Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: VHoZ8+MYDF7g9GYq4KMj+K5C7bu2yVA11acosp2+CoM=
Subject key identifier: 7A:58:53:23:4D:EA:CD:C7:90:BB:9A:1A:00:6E:FC:62:8D:47:54:72
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019A22C040179EA78100506A12B149F58C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 15A4
Signing time: Sun 26 Oct 2025 23:00:15 +0000
Manifest this update: Sun 26 Oct 2025 23:00:15 +0000
Manifest next update: Mon 27 Oct 2025 23:00:15 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: HYp//CdKgeVDXfIA3Rsj7PL/6TRJvfNaYVdUeCroEq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:40:17:9e:a7:81:00:50:6a:12:b1:49:f5:8c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Oct 26 23:00:15 2025 GMT
Not After : Oct 27 23:00:15 2025 GMT
Subject: CN=7a5853234deacdc790bb9a1a006efc628d475472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:28:dd:99:ab:a5:fe:df:08:25:11:e1:df:
e0:af:35:aa:fc:5a:96:74:8b:1b:80:8c:75:50:c0:
41:db:5e:06:f9:63:19:a2:8b:c8:d6:8a:6b:b1:d9:
9a:f1:1b:e6:fe:05:66:1b:cb:60:4c:e0:44:81:e7:
06:59:f9:26:9a:c5:03:c4:d9:e7:e9:9f:72:ee:2d:
59:f4:1e:0a:13:6c:0a:7f:6c:1d:fa:67:fd:e0:2a:
4e:02:40:20:ac:0c:06:2f:96:ad:30:2d:69:2a:1c:
38:4d:e6:6c:8f:e6:53:ad:03:a6:89:5e:1c:52:2a:
d4:23:57:43:47:78:d6:c4:0c:da:65:a2:08:08:6c:
45:65:a2:3f:a7:bb:dd:9e:61:88:da:63:a6:b7:2b:
c6:e5:17:3f:88:46:25:98:4b:00:3f:f1:27:70:8b:
d0:dd:84:7a:6c:eb:49:e8:90:c3:fc:c0:8f:9a:9d:
37:1a:14:e1:cc:94:54:e6:00:e7:ed:26:58:8e:b4:
c7:bf:f3:72:6b:48:88:cf:73:02:01:a0:0e:23:7e:
4f:29:28:d4:70:ec:76:6d:00:b0:11:8a:e0:aa:f9:
c3:22:24:4f:73:80:45:9a:99:bf:11:2a:55:5d:f9:
d1:bc:2c:b8:3b:a6:f3:0b:c1:bb:82:29:cb:60:80:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:53:23:4D:EA:CD:C7:90:BB:9A:1A:00:6E:FC:62:8D:47:54:72
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a5:fc:6d:20:31:d9:51:ab:45:f2:f1:65:a9:42:b1:e1:2b:
5e:33:e7:99:33:8b:c0:f4:ae:19:cd:01:57:a6:1e:43:f8:33:
62:a0:0d:88:70:9f:ab:9b:72:55:42:a5:bd:cb:6e:cd:4e:50:
67:0e:e6:40:91:b7:5d:51:2d:01:61:7c:87:ab:1e:e3:01:fe:
93:9e:0b:1a:ab:dc:2b:e0:51:87:85:38:6e:e0:4f:36:9f:3b:
a8:0e:78:e3:33:69:a3:7c:7c:ce:c2:89:ca:f2:20:44:c8:5f:
14:b5:da:b3:56:e8:9e:ed:bc:bf:73:ab:12:5a:22:2d:9e:d1:
95:14:ed:11:49:cf:8b:30:74:c8:65:cb:8a:33:63:e5:af:f1:
dc:a1:6c:5f:65:e1:55:6a:bc:0f:22:39:33:55:bb:53:f7:f3:
d6:0f:c8:94:80:0f:a6:0f:aa:d8:3b:3a:de:1f:03:18:c5:82:
e2:0f:2c:18:d8:ee:de:d4:88:39:2d:25:bf:7f:80:5d:ae:eb:
aa:4b:c6:8d:19:ed:ac:0f:d0:c0:bf:4b:6e:0a:d2:52:b3:fc:
96:0b:f9:3e:b6:9b:16:15:40:16:e3:6d:1d:13:5d:c3:de:fb:
05:f1:e7:42:65:da:09:2d:34:ef:d6:63:eb:c4:0b:9a:6c:7d:
f1:62:f9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiwEAXnqeBAFBqErFJ9YyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGU1NjE3NzMwOGMyMGM0MmZiZjQyZjMxMGY0YzBlZjZi
Mjc4OTAwHhcNMjUxMDI2MjMwMDE1WhcNMjUxMDI3MjMwMDE1WjAzMTEwLwYDVQQD
Eyg3YTU4NTMyMzRkZWFjZGM3OTBiYjlhMWEwMDZlZmM2MjhkNDc1NDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsUo3Zmrpf7fCCUR4d/grzWq/FqW
dIsbgIx1UMBB214G+WMZoovI1oprsdma8Rvm/gVmG8tgTOBEgecGWfkmmsUDxNnn
6Z9y7i1Z9B4KE2wKf2wd+mf94CpOAkAgrAwGL5atMC1pKhw4TeZsj+ZTrQOmiV4c
UirUI1dDR3jWxAzaZaIICGxFZaI/p7vdnmGI2mOmtyvG5Rc/iEYlmEsAP/EncIvQ
3YR6bOtJ6JDD/MCPmp03GhThzJRU5gDn7SZYjrTHv/Nya0iIz3MCAaAOI35PKSjU
cOx2bQCwEYrgqvnDIiRPc4BFmpm/ESpVXfnRvCy4O6bzC8G7ginLYIDZ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpYUyNN6s3HkLuaGgBu/GKNR1RyMB8GA1UdIwQY
MBaAFBEOVhdzCMIMQvv0LzEPTA72sniQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYt
NmY0ZTY1ODViNTRiLzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYtNmY0ZTY1ODViNTRi
LzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6X8bSAx
2VGrRfLxZalCseErXjPnmTOLwPSuGc0BV6YeQ/gzYqANiHCfq5tyVUKlvctuzU5Q
Zw7mQJG3XVEtAWF8h6se4wH+k54LGqvcK+BRh4U4buBPNp87qA544zNpo3x8zsKJ
yvIgRMhfFLXas1bonu28v3OrEloiLZ7RlRTtEUnPizB0yGXLijNj5a/x3KFsX2Xh
VWq8DyI5M1W7U/fz1g/IlIAPpg+q2Ds63h8DGMWC4g8sGNju3tSIOS0lv3+AXa7r
qkvGjRntrA/QwL9LbgrSUrP8lgv5PrabFhVAFuNtHRNdw977BfHnQmXaCS0079Zj
68QLmmx98WL5mQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:15:42 2025 by rpki-client