Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: Dv9XJGAtwpoM3YkYmRLEDIwTL/RdXMx/tZRCE/6myWA=
Subject key identifier: 23:E6:59:CF:11:C7:C2:F8:4E:DB:D8:71:18:BE:89:52:A1:87:2E:97
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 0199FC58B8576D3691D9BE95B88960744AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:36 +0000
Manifest this update: Sun 19 Oct 2025 12:01:36 +0000
Manifest next update: Mon 20 Oct 2025 12:01:36 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: Uc5wtl8cFuN3J0yALIrh5oeqqlPNMIYCuftey0Lks6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b8:57:6d:36:91:d9:be:95:b8:89:60:74:4a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Oct 19 12:01:36 2025 GMT
Not After : Oct 20 12:01:36 2025 GMT
Subject: CN=23e659cf11c7c2f84edbd87118be8952a1872e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:29:0f:3f:f2:82:2b:ea:94:9b:c5:ee:ff:
a8:bf:c3:78:c4:37:40:d9:ba:08:de:a5:19:38:6d:
ba:0a:9e:53:b2:47:29:b1:4d:83:bc:36:3c:47:59:
75:c6:7b:f4:8f:ab:a2:91:76:d8:b9:83:46:e5:19:
d7:58:a1:5d:69:ee:6d:fd:d1:0c:e0:8f:81:75:af:
c2:70:06:98:0d:ae:52:d9:34:fa:ba:ea:bf:44:82:
8f:50:fe:3c:40:12:b5:dd:24:8b:6e:75:28:85:e0:
5d:e3:de:d5:69:53:27:1f:1c:c1:5c:5a:e8:72:3a:
9d:a3:07:d2:0f:b9:3c:5d:4b:c9:1a:36:bf:3b:7f:
2c:21:9f:01:98:6d:99:1a:e4:1e:27:4d:a9:c1:1b:
55:37:85:85:61:cd:83:31:4b:8e:15:d1:d5:ba:45:
a0:db:e0:42:5a:70:68:3d:00:39:6b:c0:3e:a9:47:
7d:56:e7:69:54:0f:09:cd:1f:ec:09:fb:76:3a:aa:
33:51:26:7f:16:83:53:ce:29:70:3d:af:0c:85:40:
d0:82:a7:e6:bb:5b:19:c8:b7:11:b9:18:37:bc:0d:
aa:88:8f:01:b3:a7:58:45:e6:f1:b3:1b:7c:08:3c:
f4:8e:df:fb:ab:5c:77:2d:fe:f5:df:ac:d0:e9:73:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:59:CF:11:C7:C2:F8:4E:DB:D8:71:18:BE:89:52:A1:87:2E:97
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4b:bc:48:e5:02:cd:d0:cf:15:a2:f1:f5:35:e6:a8:f6:a7:
11:48:c5:3e:d4:c7:62:f8:4a:a2:90:b8:4d:3c:bb:fa:24:56:
4f:79:24:d9:3f:b1:b6:4d:a6:61:fb:13:70:08:80:47:be:6b:
ef:16:0d:18:28:a4:0e:73:2a:1a:0d:e4:48:3d:cf:46:b3:2f:
1e:1b:a9:ec:03:46:51:10:91:ec:11:b3:38:b4:d2:87:2e:06:
93:74:ca:a7:28:28:d2:a9:6e:bd:19:bc:45:1b:3f:90:a0:8c:
b4:5b:95:13:de:f7:b9:e4:b8:5d:af:c8:cc:96:14:ce:45:14:
3c:04:f1:d6:54:ed:8a:46:19:f7:23:9a:0d:04:ab:3f:8b:21:
97:3f:dc:70:28:42:14:29:be:18:ef:f5:6e:31:72:b2:b1:3a:
69:6b:92:2a:80:62:2f:8f:5e:e3:62:a3:69:c2:15:19:53:e1:
4e:70:33:ac:e3:36:ca:a0:7b:cf:99:23:c1:1a:c1:a3:1c:06:
fa:a1:53:d1:be:a8:0d:46:c4:ca:94:cf:84:3d:c9:94:11:1e:
f9:07:8c:34:8e:52:b2:58:52:9e:2f:ea:54:a9:8f:e5:b5:ab:
58:ce:b5:62:6b:ec:4c:52:8b:18:9a:cd:3e:ef:e0:c0:45:7f:
90:f0:4b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLhXbTaR2b6VuIlgdErmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzllYjlkZDYyZDUxYWZhNTAxMmVmYTFhOWQxMGM2NjQw
MGM0NDUwHhcNMjUxMDE5MTIwMTM2WhcNMjUxMDIwMTIwMTM2WjAzMTEwLwYDVQQD
EygyM2U2NTljZjExYzdjMmY4NGVkYmQ4NzExOGJlODk1MmExODcyZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OQpDz/ygivqlJvF7v+ov8N4xDdA
2boI3qUZOG26Cp5TskcpsU2DvDY8R1l1xnv0j6uikXbYuYNG5RnXWKFdae5t/dEM
4I+Bda/CcAaYDa5S2TT6uuq/RIKPUP48QBK13SSLbnUoheBd497VaVMnHxzBXFro
cjqdowfSD7k8XUvJGja/O38sIZ8BmG2ZGuQeJ02pwRtVN4WFYc2DMUuOFdHVukWg
2+BCWnBoPQA5a8A+qUd9VudpVA8JzR/sCft2OqozUSZ/FoNTzilwPa8MhUDQgqfm
u1sZyLcRuRg3vA2qiI8Bs6dYRebxsxt8CDz0jt/7q1x3Lf7136zQ6XPCbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPmWc8Rx8L4TtvYcRi+iVKhhy6XMB8GA1UdIwQY
MBaAFHh5653WLVGvpQEu+hqdEMZkAMRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQt
NzRhY2Y4MmFmNTk2LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQtNzRhY2Y4MmFmNTk2
LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEu8SOUC
zdDPFaLx9TXmqPanEUjFPtTHYvhKopC4TTy7+iRWT3kk2T+xtk2mYfsTcAiAR75r
7xYNGCikDnMqGg3kSD3PRrMvHhup7ANGURCR7BGzOLTShy4Gk3TKpygo0qluvRm8
RRs/kKCMtFuVE973ueS4Xa/IzJYUzkUUPATx1lTtikYZ9yOaDQSrP4shlz/ccChC
FCm+GO/1bjFysrE6aWuSKoBiL49e42KjacIVGVPhTnAzrOM2yqB7z5kjwRrBoxwG
+qFT0b6oDUbEypTPhD3JlBEe+QeMNI5SslhSni/qVKmP5bWrWM61YmvsTFKLGJrN
Pu/gwEV/kPBLtw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:35 2025 by rpki-client