Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier: O54kCkaohEspNpQHefLLQRmUghljJCp5sSn5qspkNoY=
Subject key identifier: 5F:94:2B:2D:76:8A:32:8D:13:16:24:96:15:D8:B0:80:BF:E8:9E:5F
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer: /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial: 0199FBEBC7DD7409E183CF84A21529295AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number: 0287
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: 5CU1ahDVK2n9yObQhJO5s+RLHtFctov7pCyWp1TwiM8=)
2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c7:dd:74:09:e1:83:cf:84:a2:15:29:29:5a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=5f942b2d768a328d1316249615d8b080bfe89e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:f0:80:fd:17:c3:ff:4a:1d:04:2f:ef:c9:
92:60:71:8e:e2:7e:71:17:8c:66:9d:43:30:28:d7:
cf:76:f1:e7:31:2f:da:74:52:db:2e:c3:e1:f2:bc:
30:29:f6:e5:c7:ac:29:e4:63:70:d9:de:74:c8:4c:
f9:75:8c:4d:9e:66:6f:7d:6f:73:33:da:66:0e:6b:
37:a1:cd:ac:47:6a:ac:c5:ea:f6:c1:ca:e3:dc:08:
78:ab:20:fb:2c:bf:f8:84:7a:27:41:fc:16:9e:a2:
9d:24:33:69:51:eb:2d:01:38:fc:8b:fa:be:34:13:
e0:1b:71:5c:ef:7d:f6:eb:80:06:c6:5a:ef:6a:e5:
ac:9f:6f:bc:1b:73:45:2b:e6:13:2b:87:85:53:b6:
b0:ae:0c:56:cc:8f:25:84:fe:36:fe:73:4c:3b:9c:
c7:f8:e2:62:26:67:b6:98:d8:48:e7:f8:0f:02:a9:
b6:97:cb:c1:c1:68:b3:aa:af:1e:2b:26:d0:d6:02:
a0:01:f9:d6:46:35:5e:87:bd:bd:ba:f3:04:a3:80:
bf:3d:19:5e:93:0a:b3:59:37:88:70:2e:ea:8a:b2:
de:0e:dc:64:f3:75:6b:b3:ba:58:f8:c5:d6:f0:63:
08:35:72:17:8f:5d:00:01:89:7b:0a:7c:19:ce:a0:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:2B:2D:76:8A:32:8D:13:16:24:96:15:D8:B0:80:BF:E8:9E:5F
X509v3 Authority Key Identifier:
keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a5:1f:a0:1c:f2:c2:84:92:a5:65:14:73:54:e4:cd:8a:7b:
c9:b3:3f:81:eb:06:b0:fd:28:62:ce:f9:4f:9b:e1:20:de:57:
7b:d4:f2:9d:cc:df:be:01:af:74:12:bb:b9:67:7e:33:f9:9d:
ee:7f:5e:f2:a8:fd:4c:93:2e:0b:a4:0c:07:2b:d8:b4:b4:a8:
b8:dc:d0:26:15:fb:df:52:11:df:7c:6c:24:2e:5c:be:83:cb:
1e:43:60:8b:5d:7c:f0:11:f9:bb:7c:02:e8:78:d7:ce:28:53:
8b:6f:39:ef:ed:35:64:9e:86:d8:47:8c:d4:03:f6:0a:53:0d:
93:93:34:3c:52:e6:af:41:b3:09:68:70:0e:5e:c3:7a:1e:0a:
6f:88:4c:c7:15:23:a9:57:2e:f5:d6:c6:63:b2:5e:38:bd:4b:
b0:f5:d6:91:1b:12:df:9d:b5:a5:7b:70:da:bc:41:70:26:9d:
b9:ad:f0:10:4c:62:66:7e:5f:6f:51:34:3f:71:9f:79:02:86:
52:39:71:b8:be:ec:c0:26:7d:e1:a1:f1:06:fe:25:4d:f6:09:
cb:9a:ac:13:fe:2e:1f:1a:9d:59:b5:0f:74:4e:f2:9d:66:37:
6c:4b:f6:b6:51:da:ab:3e:53:64:ad:13:cf:ba:55:a9:b0:16:
96:e5:51:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768fddAnhg8+EohUpKVrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDMyYzEyMTczNTQ0OWYxNTM4ZmYwMDM2ZjRhYmQwNjAw
YTgyNWYwHhcNMjUxMDE5MTAwMjM3WhcNMjUxMDIwMTAwMjM3WjAzMTEwLwYDVQQD
Eyg1Zjk0MmIyZDc2OGEzMjhkMTMxNjI0OTYxNWQ4YjA4MGJmZTg5ZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkDwgP0Xw/9KHQQv78mSYHGO4n5x
F4xmnUMwKNfPdvHnMS/adFLbLsPh8rwwKfblx6wp5GNw2d50yEz5dYxNnmZvfW9z
M9pmDms3oc2sR2qsxer2wcrj3Ah4qyD7LL/4hHonQfwWnqKdJDNpUestATj8i/q+
NBPgG3Fc733264AGxlrvauWsn2+8G3NFK+YTK4eFU7awrgxWzI8lhP42/nNMO5zH
+OJiJme2mNhI5/gPAqm2l8vBwWizqq8eKybQ1gKgAfnWRjVeh729uvMEo4C/PRle
kwqzWTeIcC7qirLeDtxk83Vrs7pY+MXW8GMINXIXj10AAYl7CnwZzqBoGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+UKy12ijKNExYklhXYsIC/6J5fMB8GA1UdIwQY
MBaAFHjTLBIXNUSfFTj/ADb0q9BgCoJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUt
MzRhM2FhMGI2YWEwLzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUtMzRhM2FhMGI2YWEw
LzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqUfoBzy
woSSpWUUc1TkzYp7ybM/gesGsP0oYs75T5vhIN5Xe9TynczfvgGvdBK7uWd+M/md
7n9e8qj9TJMuC6QMByvYtLSouNzQJhX731IR33xsJC5cvoPLHkNgi1188BH5u3wC
6HjXzihTi2857+01ZJ6G2EeM1AP2ClMNk5M0PFLmr0GzCWhwDl7Deh4Kb4hMxxUj
qVcu9dbGY7JeOL1LsPXWkRsS3521pXtw2rxBcCadua3wEExiZn5fb1E0P3GfeQKG
UjlxuL7swCZ94aHxBv4lTfYJy5qsE/4uHxqdWbUPdE7ynWY3bEv2tlHaqz5TZK0T
z7pVqbAWluVRNg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:43 2025 by rpki-client