Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: uyvoOAx50u8FA6HYIU2j6jSu4990B3Vx3nKiFPz3cuk=
Subject key identifier: 8B:F3:76:DB:35:48:04:6A:2D:88:01:59:5F:C1:9B:18:5D:C5:EF:22
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019A725C38CC0C7D78DC4AD39D5917D57FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0CFB
Signing time: Tue 11 Nov 2025 10:00:37 +0000
Manifest this update: Tue 11 Nov 2025 10:00:37 +0000
Manifest next update: Wed 12 Nov 2025 10:00:37 +0000
Files and hashes: 1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: QfdVkyjupuzWsxdhMejX3PWJ2Fb5Sx+iC3Y+owsBcHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:38:cc:0c:7d:78:dc:4a:d3:9d:59:17:d5:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Nov 11 10:00:37 2025 GMT
Not After : Nov 12 10:00:37 2025 GMT
Subject: CN=8bf376db3548046a2d8801595fc19b185dc5ef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:02:20:4a:ac:62:e1:1e:11:9d:1e:ef:6e:
7b:05:ed:4d:0a:6d:21:3d:0d:67:df:bb:d8:99:0d:
7a:10:23:ce:79:12:04:ec:11:f1:04:de:6a:21:84:
53:d9:39:12:49:84:37:4a:36:57:9a:40:55:c1:84:
a4:46:ab:30:8d:b3:75:3b:2a:5f:88:1d:61:65:9a:
fb:b1:56:93:33:ca:0a:55:d7:37:92:77:99:9b:91:
63:b2:f6:aa:97:5c:e3:9a:95:4c:b2:3e:00:1a:31:
c6:c5:d5:05:53:c1:73:eb:55:3f:2d:cc:28:4a:ca:
ff:af:79:13:94:a4:37:cc:fd:c1:99:84:5f:5b:a3:
16:fa:18:34:47:5d:cc:6c:c6:0d:73:ee:38:02:49:
02:d5:67:0e:1f:61:a2:09:14:0a:74:c2:6d:52:9b:
35:60:57:8d:3a:79:d5:d4:1f:a8:83:3c:75:0b:77:
37:8f:30:eb:aa:8b:eb:38:7b:96:46:5e:ac:a8:2a:
2b:0e:b9:32:ac:dd:3b:18:5e:85:d8:58:e7:29:3c:
7e:a9:da:f3:1a:b4:e9:81:13:24:83:ff:ef:9f:3b:
a8:0f:67:a5:ec:aa:98:1c:9b:bf:fe:2f:b2:0f:ac:
3e:43:02:16:52:68:4f:a1:6a:a1:eb:53:8b:34:dc:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:76:DB:35:48:04:6A:2D:88:01:59:5F:C1:9B:18:5D:C5:EF:22
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7b:a1:8c:f0:1d:48:6e:95:5a:8f:87:35:34:a6:89:12:83:
ed:7e:5d:27:fb:1c:3d:5a:ba:34:73:8c:43:80:62:65:53:16:
e4:ea:ea:43:d2:98:33:50:24:c1:dd:e9:2b:fc:30:d5:ac:ef:
d1:18:89:80:e7:87:6d:11:9b:6c:40:bd:84:59:fa:26:f9:dc:
00:d9:43:6a:ca:1f:6a:ee:10:0f:a2:8c:6b:75:5e:5b:ea:4a:
7f:47:eb:34:c0:db:0e:c8:00:66:aa:ac:79:93:68:37:61:93:
ce:cd:60:2d:43:9b:e9:a4:4a:1f:cf:00:6a:a6:bd:02:d4:8c:
32:26:06:2b:44:c0:22:a1:f7:8c:7b:67:6e:83:89:80:2b:32:
59:bd:18:e5:04:03:c4:7c:92:8d:49:16:cc:9e:00:cc:c4:a9:
66:d0:78:99:94:e6:a7:cd:df:1c:50:38:ed:8d:77:1c:3a:10:
a8:14:5e:ce:65:a8:f8:8b:a3:d1:f2:7b:a5:9c:f4:39:49:3a:
f8:a9:5f:7b:18:67:e5:09:be:80:3e:c8:6e:94:53:99:2f:80:
48:84:ff:36:2a:9b:02:49:6b:e7:69:18:cc:d8:72:30:5e:e2:
d9:e4:0a:0a:65:c8:0b:13:1d:0e:c2:b6:7b:ac:a9:85:ca:47:
ac:1a:86:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXDjMDH143ErTnVkX1X/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY5YTMzMGQ1M2Q2MjEyMzRhNmQxNDk4Y2U1YTQzMzAz
ZTllZjkwHhcNMjUxMTExMTAwMDM3WhcNMjUxMTEyMTAwMDM3WjAzMTEwLwYDVQQD
Eyg4YmYzNzZkYjM1NDgwNDZhMmQ4ODAxNTk1ZmMxOWIxODVkYzVlZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpQCIEqsYuEeEZ0e7257Be1NCm0h
PQ1n37vYmQ16ECPOeRIE7BHxBN5qIYRT2TkSSYQ3SjZXmkBVwYSkRqswjbN1Oypf
iB1hZZr7sVaTM8oKVdc3kneZm5Fjsvaql1zjmpVMsj4AGjHGxdUFU8Fz61U/Lcwo
Ssr/r3kTlKQ3zP3BmYRfW6MW+hg0R13MbMYNc+44AkkC1WcOH2GiCRQKdMJtUps1
YFeNOnnV1B+ogzx1C3c3jzDrqovrOHuWRl6sqCorDrkyrN07GF6F2FjnKTx+qdrz
GrTpgRMkg//vnzuoD2el7KqYHJu//i+yD6w+QwIWUmhPoWqh61OLNNxKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvzdts1SARqLYgBWV/Bmxhdxe8iMB8GA1UdIwQY
MBaAFHj/mjMNU9YhI0ptFJjOWkMwPp75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEt
ZjI4OGQyMDk3YTMwLzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEtZjI4OGQyMDk3YTMw
LzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXuhjPAd
SG6VWo+HNTSmiRKD7X5dJ/scPVq6NHOMQ4BiZVMW5OrqQ9KYM1Akwd3pK/ww1azv
0RiJgOeHbRGbbEC9hFn6JvncANlDasofau4QD6KMa3VeW+pKf0frNMDbDsgAZqqs
eZNoN2GTzs1gLUOb6aRKH88Aaqa9AtSMMiYGK0TAIqH3jHtnboOJgCsyWb0Y5QQD
xHySjUkWzJ4AzMSpZtB4mZTmp83fHFA47Y13HDoQqBRezmWo+Iuj0fJ7pZz0OUk6
+Klfexhn5Qm+gD7IbpRTmS+ASIT/NiqbAklr52kYzNhyMF7i2eQKCmXICxMdDsK2
e6yphcpHrBqGTQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:43 2025 by rpki-client