Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File: eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier: 3hm1F8+JN2VRr9sNpv6AJhuHxIx2LiC0ujIb0bfAjIY=
Subject key identifier: 47:38:C5:FC:99:4D:78:A8:09:E5:25:73:42:64:1E:10:C8:41:6C:10
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial: 019922C35A28B4BD3DE0A7C5B436D37DDB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:51 +0000
Manifest this update: Sun 07 Sep 2025 06:00:51 +0000
Manifest next update: Mon 08 Sep 2025 06:00:51 +0000
Files and hashes: 1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: fy3K3FrvTqgeTN5Ezsz9Mm1Y9doDED8l02ojhMlK++Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5a:28:b4:bd:3d:e0:a7:c5:b4:36:d3:7d:db:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
Validity
Not Before: Sep 7 06:00:51 2025 GMT
Not After : Sep 8 06:00:51 2025 GMT
Subject: CN=4738c5fc994d78a809e5257342641e10c8416c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:97:df:83:04:cd:0a:48:c6:1f:4b:c6:5f:
f2:63:39:4e:b6:f7:8a:ad:54:23:89:b9:4d:69:27:
58:3a:fd:19:f5:23:ba:e5:94:90:74:46:18:02:fc:
6e:74:20:4b:08:55:43:3f:b0:21:85:74:dd:59:13:
d5:38:5b:b3:0c:e4:05:1c:42:cb:4f:2c:8e:4a:96:
2b:ec:2f:e6:f1:69:83:39:c2:7f:b7:e3:cd:61:9b:
62:75:7d:a2:66:fd:ea:b0:f2:8b:82:f6:8d:63:2b:
ec:c9:6c:02:81:9e:8c:e9:4a:ee:d6:e2:09:21:12:
c0:09:4f:67:59:82:33:c6:91:2e:8d:20:b3:56:41:
f7:7d:6b:69:f8:53:f0:e4:28:ab:b8:bb:80:60:ab:
ab:5d:79:72:03:00:ec:9d:99:d3:69:a1:1c:20:f6:
cb:75:4b:ef:80:61:6a:fa:f6:e5:ce:0f:8d:a9:19:
9b:b9:e3:7c:d7:f0:c7:7a:fa:27:db:95:5f:69:99:
0f:a7:8c:4a:cc:26:8d:78:1d:bf:e5:88:78:bf:77:
bf:48:e6:d5:c2:8d:d1:7b:5a:b6:13:d9:ca:38:8e:
a0:6a:0c:b9:70:43:d9:e4:a5:76:f5:23:6c:a5:09:
f7:40:25:a3:14:dd:a0:72:81:99:50:75:9a:62:29:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:C5:FC:99:4D:78:A8:09:E5:25:73:42:64:1E:10:C8:41:6C:10
X509v3 Authority Key Identifier:
keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f2:cd:0a:53:f4:98:89:85:ed:23:bd:ae:f4:ed:66:49:65:
a9:c6:4a:5a:5e:32:78:11:2b:20:87:1e:98:ec:c8:5c:84:ec:
34:05:1b:39:8b:a5:ff:e5:20:a0:49:a4:a1:2d:56:19:73:32:
d2:15:58:1f:c7:b1:a8:c5:9d:61:a8:56:a7:89:02:b6:fb:98:
0a:a7:43:a9:ff:c2:12:b1:37:bf:76:dd:06:ff:3b:68:f3:4c:
ec:7d:aa:81:d5:ef:3e:c0:82:fb:2c:23:86:91:24:9f:d4:cc:
ec:5e:b2:66:3d:8f:e6:0c:cd:dd:15:8c:3a:5f:ab:fb:23:11:
d9:28:dc:da:57:09:8f:b8:09:65:f0:8d:0e:cc:aa:c0:41:c9:
79:ba:23:48:41:10:1a:87:80:e2:0e:03:42:02:e0:37:63:78:
4a:f8:f6:8a:79:aa:b4:4e:e0:61:5c:c6:98:6d:02:a1:be:44:
0a:e0:2c:ee:ea:2b:26:72:5d:dc:78:80:e6:fb:df:a8:8e:4a:
6a:5d:85:b3:96:dd:87:58:69:c5:42:5a:bd:bc:f3:96:fb:41:
59:7f:70:9e:54:b9:53:2a:0a:11:8e:a8:29:49:1c:6c:8d:97:
89:19:d4:83:44:96:92:ea:38:03:98:50:17:82:e6:71:70:74:
94:61:62:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw1ootL094KfFtDbTfds6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NGY1NTFlOTdhMTMyNTQyZTNiMDU2ZTkwNWRlOGYzZGJh
MjRjOWMwHhcNMjUwOTA3MDYwMDUxWhcNMjUwOTA4MDYwMDUxWjAzMTEwLwYDVQQD
Eyg0NzM4YzVmYzk5NGQ3OGE4MDllNTI1NzM0MjY0MWUxMGM4NDE2YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSX34MEzQpIxh9Lxl/yYzlOtveK
rVQjiblNaSdYOv0Z9SO65ZSQdEYYAvxudCBLCFVDP7AhhXTdWRPVOFuzDOQFHELL
TyyOSpYr7C/m8WmDOcJ/t+PNYZtidX2iZv3qsPKLgvaNYyvsyWwCgZ6M6Uru1uIJ
IRLACU9nWYIzxpEujSCzVkH3fWtp+FPw5CiruLuAYKurXXlyAwDsnZnTaaEcIPbL
dUvvgGFq+vblzg+NqRmbueN81/DHevon25VfaZkPp4xKzCaNeB2/5Yh4v3e/SObV
wo3Re1q2E9nKOI6gagy5cEPZ5KV29SNspQn3QCWjFN2gcoGZUHWaYik1iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc4xfyZTXioCeUlc0JkHhDIQWwQMB8GA1UdIwQY
MBaAFHlPVR6XoTJULjsFbpBd6PPbokycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMt
NDM2ODU4ODc0MzZjLzEvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMtNDM2ODU4ODc0MzZj
LzEvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/LNClP0
mImF7SO9rvTtZkllqcZKWl4yeBErIIcemOzIXITsNAUbOYul/+UgoEmkoS1WGXMy
0hVYH8exqMWdYahWp4kCtvuYCqdDqf/CErE3v3bdBv87aPNM7H2qgdXvPsCC+ywj
hpEkn9TM7F6yZj2P5gzN3RWMOl+r+yMR2Sjc2lcJj7gJZfCNDsyqwEHJebojSEEQ
GoeA4g4DQgLgN2N4Svj2inmqtE7gYVzGmG0Cob5ECuAs7uorJnJd3HiA5vvfqI5K
al2Fs5bdh1hpxUJavbzzlvtBWX9wnlS5UyoKEY6oKUkcbI2XiRnUg0SWkuo4A5hQ
F4LmcXB0lGFiqg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:48 2025 by rpki-client