Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File: Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier: /Sf5enNv/Yr6J8AyKi8qswLLZ7jw1HZX54oRkdoSFiw=
Subject key identifier: 02:74:81:A7:DF:12:8D:16:BD:4A:28:40:AA:BD:34:F4:AE:E1:4F:D4
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer: /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial: 0199FBEA7822B8EAB4DEFF540A418725E38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number: 0DAC
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: S/OQtl6Q0ln4Qnqcw5XrYN95lDesV7KWBZ1mWsOCNTE=)
2: TEzCfvre_kNQlO-1mjIWxdip7ZI.roa (hash: EQul9dCLm5RmR5z5S2xFOcA4gCDhpuf1vUT9kUiOZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:78:22:b8:ea:b4:de:ff:54:0a:41:87:25:e3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=027481a7df128d16bd4a2840aabd34f4aee14fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:54:93:45:4d:15:a6:a2:30:04:fb:df:31:
d2:ac:29:b3:f7:7e:b1:58:8a:30:b5:bd:9e:5e:da:
9a:e7:9c:c8:f5:cd:0c:95:37:74:77:41:0a:c7:d1:
7c:ff:4d:9c:c1:e0:94:54:c4:64:ca:4f:36:ca:82:
ff:1c:5a:90:82:87:e0:1a:92:93:a5:fb:0e:72:bf:
70:41:10:85:5d:ce:31:ae:9d:62:ce:71:e5:c7:5e:
5c:80:24:9c:aa:16:89:f0:6e:83:00:c8:f7:2f:9c:
79:86:3c:13:46:da:9d:58:8b:31:fa:6a:4e:64:cb:
45:20:ed:9d:ee:00:5b:cd:13:b3:2e:65:07:f7:81:
42:de:ea:de:6d:f2:86:25:5c:e5:0f:97:31:7d:e4:
1a:eb:a0:ea:6c:2e:5b:12:86:81:b4:78:ff:03:de:
3f:2b:3f:b5:f2:26:25:77:f9:a1:fa:04:7a:da:4d:
62:4b:2a:89:e8:2c:cb:53:1b:08:fa:b2:45:1c:d5:
0c:b3:48:5b:8f:ac:5d:d9:ca:be:d3:8b:1e:a8:b6:
95:97:34:14:59:6c:ee:14:f0:4e:77:de:ec:dc:9f:
1f:f3:77:2f:a1:4b:66:99:24:29:4c:ac:25:9d:14:
03:ef:4e:c9:85:68:95:64:29:22:cf:fc:96:c0:cb:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:74:81:A7:DF:12:8D:16:BD:4A:28:40:AA:BD:34:F4:AE:E1:4F:D4
X509v3 Authority Key Identifier:
keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:15:44:d6:f7:b0:29:6c:ac:24:44:e1:46:01:03:57:00:
bc:7f:14:6a:a7:31:e9:20:0b:b6:4c:53:9e:c7:32:29:b6:2f:
51:85:00:7e:ff:6a:b8:0d:63:e8:59:26:a8:30:a2:da:c2:bc:
cb:ea:40:99:41:ee:74:c6:84:78:58:82:45:1c:17:cd:f0:58:
0c:ca:77:e6:67:dd:db:35:04:35:27:cb:bd:d3:54:c8:91:a5:
9f:cf:0c:3b:5b:39:f4:9d:c9:5d:08:98:ce:82:b5:fb:9e:db:
de:23:36:4e:53:48:21:5d:49:70:41:21:ca:0b:9e:34:4f:cf:
c2:bf:d0:ec:fa:47:d1:98:3f:2e:a0:66:35:5d:4e:46:df:c4:
a0:97:ab:36:4c:31:c5:9c:1f:47:73:13:56:6f:20:53:3b:1b:
e1:8b:f1:6b:2f:4d:0d:17:fe:57:cf:3b:3d:cb:31:a5:8a:cd:
78:70:fa:62:b4:f3:92:bc:ae:e8:18:ab:97:06:67:01:24:0a:
9f:93:4d:25:66:78:85:47:f4:16:8e:dd:c9:c8:d9:bc:34:e7:
00:84:58:00:d8:fc:65:52:60:9d:b8:60:b7:36:bc:0e:84:b1:
2c:a8:94:89:61:4f:c0:5f:97:4b:b5:b8:b6:21:92:a0:f5:51:
e1:04:f4:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ngiuOq03v9UCkGHJeOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMmUxZTQ4NGZjYThlOTUyOGRmNmFjMTQ4MzA1NmM4ODc4
Njc3MWQwHhcNMjUxMDE5MTAwMTExWhcNMjUxMDIwMTAwMTExWjAzMTEwLwYDVQQD
EygwMjc0ODFhN2RmMTI4ZDE2YmQ0YTI4NDBhYWJkMzRmNGFlZTE0ZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH5Uk0VNFaaiMAT73zHSrCmz936x
WIowtb2eXtqa55zI9c0MlTd0d0EKx9F8/02cweCUVMRkyk82yoL/HFqQgofgGpKT
pfsOcr9wQRCFXc4xrp1iznHlx15cgCScqhaJ8G6DAMj3L5x5hjwTRtqdWIsx+mpO
ZMtFIO2d7gBbzROzLmUH94FC3urebfKGJVzlD5cxfeQa66DqbC5bEoaBtHj/A94/
Kz+18iYld/mh+gR62k1iSyqJ6CzLUxsI+rJFHNUMs0hbj6xd2cq+04seqLaVlzQU
WWzuFPBOd97s3J8f83cvoUtmmSQpTKwlnRQD707JhWiVZCkiz/yWwMvu7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ0gaffEo0WvUooQKq9NPSu4U/UMB8GA1UdIwQY
MBaAFBMuHkhPyo6VKN9qwUgwVsiHhncdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQt
NzlkNmY1M2M3YTJlLzEvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQtNzlkNmY1M2M3YTJl
LzEvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNQVRNb3
sClsrCRE4UYBA1cAvH8Uaqcx6SALtkxTnscyKbYvUYUAfv9quA1j6FkmqDCi2sK8
y+pAmUHudMaEeFiCRRwXzfBYDMp35mfd2zUENSfLvdNUyJGln88MO1s59J3JXQiY
zoK1+57b3iM2TlNIIV1JcEEhygueNE/Pwr/Q7PpH0Zg/LqBmNV1ORt/EoJerNkwx
xZwfR3MTVm8gUzsb4Yvxay9NDRf+V887PcsxpYrNeHD6YrTzkryu6BirlwZnASQK
n5NNJWZ4hUf0Fo7dycjZvDTnAIRYANj8ZVJgnbhgtza8DoSxLKiUiWFPwF+XS7W4
tiGSoPVR4QT0UQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:20 2025 by rpki-client