Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier: 32Fi7nxOrYRxGSm2a/7gShCMaHMpTJbKz+NLTuSVFug=
Subject key identifier: 0F:1B:18:D8:F3:D0:97:3B:E8:6B:81:7C:93:04:F7:56:3A:FC:21:A8
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 0199FE10116A19AA7D61C6AF201EF9F9330F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number: 1380
Signing time: Sun 19 Oct 2025 20:01:29 +0000
Manifest this update: Sun 19 Oct 2025 20:01:29 +0000
Manifest next update: Mon 20 Oct 2025 20:01:29 +0000
Files and hashes: 1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=)
2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: PJHHY2RckDP+ZW6ACMYPdjU6nfJnWJAmlYqJ+ILyf6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:11:6a:19:aa:7d:61:c6:af:20:1e:f9:f9:33:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: Oct 19 20:01:29 2025 GMT
Not After : Oct 20 20:01:29 2025 GMT
Subject: CN=0f1b18d8f3d0973be86b817c9304f7563afc21a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:91:a7:4d:5b:54:74:75:ef:e1:1b:b3:23:
d0:75:15:06:a8:9c:73:ab:19:da:96:e1:0d:1d:e8:
59:ae:fb:52:9f:fc:ec:17:01:bf:61:09:9d:e3:fc:
dc:d7:c8:76:17:f2:9b:1b:4a:4c:ba:98:7b:8b:86:
42:e9:69:d0:c8:0d:36:b2:66:f6:ff:01:e3:2a:f2:
a1:76:20:08:81:ec:6f:3f:a8:da:f6:9a:31:bb:0c:
25:a0:1a:f6:a0:3c:cb:51:a8:67:a0:c8:9b:ee:51:
71:14:93:f8:a2:19:97:3d:12:32:41:83:4f:86:24:
f2:b4:0d:d6:4e:a7:ff:a2:d1:d1:ff:2f:22:f0:f5:
87:a6:8b:d2:b1:70:0d:32:70:2f:21:57:a2:20:38:
29:34:fa:4d:46:37:11:3d:b0:13:f6:40:2f:b3:ee:
63:d8:7f:74:dc:82:1f:ba:d9:e8:ca:40:46:5e:7f:
dd:c2:7d:21:9a:bc:45:d1:38:fd:22:b7:50:61:bd:
a4:3a:f3:3b:9d:99:b0:fb:93:56:47:79:46:98:50:
6e:4d:14:d5:2a:3b:2e:7e:46:16:d0:ab:1c:01:8e:
7f:14:e8:28:78:4f:81:5c:88:a9:76:0a:b8:da:98:
82:6c:45:3f:80:c6:5c:69:c5:aa:06:28:47:9f:e2:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:18:D8:F3:D0:97:3B:E8:6B:81:7C:93:04:F7:56:3A:FC:21:A8
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7e:4a:0d:58:96:60:58:51:ca:0e:a6:e2:a7:79:de:8e:25:
70:d6:84:09:01:73:f7:a9:16:0f:ba:29:be:24:69:42:e7:55:
ea:9f:ef:9b:0d:47:63:49:40:bb:6a:ef:af:27:ad:68:ea:2c:
08:65:df:c5:af:ef:e2:6d:5e:06:50:fe:88:79:5e:91:a4:71:
b0:0a:8f:e8:b2:98:d4:7c:0e:89:52:47:23:82:e0:56:90:df:
50:a3:cc:32:97:8e:0b:cc:36:cf:62:18:f5:e7:6f:d4:e0:a9:
aa:c7:37:ee:f2:eb:d7:2a:7d:15:9a:06:ef:02:01:62:24:e7:
b1:e8:19:31:a9:a2:a9:ae:07:c4:30:83:57:ce:10:cf:a0:43:
2c:af:c1:df:f4:30:3d:39:48:c6:dc:57:7f:93:96:45:bd:02:
8a:94:c2:4b:9c:75:49:15:c0:21:9f:7d:21:e9:66:fa:c6:72:
b5:89:72:a8:31:b7:05:97:d9:c1:bc:65:8d:eb:79:53:a9:1e:
2e:c6:55:3d:c6:67:8f:27:26:17:3b:73:02:fe:ec:0b:78:94:
87:ab:b0:b3:0c:b8:19:75:91:6a:36:67:b9:66:88:89:86:91:
81:a8:01:15:2f:4b:c1:91:b0:fe:d0:ec:78:9e:ab:93:43:d3:
7c:7a:d0:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EBFqGap9YcavIB75+TMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZTdiYThjMDg4NTNiZTU1NGM1OTRkZWQxNTZhNjk4M2Vi
YTEwNTUwHhcNMjUxMDE5MjAwMTI5WhcNMjUxMDIwMjAwMTI5WjAzMTEwLwYDVQQD
EygwZjFiMThkOGYzZDA5NzNiZTg2YjgxN2M5MzA0Zjc1NjNhZmMyMWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqGRp01bVHR17+EbsyPQdRUGqJxz
qxnaluENHehZrvtSn/zsFwG/YQmd4/zc18h2F/KbG0pMuph7i4ZC6WnQyA02smb2
/wHjKvKhdiAIgexvP6ja9poxuwwloBr2oDzLUahnoMib7lFxFJP4ohmXPRIyQYNP
hiTytA3WTqf/otHR/y8i8PWHpovSsXANMnAvIVeiIDgpNPpNRjcRPbAT9kAvs+5j
2H903IIfutnoykBGXn/dwn0hmrxF0Tj9IrdQYb2kOvM7nZmw+5NWR3lGmFBuTRTV
KjsufkYW0KscAY5/FOgoeE+BXIipdgq42piCbEU/gMZcacWqBihHn+L/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8bGNjz0Jc76GuBfJME91Y6/CGoMB8GA1UdIwQY
MBaAFHjnuowIhTvlVMWU3tFWppg+uhBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTIt
NWVhZjllMTBkODVjLzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTItNWVhZjllMTBkODVj
LzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl35KDViW
YFhRyg6m4qd53o4lcNaECQFz96kWD7opviRpQudV6p/vmw1HY0lAu2rvryetaOos
CGXfxa/v4m1eBlD+iHlekaRxsAqP6LKY1HwOiVJHI4LgVpDfUKPMMpeOC8w2z2IY
9edv1OCpqsc37vLr1yp9FZoG7wIBYiTnsegZMamiqa4HxDCDV84Qz6BDLK/B3/Qw
PTlIxtxXf5OWRb0CipTCS5x1SRXAIZ99Ielm+sZytYlyqDG3BZfZwbxljet5U6ke
LsZVPcZnjycmFztzAv7sC3iUh6uwswy4GXWRajZnuWaIiYaRgagBFS9LwZGw/tDs
eJ6rk0PTfHrQXA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:32 2025 by rpki-client