Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: 7/prj5CQZNtRyiKDL2CA4ZwVe09k0HbMqcK31rNuL2U=
Subject key identifier: 14:94:1E:61:6B:EA:01:61:4B:5D:0F:95:CB:C2:A7:DC:2A:22:E8:C7
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 0199FDDA08273599707EAE5B9CF87EA74DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 086B
Signing time: Sun 19 Oct 2025 19:02:28 +0000
Manifest this update: Sun 19 Oct 2025 19:02:28 +0000
Manifest next update: Mon 20 Oct 2025 19:02:28 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: BHm/qDI5bcOXpJlkdmf/Of4MmQSCuv9qYDOpTlhhXOA=)
2: s4gZLWdCbjdScQy92lhU1qj4INY.roa (hash: xkF7VCE+qi9EQz5A3LDxMLzmcYX7S6EBBQO/VGtQ7OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:08:27:35:99:70:7e:ae:5b:9c:f8:7e:a7:4d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Oct 19 19:02:28 2025 GMT
Not After : Oct 20 19:02:28 2025 GMT
Subject: CN=14941e616bea01614b5d0f95cbc2a7dc2a22e8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:cb:6f:1c:5b:46:68:7e:07:f2:6c:c2:94:
67:47:9c:fe:21:02:ae:87:b4:2e:c3:c4:2f:84:8d:
68:4e:30:54:25:e0:77:53:8a:45:88:49:ec:5b:4e:
fe:07:93:aa:e2:26:eb:23:c0:a9:9a:b4:bf:14:7f:
ac:00:20:c9:d6:70:d6:55:87:b9:24:ea:1d:b0:39:
a2:1c:56:b2:1f:d5:00:a1:e5:3d:44:14:43:a1:68:
6d:03:c2:38:33:9c:4c:b6:c0:cf:7f:36:bc:54:7a:
61:0c:93:91:0b:7d:53:c5:c1:63:4f:09:f6:22:b2:
9e:7c:34:f6:25:62:08:9c:6c:1c:82:7a:c9:fc:c6:
89:85:e9:fe:c1:73:00:d8:c8:aa:7f:15:ad:dc:ef:
bd:81:8d:f1:34:b0:f5:c4:77:9d:4c:b3:4b:e6:bd:
bb:8e:56:ec:85:bf:08:fc:ee:94:a0:ce:67:f0:31:
4c:a9:f8:18:e4:96:88:8b:31:23:1f:0f:b6:ab:42:
87:29:bf:5c:13:92:49:e4:fd:77:67:ab:a6:67:51:
8b:0f:bd:e7:fa:c3:26:d1:ed:a7:72:b3:8a:39:44:
c3:8f:c0:37:9e:25:fc:51:26:0a:cc:0a:0c:10:1e:
d7:d7:28:e6:4e:cd:4e:4a:b3:a3:b3:fc:f9:60:b9:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:94:1E:61:6B:EA:01:61:4B:5D:0F:95:CB:C2:A7:DC:2A:22:E8:C7
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:81:8f:69:b0:20:c4:8d:5b:6b:1c:6d:7e:e7:60:d4:09:11:
65:b1:9e:ca:a5:69:e5:61:d9:af:3d:62:b5:35:b7:b9:cd:1e:
ba:88:e7:e4:42:4a:f3:0b:7b:f4:87:9a:98:d6:06:54:31:89:
8b:48:9f:ce:28:84:5e:b0:f6:c7:58:2f:31:46:cd:d7:3d:68:
f1:01:07:53:bd:64:31:06:94:7f:2d:34:98:1b:db:5e:e1:d3:
7e:f5:15:9b:a5:22:aa:fe:d5:cf:4c:61:74:ff:a4:a0:61:e6:
73:d3:1d:4b:6d:ca:f6:47:12:ed:e4:58:e9:16:01:62:3d:87:
27:b4:c9:d0:94:8d:9d:d7:70:45:e2:ec:cf:6e:c9:40:99:f7:
64:0f:b5:c8:14:c8:53:87:a6:a9:e9:d7:1b:1c:cd:0b:40:ac:
8a:90:3b:31:62:89:06:36:20:23:83:80:85:74:b9:65:aa:5d:
68:f8:31:23:f9:96:ce:44:55:c2:e8:d5:a6:4d:8b:fa:ab:03:
e7:8b:76:03:2f:5b:99:3d:be:fa:e4:65:29:87:3e:3d:34:38:
78:8a:79:af:dd:a5:ee:de:93:b4:4a:fc:da:7b:cf:20:69:fb:
7e:c7:56:46:a9:7e:8c:74:a2:94:50:9b:7a:dd:03:99:12:f6:
7c:26:40:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ggnNZlwfq5bnPh+p035MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMDg1YzU0MGMxMTRmYzg5NTdhMDI1MGJiNDlmNDg0Yjc0
MzU3YjkwHhcNMjUxMDE5MTkwMjI4WhcNMjUxMDIwMTkwMjI4WjAzMTEwLwYDVQQD
EygxNDk0MWU2MTZiZWEwMTYxNGI1ZDBmOTVjYmMyYTdkYzJhMjJlOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jHLbxxbRmh+B/JswpRnR5z+IQKu
h7Quw8QvhI1oTjBUJeB3U4pFiEnsW07+B5Oq4ibrI8CpmrS/FH+sACDJ1nDWVYe5
JOodsDmiHFayH9UAoeU9RBRDoWhtA8I4M5xMtsDPfza8VHphDJORC31TxcFjTwn2
IrKefDT2JWIInGwcgnrJ/MaJhen+wXMA2MiqfxWt3O+9gY3xNLD1xHedTLNL5r27
jlbshb8I/O6UoM5n8DFMqfgY5JaIizEjHw+2q0KHKb9cE5JJ5P13Z6umZ1GLD73n
+sMm0e2ncrOKOUTDj8A3niX8USYKzAoMEB7X1yjmTs1OSrOjs/z5YLljrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSUHmFr6gFhS10PlcvCp9wqIujHMB8GA1UdIwQY
MBaAFBIIXFQMEU/IlXoCULtJ9IS3Q1e5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAt
OGFhNmY2YzE3MGZmLzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAtOGFhNmY2YzE3MGZm
LzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYGPabAg
xI1baxxtfudg1AkRZbGeyqVp5WHZrz1itTW3uc0euojn5EJK8wt79IeamNYGVDGJ
i0ifziiEXrD2x1gvMUbN1z1o8QEHU71kMQaUfy00mBvbXuHTfvUVm6Uiqv7Vz0xh
dP+koGHmc9MdS23K9kcS7eRY6RYBYj2HJ7TJ0JSNnddwReLsz27JQJn3ZA+1yBTI
U4emqenXGxzNC0CsipA7MWKJBjYgI4OAhXS5ZapdaPgxI/mWzkRVwujVpk2L+qsD
54t2Ay9bmT2++uRlKYc+PTQ4eIp5r92l7t6TtEr82nvPIGn7fsdWRql+jHSilFCb
et0DmRL2fCZA+Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:47 2025 by rpki-client