Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: VIdNQ45LVmTSHB94IaBQOGf2KOShln3FTWrAEV0buqk=
Subject key identifier: ED:DF:8E:33:D5:A2:50:E2:A9:41:77:A2:4B:84:4C:47:4F:61:23:07
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 019A2478ECF7A13AD4A52C25A400022B4580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 0EBE
Signing time: Mon 27 Oct 2025 07:01:36 +0000
Manifest this update: Mon 27 Oct 2025 07:01:36 +0000
Manifest next update: Tue 28 Oct 2025 07:01:36 +0000
Files and hashes: 1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: /1djhATItHz/N92n2gWcrKNwrA9wPKB7S7JY5Joncgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:ec:f7:a1:3a:d4:a5:2c:25:a4:00:02:2b:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Oct 27 07:01:36 2025 GMT
Not After : Oct 28 07:01:36 2025 GMT
Subject: CN=eddf8e33d5a250e2a94177a24b844c474f612307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:09:b2:29:27:0c:0a:f6:8c:b2:97:4f:42:
83:f7:33:bd:6c:69:cb:45:dc:9c:f3:b2:4c:4c:53:
d9:5e:58:95:31:3c:6a:51:80:b6:ec:18:4c:5d:e4:
71:1d:a4:7c:b4:70:ef:a8:38:8c:1f:66:8f:33:b8:
a2:44:6e:56:9d:9f:61:3b:14:d6:ec:38:a0:6d:70:
bd:1e:4b:7b:b1:2c:68:b2:3a:f1:52:92:37:93:48:
00:7c:73:02:5b:33:b8:13:06:3d:7a:64:44:8e:59:
0d:59:6e:59:3c:9b:1c:bd:7a:10:9e:c6:87:ca:e3:
57:cd:0b:41:20:4c:38:01:58:f8:8d:86:26:00:9d:
8c:0e:b7:d7:99:73:df:bf:37:6e:88:8c:61:e4:11:
ca:7b:b3:40:4a:35:9d:a2:31:56:1b:26:92:f4:70:
d2:9b:24:80:27:4f:d6:93:df:4b:f0:90:fa:81:fb:
4f:41:b5:10:80:ab:42:24:94:26:fc:ba:61:ec:77:
63:34:81:34:0e:27:ea:92:b0:7d:01:09:46:18:2e:
9a:54:2d:88:c8:0b:3d:67:e9:35:42:f1:96:c1:c0:
78:5f:5d:ad:26:44:a0:f7:23:5d:79:ec:f8:18:ea:
11:0b:21:a7:98:82:de:d7:10:9e:90:ef:0b:4a:8d:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:8E:33:D5:A2:50:E2:A9:41:77:A2:4B:84:4C:47:4F:61:23:07
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:70:54:1e:24:f4:f3:80:81:ec:75:b1:a2:87:36:38:a2:7c:
3c:87:48:3d:fe:8b:8b:6d:f4:8a:d7:a5:e7:09:76:6e:1c:eb:
35:93:f4:02:01:27:e2:74:39:0f:d1:c0:0d:76:2a:41:99:ec:
07:ac:d9:64:1b:c5:1b:d1:f2:57:a2:cc:76:63:c4:0d:61:bf:
e6:a8:f4:8b:ea:d2:cf:59:4c:b9:99:26:15:a7:5c:15:94:2b:
ec:ac:b5:92:45:97:10:01:6d:14:2f:63:f9:85:57:39:3f:90:
d1:40:95:73:8b:21:06:06:ad:f0:bd:9f:f1:12:ab:c3:4d:fc:
ec:d0:70:d6:08:54:48:98:74:f2:4c:3c:b3:c7:0e:9e:22:19:
26:28:75:54:f7:8b:df:13:87:23:15:cd:4b:33:ab:95:88:e8:
fa:95:19:17:42:31:07:fe:67:3b:7f:a5:05:dc:34:2a:d9:17:
d8:fd:65:30:82:3b:c0:af:a2:34:81:f9:34:7a:7c:f3:04:4b:
bc:5f:fe:7d:37:8d:59:95:15:1c:a1:85:d8:fe:9a:57:a7:78:
12:b9:c7:24:8a:6b:0a:c7:39:08:73:8e:42:5a:f1:c5:96:5d:
64:6c:c4:38:71:65:e3:0c:61:b5:90:1a:52:b7:f4:fc:17:bf:
2d:cb:03:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeOz3oTrUpSwlpAACK0WAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw
YzMxODIwHhcNMjUxMDI3MDcwMTM2WhcNMjUxMDI4MDcwMTM2WjAzMTEwLwYDVQQD
EyhlZGRmOGUzM2Q1YTI1MGUyYTk0MTc3YTI0Yjg0NGM0NzRmNjEyMzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyooJsiknDAr2jLKXT0KD9zO9bGnL
Rdyc87JMTFPZXliVMTxqUYC27BhMXeRxHaR8tHDvqDiMH2aPM7iiRG5WnZ9hOxTW
7DigbXC9Hkt7sSxosjrxUpI3k0gAfHMCWzO4EwY9emREjlkNWW5ZPJscvXoQnsaH
yuNXzQtBIEw4AVj4jYYmAJ2MDrfXmXPfvzduiIxh5BHKe7NASjWdojFWGyaS9HDS
mySAJ0/Wk99L8JD6gftPQbUQgKtCJJQm/Lph7HdjNIE0DifqkrB9AQlGGC6aVC2I
yAs9Z+k1QvGWwcB4X12tJkSg9yNdeez4GOoRCyGnmILe1xCekO8LSo1dQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3fjjPVolDiqUF3okuETEdPYSMHMB8GA1UdIwQY
MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt
Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk
LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnBUHiT0
84CB7HWxooc2OKJ8PIdIPf6Li230itel5wl2bhzrNZP0AgEn4nQ5D9HADXYqQZns
B6zZZBvFG9HyV6LMdmPEDWG/5qj0i+rSz1lMuZkmFadcFZQr7Ky1kkWXEAFtFC9j
+YVXOT+Q0UCVc4shBgat8L2f8RKrw0387NBw1ghUSJh08kw8s8cOniIZJih1VPeL
3xOHIxXNSzOrlYjo+pUZF0IxB/5nO3+lBdw0KtkX2P1lMII7wK+iNIH5NHp88wRL
vF/+fTeNWZUVHKGF2P6aV6d4ErnHJIprCsc5CHOOQlrxxZZdZGzEOHFl4wxhtZAa
Urf0/Be/LcsDlg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:03 2025 by rpki-client