Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: jIXevZj3DN1k0MmdEvgG7T2IACoMhDEbwSQw3mcgMkY=
Subject key identifier: E2:A0:FF:BE:58:99:FB:52:55:13:DD:0A:14:5E:BB:67:F4:AF:13:EC
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019A003571AE646F4B8EB50B145F07AAB0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1677
Signing time: Mon 20 Oct 2025 06:01:33 +0000
Manifest this update: Mon 20 Oct 2025 06:01:33 +0000
Manifest next update: Tue 21 Oct 2025 06:01:33 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: vcn65yb707WB1dAJuUzHkKyndUSf1eYQ604KOkln5yw=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:71:ae:64:6f:4b:8e:b5:0b:14:5f:07:aa:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Oct 20 06:01:33 2025 GMT
Not After : Oct 21 06:01:33 2025 GMT
Subject: CN=e2a0ffbe5899fb525513dd0a145ebb67f4af13ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:41:62:b7:8d:d3:65:2c:97:94:9c:d2:19:
ef:9a:67:46:88:09:ee:2a:66:2b:54:ac:d8:c4:30:
4d:0f:6d:6e:d4:b9:ae:cc:25:e2:26:6b:08:8b:07:
63:1b:f2:72:f2:30:d5:5a:4c:b7:c6:7e:a3:84:c0:
44:52:95:0a:09:f3:fc:27:ac:2c:20:0d:49:a4:52:
a2:49:1a:74:e3:b7:9e:8b:31:d2:be:13:4e:d9:26:
12:99:5b:50:7f:9c:10:67:f7:84:1c:fa:ae:cb:c2:
34:cd:e3:b8:c3:e8:6b:b1:bb:85:53:a0:1b:89:62:
aa:a2:3c:12:0d:ed:61:d2:dd:66:bb:71:0a:38:f0:
0a:72:74:99:62:1b:cd:d9:10:f1:1f:98:9d:8d:76:
6b:26:24:ef:ee:dd:ba:24:36:f8:03:fc:7f:10:65:
83:39:7a:29:e9:ad:68:af:4e:40:d5:c4:af:06:71:
6c:63:06:66:bd:98:3c:22:f3:d9:8d:f5:bf:60:b6:
cd:66:6b:22:f4:7a:59:18:53:d2:b4:06:f8:51:52:
08:3d:a7:d2:f5:80:51:04:f5:80:6c:d5:76:6d:42:
06:85:27:10:1c:e6:97:ba:16:5f:c2:c1:6a:f5:61:
e7:49:f0:3e:f1:f3:d6:f8:9c:b4:bf:51:55:9d:48:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:FF:BE:58:99:FB:52:55:13:DD:0A:14:5E:BB:67:F4:AF:13:EC
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:03:4c:22:38:57:9d:9d:5a:b1:1d:c6:ff:84:88:18:8d:
04:32:d5:77:6f:bd:dc:d4:86:b2:7b:9e:ee:f6:e8:f9:3b:54:
03:2d:92:7c:5d:01:d0:5b:aa:9f:00:38:c6:5f:db:16:a4:17:
9e:9c:fb:2d:3f:3a:dd:31:f6:f2:da:0c:e4:c4:04:42:5b:63:
39:54:11:13:4c:ba:53:b3:8c:67:28:98:b6:1c:2a:8d:d2:00:
84:2d:15:cc:c4:2d:20:51:66:43:21:bb:be:2c:da:70:37:31:
98:3d:4c:a8:82:ee:53:ef:d6:71:25:7d:a6:33:2e:8c:0d:b9:
69:ab:60:ad:9c:de:51:fe:c5:f4:92:ba:43:98:98:aa:11:c3:
6b:4a:da:13:7a:c1:e5:16:fe:53:3e:34:f7:9a:0b:10:d6:a1:
df:fb:db:75:14:2d:6d:d0:ca:17:0f:6d:b7:da:e0:b9:01:60:
e8:97:9d:5d:53:ac:f2:b5:ae:43:d2:4d:e4:e3:e4:d5:c1:ae:
bc:1b:3a:f4:9b:5e:67:1a:44:9f:83:97:80:31:d7:cb:fa:8a:
ca:a1:ef:75:e5:cc:6a:85:04:1b:fc:d5:a0:09:c1:91:e3:20:
f2:0f:06:35:d3:59:89:c6:57:78:58:f8:69:6d:be:92:5b:e2:
b4:88:32:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANXGuZG9LjrULFF8HqrCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjUxMDIwMDYwMTMzWhcNMjUxMDIxMDYwMTMzWjAzMTEwLwYDVQQD
EyhlMmEwZmZiZTU4OTlmYjUyNTUxM2RkMGExNDVlYmI2N2Y0YWYxM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5JBYreN02Usl5Sc0hnvmmdGiAnu
KmYrVKzYxDBND21u1LmuzCXiJmsIiwdjG/Jy8jDVWky3xn6jhMBEUpUKCfP8J6ws
IA1JpFKiSRp047eeizHSvhNO2SYSmVtQf5wQZ/eEHPquy8I0zeO4w+hrsbuFU6Ab
iWKqojwSDe1h0t1mu3EKOPAKcnSZYhvN2RDxH5idjXZrJiTv7t26JDb4A/x/EGWD
OXop6a1or05A1cSvBnFsYwZmvZg8IvPZjfW/YLbNZmsi9HpZGFPStAb4UVIIPafS
9YBRBPWAbNV2bUIGhScQHOaXuhZfwsFq9WHnSfA+8fPW+Jy0v1FVnUhnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKg/75YmftSVRPdChReu2f0rxPsMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJQDTCI4
V52dWrEdxv+EiBiNBDLVd2+93NSGsnue7vbo+TtUAy2SfF0B0FuqnwA4xl/bFqQX
npz7LT863TH28toM5MQEQltjOVQRE0y6U7OMZyiYthwqjdIAhC0VzMQtIFFmQyG7
vizacDcxmD1MqILuU+/WcSV9pjMujA25aatgrZzeUf7F9JK6Q5iYqhHDa0raE3rB
5Rb+Uz4095oLENah3/vbdRQtbdDKFw9tt9rguQFg6JedXVOs8rWuQ9JN5OPk1cGu
vBs69JteZxpEn4OXgDHXy/qKyqHvdeXMaoUEG/zVoAnBkeMg8g8GNdNZicZXeFj4
aW2+klvitIgydQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:42:50 2025 by rpki-client