Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: KylwtoSk7rcn3aHRolUiw1y7Dvfu5tAKiyVJ77Vyg3E=
Subject key identifier: 92:00:35:58:E8:C5:DB:3E:EE:A0:62:C8:8D:38:FD:EA:D6:B8:36:47
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 0199FAD7E610B4D866AC670DF8C9853BD520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0DCE
Signing time: Sun 19 Oct 2025 05:01:17 +0000
Manifest this update: Sun 19 Oct 2025 05:01:17 +0000
Manifest next update: Mon 20 Oct 2025 05:01:17 +0000
Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: 3/dIP59jbg0KRzqNC7CGdr/w28nhSAXgTV9uSpUruCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:e6:10:b4:d8:66:ac:67:0d:f8:c9:85:3b:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Oct 19 05:01:17 2025 GMT
Not After : Oct 20 05:01:17 2025 GMT
Subject: CN=92003558e8c5db3eeea062c88d38fdead6b83647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:2e:78:23:a2:1e:89:a2:e2:23:24:6d:12:
d2:64:97:02:df:7f:c4:fa:69:bc:a2:cc:7d:8b:f6:
59:d8:f8:de:97:73:5e:99:07:fe:13:1f:8f:6b:62:
71:a7:00:6d:b1:21:38:09:9c:56:cf:72:f2:bd:90:
0f:7d:db:3c:99:f5:c7:e7:5c:b6:f2:86:a6:88:19:
1b:94:46:3c:41:c5:6b:9b:96:71:82:79:9a:5a:bc:
45:23:25:d3:65:63:f7:7d:ff:0c:e6:45:66:64:4d:
3a:2b:c1:1c:58:fc:4c:c3:47:6a:74:c5:67:9a:f6:
ac:85:aa:05:04:3f:e4:5c:4e:3a:c6:0e:ba:c1:ee:
ac:b6:4f:f5:83:dd:2d:77:92:44:07:15:f5:f1:a3:
5e:09:06:38:10:7b:12:30:f2:19:3a:5a:8c:bf:18:
47:e5:44:36:36:0b:f1:8e:6b:ef:28:b7:08:6a:68:
32:e2:37:d3:cc:ae:e1:86:f3:bc:f4:56:1e:98:67:
d3:1c:b2:26:a6:0b:ce:9b:c2:f7:00:ba:bb:da:38:
9c:bd:42:66:79:f9:35:b3:68:c2:14:5c:f4:0d:85:
82:d0:da:ad:6d:aa:b9:de:ab:55:74:99:54:c9:47:
7c:e9:9d:36:41:4a:40:89:ec:4c:c7:bd:18:58:5a:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:00:35:58:E8:C5:DB:3E:EE:A0:62:C8:8D:38:FD:EA:D6:B8:36:47
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:13:35:67:f8:25:58:d6:71:a0:64:45:cd:e2:70:b0:61:b4:
1f:47:61:1a:4f:83:36:0d:d5:5c:33:aa:0a:93:19:59:bf:7b:
13:7b:f3:a4:1c:c4:7c:31:5e:f6:52:a2:aa:dd:db:1e:86:00:
b8:a5:f8:e8:3f:24:5b:85:2c:d1:5f:d2:72:39:e6:93:40:39:
c3:5a:06:4a:7d:fa:ca:06:3e:a0:f7:c4:ca:12:05:fd:c3:bf:
98:07:f4:fc:0c:9d:9a:6f:9f:a0:13:33:80:9e:e0:1b:54:80:
c0:da:eb:8f:41:58:78:b5:d4:b0:e8:df:50:4a:4b:5d:70:13:
c7:5f:d5:dd:da:a7:0a:b2:26:94:14:fe:9d:cd:46:5e:21:36:
f8:55:ea:61:2b:d0:40:d4:38:91:e3:10:ba:63:98:db:f9:2e:
d8:a6:dc:5f:2b:12:be:e3:8d:79:4c:48:45:a0:7c:c0:f2:ed:
50:fe:aa:c0:11:9c:7e:dc:c7:6e:b4:cb:0e:7a:15:9f:3e:cb:
9a:d6:9d:5f:98:bb:47:f4:cd:e2:f5:ee:f3:26:bc:19:64:6f:
27:c2:28:c6:81:da:26:58:a5:f1:7f:bc:02:13:67:af:a7:24:
5c:55:16:7d:91:b4:9e:7f:fc:8b:1a:9a:9b:65:a7:fa:d7:55:
4e:e7:21:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61+YQtNhmrGcN+MmFO9UgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGJjYjU0MzJhNDVmMjViMDQxMDM5NjdhYjQwM2MyOWQw
ZDQzMGEwHhcNMjUxMDE5MDUwMTE3WhcNMjUxMDIwMDUwMTE3WjAzMTEwLwYDVQQD
Eyg5MjAwMzU1OGU4YzVkYjNlZWVhMDYyYzg4ZDM4ZmRlYWQ2YjgzNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0YueCOiHomi4iMkbRLSZJcC33/E
+mm8osx9i/ZZ2Pjel3NemQf+Ex+Pa2JxpwBtsSE4CZxWz3LyvZAPfds8mfXH51y2
8oamiBkblEY8QcVrm5ZxgnmaWrxFIyXTZWP3ff8M5kVmZE06K8EcWPxMw0dqdMVn
mvashaoFBD/kXE46xg66we6stk/1g90td5JEBxX18aNeCQY4EHsSMPIZOlqMvxhH
5UQ2NgvxjmvvKLcIamgy4jfTzK7hhvO89FYemGfTHLImpgvOm8L3ALq72jicvUJm
efk1s2jCFFz0DYWC0Nqtbaq53qtVdJlUyUd86Z02QUpAiexMx70YWFq8eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIANVjoxds+7qBiyI04/erWuDZHMB8GA1UdIwQY
MBaAFHmLy1QypF8lsEEDlnq0A8KdDUMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81ZDBmYmItYWQ3ZC00YTlhLWIxNzQt
MTFiMjkwNTI1MjhkLzEvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81ZDBmYmItYWQ3ZC00YTlhLWIxNzQtMTFiMjkwNTI1Mjhk
LzEvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhM1Z/gl
WNZxoGRFzeJwsGG0H0dhGk+DNg3VXDOqCpMZWb97E3vzpBzEfDFe9lKiqt3bHoYA
uKX46D8kW4Us0V/Scjnmk0A5w1oGSn36ygY+oPfEyhIF/cO/mAf0/Aydmm+foBMz
gJ7gG1SAwNrrj0FYeLXUsOjfUEpLXXATx1/V3dqnCrImlBT+nc1GXiE2+FXqYSvQ
QNQ4keMQumOY2/ku2KbcXysSvuONeUxIRaB8wPLtUP6qwBGcftzHbrTLDnoVnz7L
mtadX5i7R/TN4vXu8ya8GWRvJ8IoxoHaJlil8X+8AhNnr6ckXFUWfZG0nn/8ixqa
m2Wn+tdVTuchqA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:19 2025 by rpki-client