Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier: 0eaj/+6TYpJNAmpi0OdFMnMJqVEuMEec7ca6VF06iWQ=
Subject key identifier: 71:28:5F:F0:3B:73:0A:B7:D7:6E:5C:63:3F:F6:3A:CE:2D:89:CD:9E
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 0199FCC6C80C2C78957780CD05096D98B5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number: 12F2
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: 6T07akuBxgvG0izMFImIY3LJxqs.roa (hash: XGRbraQFnaK7TkdQ/duWwEkwP4S4BhjaDtKSynptX9M=)
2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: +6z0q814LaPBngRYYQUQp9eV8ZMASQxryjte7CP+J2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c8:0c:2c:78:95:77:80:cd:05:09:6d:98:b5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=71285ff03b730ab7d76e5c633ff63ace2d89cd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:26:35:ed:00:9a:7a:3b:93:e3:81:99:53:
66:b0:7e:9e:d4:8f:97:43:4b:34:f5:5a:d8:d8:15:
3f:c9:c5:2a:99:9d:a3:9d:6f:04:27:09:ab:e7:d6:
b4:b9:84:0c:67:fc:2e:dc:b0:af:2c:3e:c4:34:9c:
98:ca:c6:71:cf:b4:1e:b4:8d:a7:19:2b:7e:0d:75:
db:41:a2:dd:81:18:0d:aa:79:75:74:0f:f5:ed:77:
18:92:0d:b4:54:80:fe:ce:ca:ea:26:2a:09:34:c8:
a6:43:4d:fa:6a:ef:5a:02:3f:80:06:10:53:05:9e:
59:5d:ff:bc:42:9a:79:25:4a:00:7f:32:11:20:b4:
04:86:05:c1:17:16:fa:0e:d7:0c:29:98:cf:44:01:
ad:c1:d5:1a:17:3a:f9:7b:1b:fc:1a:4a:a5:18:36:
1b:5b:67:09:af:2d:aa:ca:c0:ce:70:00:92:3b:7f:
95:b9:db:ef:47:4d:c7:f6:05:f1:c4:fa:cc:2d:d9:
aa:82:8a:f2:36:aa:d6:9e:b0:66:bf:6f:40:ab:44:
62:14:27:7d:33:ee:e0:97:50:9c:7e:be:a4:ff:33:
8c:fc:76:72:8b:38:c7:21:4b:79:5c:8d:60:7e:f1:
7b:7a:2a:b0:8d:7f:3d:31:98:2d:62:c8:ab:c6:3d:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:5F:F0:3B:73:0A:B7:D7:6E:5C:63:3F:F6:3A:CE:2D:89:CD:9E
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:53:bf:42:1c:d7:7e:13:4e:c6:18:de:f9:ef:85:f9:75:ee:
7b:a2:63:f3:97:61:dd:d0:54:0e:a0:4e:92:94:3d:a3:06:59:
d2:13:f2:46:fb:bf:01:47:b2:71:8c:a3:6d:2a:00:7e:9a:5a:
9b:c0:68:24:9d:14:7e:1e:bf:99:3d:0a:c6:8b:e0:99:93:9e:
83:3b:56:4e:40:8e:28:b2:fc:e9:de:da:b5:ff:b5:b2:2a:07:
2a:71:04:52:d3:b2:51:28:06:13:34:bc:84:e0:01:b1:2a:aa:
a3:66:5d:b8:c5:39:b7:e6:4f:98:b8:fa:44:d5:e4:9e:fb:59:
3e:fd:57:de:fa:dc:d3:c7:72:7d:68:30:3c:30:ce:67:28:42:
84:55:c6:81:ad:eb:19:ad:8d:36:46:73:36:24:65:aa:51:8b:
1a:e2:38:a8:14:e1:ec:90:d6:30:31:3d:cc:9c:8b:b2:da:c9:
95:a9:5d:f3:38:12:73:f3:f0:83:bd:36:aa:80:86:eb:68:dc:
77:f1:04:6b:1f:c5:48:dd:18:c3:c5:ca:5f:00:10:57:d0:fa:
bc:59:45:08:d3:0d:da:a1:ea:22:3c:03:e8:2d:36:cd:e8:7f:
b8:2a:e0:1e:a2:58:43:dd:c7:df:a4:81:ec:0a:40:4a:d0:76:
0b:33:47:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xsgMLHiVd4DNBQltmLWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk
ODdlOGUwHhcNMjUxMDE5MTQwMTQ5WhcNMjUxMDIwMTQwMTQ5WjAzMTEwLwYDVQQD
Eyg3MTI4NWZmMDNiNzMwYWI3ZDc2ZTVjNjMzZmY2M2FjZTJkODljZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tsmNe0Amno7k+OBmVNmsH6e1I+X
Q0s09VrY2BU/ycUqmZ2jnW8EJwmr59a0uYQMZ/wu3LCvLD7ENJyYysZxz7QetI2n
GSt+DXXbQaLdgRgNqnl1dA/17XcYkg20VID+zsrqJioJNMimQ036au9aAj+ABhBT
BZ5ZXf+8Qpp5JUoAfzIRILQEhgXBFxb6DtcMKZjPRAGtwdUaFzr5exv8GkqlGDYb
W2cJry2qysDOcACSO3+VudvvR03H9gXxxPrMLdmqgoryNqrWnrBmv29Aq0RiFCd9
M+7gl1Ccfr6k/zOM/HZyizjHIUt5XI1gfvF7eiqwjX89MZgtYsirxj0jtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEoX/A7cwq3125cYz/2Os4tic2eMB8GA1UdIwQY
MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt
ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4
LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVO/QhzX
fhNOxhje+e+F+XXue6Jj85dh3dBUDqBOkpQ9owZZ0hPyRvu/AUeycYyjbSoAfppa
m8BoJJ0Ufh6/mT0KxovgmZOegztWTkCOKLL86d7atf+1sioHKnEEUtOyUSgGEzS8
hOABsSqqo2ZduMU5t+ZPmLj6RNXknvtZPv1X3vrc08dyfWgwPDDOZyhChFXGga3r
Ga2NNkZzNiRlqlGLGuI4qBTh7JDWMDE9zJyLstrJlald8zgSc/Pwg702qoCG62jc
d/EEax/FSN0Yw8XKXwAQV9D6vFlFCNMN2qHqIjwD6C02zeh/uCrgHqJYQ93H36SB
7ApAStB2CzNHsQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:30 2025 by rpki-client