6:0e:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:11:79:B4:D0:39:9A:E3:23:00:C6:24:61:76:5B:9F:23:AA:7B:43
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ba:fb:d8:f1:53:cf:04:8d:8c:1c:45:fe:80:e2:e0:9d:f1:
52:5f:01:9e:a9:67:0e:5b:06:d0:04:bc:f0:1a:a3:3f:0e:19:
9f:8f:af:9f:f4:33:70:e5:58:71:77:d5:98:1c:1e:a4:fe:fe:
4e:36:b9:5a:e5:71:ba:6b:ca:4f:60:63:90:2b:33:ab:3a:66:
2d:dd:68:6c:78:cc:80:22:08:60:cb:9a:70:70:cb:20:a1:48:
f7:0b:43:42:a2:78:ad:87:7a:47:1a:ba:43:1e:7c:64:0d:2f:
13:3a:ac:df:ef:1c:3d:23:21:29:0e:e8:bc:fd:7f:80:47:d2:
a5:6a:5f:ee:c0:89:72:4b:4c:17:86:3b:b1:f0:1d:c8:f6:da:
bf:5d:e3:40:4f:fc:55:26:db:86:bd:6d:af:ac:26:89:59:02:
d3:fd:d0:8a:d4:a3:6f:89:ad:c9:6f:89:85:c3:fb:c7:b7:a4:
3b:7b:65:3a:75:3a:fc:8f:21:36:8b:79:92:fa:21:91:0d:e7:
4f:74:a3:d5:a3:d7:ef:e1:00:07:4f:4c:12:79:91:dc:92:af:
35:cd:29:88:51:55:30:a2:0d:65:81:11:b5:a9:a6:dc:da:10:
0d:22:bf:91:ea:28:59:88:0b:4f:b2:55:aa:17:5e:a2:00:84:
e4:0c:f9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokd8P7+e3iYVuCebn6bUhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDI0NjZmOGY4NjQ1YzlmMzlmMDQ4NzRkZGFkZjBkNzEz
NmY2N2YwHhcNMjUxMDI3MDcwMDE5WhcNMjUxMDI4MDcwMDE5WjAzMTEwLwYDVQQD
EyhkOTExNzliNGQwMzk5YWUzMjMwMGM2MjQ2MTc2NWI5ZjIzYWE3YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQejbhjABygoCMVlSkdOcip8zIYy
VUGxGVm40CFn41phY33Y4Mdew7ekoL6jjsK1YCbcOBMvTBT5Qo1FyLiNXc+2+uRV
GWOmIiqnTE21jouhoTAdovhA9GBz0+R1hy95GBpEVxe0srV9gUoBXy7avCsPFXy+
EKmxzY2NsCDQN9EhAKQmM6afmzY42SgRniAAb6/KHvYmUWqyJksIhQ3QYnjEIrjG
wnZLFq7dod2uGY4vobjTNWnEqOu8k4sKFJy0GXFSov7Bpdyxx9BbYTJTHIOrJtS7
JlJY25j6thbwTwgleZF2DeulIm48nrKfhBgDrQ5GNbiN4ULp8A4nxg6VMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkRebTQOZrjIwDGJGF2W58jqntDMB8GA1UdIwQY
MBaAFBJCRm+PhkXJ858Eh03a3w1xNvZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUt
MGY1NWVhMzNhZmUzLzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUtMGY1NWVhMzNhZmUz
LzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7r72PFT
zwSNjBxF/oDi4J3xUl8BnqlnDlsG0AS88BqjPw4Zn4+vn/QzcOVYcXfVmBwepP7+
Tja5WuVxumvKT2BjkCszqzpmLd1obHjMgCIIYMuacHDLIKFI9wtDQqJ4rYd6Rxq6
Qx58ZA0vEzqs3+8cPSMhKQ7ovP1/gEfSpWpf7sCJcktMF4Y7sfAdyPbav13jQE/8
VSbbhr1tr6wmiVkC0/3QitSjb4mtyW+JhcP7x7ekO3tlOnU6/I8hNot5kvohkQ3n
T3Sj1aPX7+EAB09MEnmR3JKvNc0piFFVMKINZYERtamm3NoQDSK/keooWYgLT7JV
qhdeogCE5Az5kQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:29 2025 by rpki-client