Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: t/zIiVm4EuoNJjdNoe5OYfG6xzAYwC/LD36D+y2RPEg=
Subject key identifier: A4:60:C5:43:39:20:7E:DB:B2:1E:DA:5A:59:06:9D:F4:35:E3:46:C0
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 0199FC219049FB942ED557238FD7CA8240BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 120C
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: BgPbio1r32eMRYTt4jzHMjL2OYbK5dJrhDPIZg0frYU=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:90:49:fb:94:2e:d5:57:23:8f:d7:ca:82:40:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=a460c54339207edbb21eda5a59069df435e346c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:2a:4e:3b:d8:29:d7:13:f3:e1:92:ce:b1:
95:70:a0:53:8d:d3:2b:16:bb:c0:13:58:e1:34:b9:
7f:51:7f:05:cd:1f:fc:9e:b4:56:90:9b:9e:b8:69:
ba:26:e7:2c:f5:25:9d:5b:d2:64:e6:b7:31:4f:df:
19:ae:fd:88:9e:e4:31:ae:63:77:7e:3d:b1:c0:1b:
f6:e2:50:e9:40:2c:47:97:a1:16:17:85:a3:54:23:
cf:01:71:64:81:67:a1:69:5c:6a:ad:39:33:c2:45:
5d:1d:60:72:37:5c:15:a6:e7:b0:50:44:c8:c2:28:
f4:16:06:af:be:2c:db:6c:fd:59:d9:22:79:d9:56:
60:ee:88:50:fe:23:67:a1:ef:41:61:a2:1d:a7:53:
b6:97:4b:d0:fe:59:f1:f2:7d:0b:fb:1d:02:0c:00:
49:58:11:72:36:eb:cc:38:88:3f:55:22:56:a3:ad:
9b:ad:c3:ad:b2:e5:30:57:4b:b1:ce:d8:97:bb:f9:
8f:e1:11:3f:c0:74:f1:68:26:20:30:c1:f7:8f:34:
3d:03:21:31:c1:36:6f:8f:8c:73:ad:d1:b2:77:43:
f1:5f:34:c5:2c:00:d8:72:c8:91:e5:7e:83:b1:bf:
38:a7:22:c8:ba:d4:17:7d:42:70:6f:13:0f:3f:e2:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:C5:43:39:20:7E:DB:B2:1E:DA:5A:59:06:9D:F4:35:E3:46:C0
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8a:3e:39:ab:15:24:72:47:de:24:5f:5f:34:b5:40:f0:cd:
8b:8b:82:1c:f9:f6:62:9a:4f:b7:da:be:8c:28:ff:1f:4c:f3:
c0:e1:e7:c8:fe:f5:fd:82:6f:72:9d:34:3e:df:c6:80:03:6c:
42:9f:fb:90:3e:41:7d:02:d3:14:fb:32:fb:94:9a:37:0b:4d:
a9:2b:19:9b:90:66:60:53:39:c3:19:1b:6f:d1:9c:92:69:10:
c0:27:fd:58:33:12:50:6a:39:c2:6a:a4:55:da:32:07:ce:ad:
f3:6d:8b:25:5c:ad:ed:3f:f1:27:79:e3:5c:79:d0:93:c5:97:
b0:3a:6c:75:1e:ab:c6:8f:36:ab:2b:3a:ee:d7:e4:5a:60:32:
56:90:77:08:5c:05:ae:9a:1e:5c:53:a8:9d:e4:4e:7a:fe:24:
53:26:6b:77:38:12:45:81:a7:63:a4:56:f9:7e:93:05:85:71:
3e:82:28:8b:f0:5b:aa:b1:fc:52:6a:53:51:9d:b1:bb:55:96:
8d:fb:23:c1:1e:bb:94:b1:f9:79:59:04:9c:f6:cf:00:66:87:
04:da:88:70:5e:dc:34:14:61:6e:93:5d:d6:26:08:f2:9a:d6:
3e:14:40:c3:31:4d:66:4e:7d:eb:ee:9a:8d:fc:7c:ea:0b:a0:
46:3a:4f:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZBJ+5Qu1Vcjj9fKgkC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGQ3MDEzYTdmZGJiNTY2M2ZkMzg0YTRmZWQxMjMwMzE0
NWUzY2UwHhcNMjUxMDE5MTEwMTIyWhcNMjUxMDIwMTEwMTIyWjAzMTEwLwYDVQQD
EyhhNDYwYzU0MzM5MjA3ZWRiYjIxZWRhNWE1OTA2OWRmNDM1ZTM0NmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyMqTjvYKdcT8+GSzrGVcKBTjdMr
FrvAE1jhNLl/UX8FzR/8nrRWkJueuGm6Jucs9SWdW9Jk5rcxT98Zrv2InuQxrmN3
fj2xwBv24lDpQCxHl6EWF4WjVCPPAXFkgWehaVxqrTkzwkVdHWByN1wVpuewUETI
wij0FgavvizbbP1Z2SJ52VZg7ohQ/iNnoe9BYaIdp1O2l0vQ/lnx8n0L+x0CDABJ
WBFyNuvMOIg/VSJWo62brcOtsuUwV0uxztiXu/mP4RE/wHTxaCYgMMH3jzQ9AyEx
wTZvj4xzrdGyd0PxXzTFLADYcsiR5X6Dsb84pyLIutQXfUJwbxMPP+LKFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRgxUM5IH7bsh7aWlkGnfQ140bAMB8GA1UdIwQY
MBaAFHmNcBOn/btWY/04Sk/tEjAxRePOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzct
MjRkODE4YmE3ZjI5LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzctMjRkODE4YmE3ZjI5
LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYo+OasV
JHJH3iRfXzS1QPDNi4uCHPn2YppPt9q+jCj/H0zzwOHnyP71/YJvcp00Pt/GgANs
Qp/7kD5BfQLTFPsy+5SaNwtNqSsZm5BmYFM5wxkbb9GckmkQwCf9WDMSUGo5wmqk
VdoyB86t822LJVyt7T/xJ3njXHnQk8WXsDpsdR6rxo82qys67tfkWmAyVpB3CFwF
rpoeXFOoneROev4kUyZrdzgSRYGnY6RW+X6TBYVxPoIoi/BbqrH8UmpTUZ2xu1WW
jfsjwR67lLH5eVkEnPbPAGaHBNqIcF7cNBRhbpNd1iYI8prWPhRAwzFNZk596+6a
jfx86gugRjpP+g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:34 2025 by rpki-client