Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: Xb8+TAK8JJ9P9trcBrFsjam01NyNB5O8FSV2y3hPBeY=
Subject key identifier: F7:DD:80:18:32:6F:77:55:84:47:E8:E4:93:85:8D:D1:FA:F8:CF:B8
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 0199FDA1CC4F41A5DDDB8E7731C00063128A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 18:01:03 +0000
Manifest this update: Sun 19 Oct 2025 18:01:03 +0000
Manifest next update: Mon 20 Oct 2025 18:01:03 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: ncSG1dPDF1b7uNNF5spUsK8ofo8G8BmZLdUR/yuNzeA=)
4: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
5: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
6: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
7: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
8: ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa (hash: Al22oIYh8E5aXL0ywXKSqrnxU2vRdMQS4zIM1t7Q1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:cc:4f:41:a5:dd:db:8e:77:31:c0:00:63:12:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Oct 19 18:01:03 2025 GMT
Not After : Oct 20 18:01:03 2025 GMT
Subject: CN=f7dd8018326f77558447e8e493858dd1faf8cfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:6b:47:2e:7b:ca:bf:6f:31:6a:d4:dc:a4:
20:3b:c1:42:94:c9:46:20:a1:8d:df:6a:8e:e8:0b:
22:8d:74:6d:3e:f1:28:e0:47:0b:93:41:46:61:32:
22:e9:5a:a5:36:7e:bb:0c:17:73:54:69:17:a5:31:
86:02:0e:62:3c:6b:3a:f8:57:49:75:77:fb:70:68:
86:e2:62:80:a4:a6:4c:ec:0c:a3:69:5a:22:bc:e5:
20:a7:23:da:32:8d:77:49:90:28:d5:5f:73:d3:34:
dd:c7:da:72:e3:5c:fd:40:70:26:a2:db:eb:30:01:
ee:e5:db:4d:ca:29:88:d3:1c:5f:1d:61:b4:59:5e:
3f:bb:2b:57:13:48:1b:63:d0:f8:d3:82:5c:fd:d0:
ac:e3:ba:e4:a1:8b:29:19:9a:77:43:86:d6:14:16:
1c:19:10:b7:63:7b:74:7f:31:11:6d:08:db:42:ff:
dd:3b:35:0d:46:35:f1:eb:e7:c8:a0:40:b1:4f:4f:
ac:e7:3d:00:7b:68:25:ed:f1:85:8e:53:40:a8:79:
c2:f1:03:cb:6c:58:8b:1c:12:96:22:ed:61:a4:13:
6d:67:f9:59:49:08:46:18:36:f0:53:2e:4b:c0:48:
90:3e:57:9c:aa:26:92:cf:b7:c5:1a:c4:d7:ac:7d:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DD:80:18:32:6F:77:55:84:47:E8:E4:93:85:8D:D1:FA:F8:CF:B8
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4b:a9:1b:da:ac:d0:87:1a:b9:52:e6:26:61:ac:96:07:07:
38:bf:fe:0c:8c:49:9b:e5:c1:66:c6:49:ba:24:c4:db:70:01:
91:0a:32:5f:a1:c1:1b:b7:f8:44:42:50:32:ee:6c:77:0a:af:
cc:5c:30:1c:dc:9c:f7:b2:58:bd:ac:6a:a2:92:dc:83:a1:44:
49:04:86:bf:31:a2:a9:8c:16:44:48:95:ee:5c:af:ef:8d:55:
da:4c:dd:76:1d:0e:c1:a0:7c:27:93:ea:c9:7f:ae:3d:b3:0b:
60:57:b8:c3:b8:e5:71:8b:99:8e:d4:7e:bd:ff:be:9b:fa:8b:
5b:ac:47:65:79:86:dc:f2:e2:53:6f:49:86:cc:98:cd:27:83:
2e:51:bb:18:66:82:ee:24:b7:6d:ed:d8:db:f4:fc:f3:d7:34:
c7:1d:6e:00:a4:cd:10:4e:74:65:86:27:0b:0b:6c:04:c3:48:
5e:a8:96:5a:1c:6b:00:81:b7:a1:52:cc:1b:55:c0:2c:b3:58:
f1:db:d8:9c:8f:c9:82:95:49:68:61:57:a1:a1:49:c9:ae:f3:
cb:99:6a:ba:c3:68:17:70:94:5a:ff:8d:31:3f:9a:d9:01:d5:
30:8e:d9:81:94:2c:36:1e:5a:7e:f8:e0:4c:3e:7f:4b:d4:79:
ca:70:81:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ocxPQaXd2453McAAYxKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy
YmI5YzEwHhcNMjUxMDE5MTgwMTAzWhcNMjUxMDIwMTgwMTAzWjAzMTEwLwYDVQQD
EyhmN2RkODAxODMyNmY3NzU1ODQ0N2U4ZTQ5Mzg1OGRkMWZhZjhjZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EBrRy57yr9vMWrU3KQgO8FClMlG
IKGN32qO6AsijXRtPvEo4EcLk0FGYTIi6VqlNn67DBdzVGkXpTGGAg5iPGs6+FdJ
dXf7cGiG4mKApKZM7AyjaVoivOUgpyPaMo13SZAo1V9z0zTdx9py41z9QHAmotvr
MAHu5dtNyimI0xxfHWG0WV4/uytXE0gbY9D404Jc/dCs47rkoYspGZp3Q4bWFBYc
GRC3Y3t0fzERbQjbQv/dOzUNRjXx6+fIoECxT0+s5z0Ae2gl7fGFjlNAqHnC8QPL
bFiLHBKWIu1hpBNtZ/lZSQhGGDbwUy5LwEiQPlecqiaSz7fFGsTXrH1tKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfdgBgyb3dVhEfo5JOFjdH6+M+4MB8GA1UdIwQY
MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt
ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4
LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0upG9qs
0IcauVLmJmGslgcHOL/+DIxJm+XBZsZJuiTE23ABkQoyX6HBG7f4REJQMu5sdwqv
zFwwHNyc97JYvaxqopLcg6FESQSGvzGiqYwWREiV7lyv741V2kzddh0OwaB8J5Pq
yX+uPbMLYFe4w7jlcYuZjtR+vf++m/qLW6xHZXmG3PLiU29JhsyYzSeDLlG7GGaC
7iS3be3Y2/T889c0xx1uAKTNEE50ZYYnCwtsBMNIXqiWWhxrAIG3oVLMG1XALLNY
8dvYnI/JgpVJaGFXoaFJya7zy5lqusNoF3CUWv+NMT+a2QHVMI7ZgZQsNh5afvjg
TD5/S9R5ynCBLg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:46:23 2025 by rpki-client