Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: oDpCL7yUFINDhZKdzS3EniC8h/FwY2DVXzh3C/e71yM=
Subject key identifier: 94:7E:EB:D4:7D:2B:7F:9C:23:FA:D8:A5:1C:9E:B8:A9:96:CE:FE:DE
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 0199FD33F5715D13018D0535F7567AC180FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0CA1
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: 7ynlTPOiJi139UkDlz7JObNIYqodb6V41lWxIAxcuTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f5:71:5d:13:01:8d:05:35:f7:56:7a:c1:80:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=947eebd47d2b7f9c23fad8a51c9eb8a996cefede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:60:55:59:e5:99:08:47:c8:19:87:d5:cd:
bc:bd:06:e8:a6:f9:8f:c5:fb:be:3b:88:00:69:34:
52:da:3c:ce:f5:af:5e:a4:e8:10:c4:38:7f:35:c0:
e5:d1:68:13:af:97:fa:80:9f:47:a1:04:8a:ae:b9:
09:4a:a8:a3:b7:fe:2f:ec:ef:87:93:01:cb:44:e8:
79:1c:45:cb:a0:a5:c4:ea:c2:24:a9:1d:66:b5:b4:
13:4c:ed:79:de:68:8a:27:4f:99:ee:93:00:e1:2f:
16:8c:fa:91:4a:f3:b9:c4:4c:21:55:eb:24:30:53:
b2:a9:72:ee:b5:cc:67:30:40:3c:84:2d:f8:35:7a:
ef:08:d6:89:4e:31:62:7a:9e:64:73:0a:c7:ab:6d:
b2:ca:d7:fd:6d:20:84:fb:fa:4e:14:a3:32:78:0d:
b4:9f:42:b4:24:27:58:3c:16:27:f2:8f:c7:ed:2c:
cf:61:74:7d:e4:3c:b1:61:7c:c9:b4:89:d1:ae:08:
db:e6:dd:df:a0:d8:32:d2:5a:d1:e7:ca:d7:c3:59:
08:92:0e:b5:35:90:7c:16:5f:e3:90:9d:ee:d0:03:
3f:95:27:b3:ad:0b:64:ea:60:3e:04:4f:09:b1:2d:
f2:2e:b6:22:30:23:cb:ef:73:b7:ed:1d:31:5c:5b:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7E:EB:D4:7D:2B:7F:9C:23:FA:D8:A5:1C:9E:B8:A9:96:CE:FE:DE
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6a:95:36:5d:81:37:91:84:35:30:ab:00:f3:01:66:dc:86:
e9:0d:2a:cb:ad:3f:5b:54:de:bf:48:2d:e5:9c:8f:da:5b:a6:
2b:c9:63:ba:3e:85:30:88:69:4c:7d:68:6c:da:94:c8:3f:ff:
89:e9:3b:c1:ce:81:6f:9e:58:57:5a:1c:5c:f1:66:98:38:26:
12:cc:36:e2:c2:af:c1:4d:9d:1d:21:69:5b:af:e3:e4:aa:f7:
95:37:f4:75:25:a2:4b:1a:25:3a:b1:37:d4:5f:6a:5a:be:db:
33:eb:d5:c7:05:6a:48:8c:fc:69:79:8b:15:dc:1c:3e:8c:94:
07:52:1f:20:45:36:03:cb:ca:b3:43:6b:46:16:5a:ca:c5:40:
27:8a:1a:f5:94:40:a4:7d:66:d7:b7:9d:d0:28:6e:5f:ac:9a:
86:2c:4e:6b:da:6a:ca:f6:ea:a9:fe:c8:22:c6:e9:63:d6:15:
54:3c:a6:11:bc:c4:d2:74:5c:0a:a1:a4:c1:9e:29:79:6a:ab:
18:60:87:ef:05:64:80:63:87:d9:8f:9f:89:ec:a4:77:16:94:
af:49:ad:d9:0f:e9:89:46:e8:de:23:da:9d:de:fe:da:db:ea:
08:5a:68:b5:b9:ab:79:fe:86:7a:ad:3c:3d:59:7d:37:94:cd:
ab:41:7b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/VxXRMBjQU191Z6wYD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OGM0ZjVmNDRhNjYwNmE3NjE3YTk2Y2VjMTg0OTAwYWNh
NmY4MGUwHhcNMjUxMDE5MTYwMTA0WhcNMjUxMDIwMTYwMTA0WjAzMTEwLwYDVQQD
Eyg5NDdlZWJkNDdkMmI3ZjljMjNmYWQ4YTUxYzllYjhhOTk2Y2VmZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OBgVVnlmQhHyBmH1c28vQbopvmP
xfu+O4gAaTRS2jzO9a9epOgQxDh/NcDl0WgTr5f6gJ9HoQSKrrkJSqijt/4v7O+H
kwHLROh5HEXLoKXE6sIkqR1mtbQTTO153miKJ0+Z7pMA4S8WjPqRSvO5xEwhVesk
MFOyqXLutcxnMEA8hC34NXrvCNaJTjFiep5kcwrHq22yytf9bSCE+/pOFKMyeA20
n0K0JCdYPBYn8o/H7SzPYXR95DyxYXzJtInRrgjb5t3foNgy0lrR58rXw1kIkg61
NZB8Fl/jkJ3u0AM/lSezrQtk6mA+BE8JsS3yLrYiMCPL73O37R0xXFvw7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR+69R9K3+cI/rYpRyeuKmWzv7eMB8GA1UdIwQY
MBaAFHiMT19EpmBqdhepbOwYSQCspvgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUt
YzY2ZTA4NzhkZDI3LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUtYzY2ZTA4NzhkZDI3
LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmqVNl2B
N5GENTCrAPMBZtyG6Q0qy60/W1Tev0gt5ZyP2lumK8ljuj6FMIhpTH1obNqUyD//
iek7wc6Bb55YV1ocXPFmmDgmEsw24sKvwU2dHSFpW6/j5Kr3lTf0dSWiSxolOrE3
1F9qWr7bM+vVxwVqSIz8aXmLFdwcPoyUB1IfIEU2A8vKs0NrRhZaysVAJ4oa9ZRA
pH1m17ed0ChuX6yahixOa9pqyvbqqf7IIsbpY9YVVDymEbzE0nRcCqGkwZ4peWqr
GGCH7wVkgGOH2Y+fieykdxaUr0mt2Q/piUbo3iPand7+2tvqCFpotbmref6Geq08
PVl9N5TNq0F7RA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:57 2025 by rpki-client