Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: vJj5s7KwiGN5DNKk2CMZGV7oWpmWyZpNOeil8FEwnUk=
Subject key identifier: 12:BC:BC:C3:A2:6C:57:95:E2:00:BA:45:EE:0C:BB:00:E9:38:1A:05
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 0199FB463817535428481E68EB3D20D4A21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 07:01:47 +0000
Manifest this update: Sun 19 Oct 2025 07:01:47 +0000
Manifest next update: Mon 20 Oct 2025 07:01:47 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: IqSnttdJrBhj5p9U1iS0PSv9T7vbXHFOswSlcCamfSo=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:38:17:53:54:28:48:1e:68:eb:3d:20:d4:a2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Oct 19 07:01:47 2025 GMT
Not After : Oct 20 07:01:47 2025 GMT
Subject: CN=12bcbcc3a26c5795e200ba45ee0cbb00e9381a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:47:83:73:b0:1b:9c:68:62:d2:d3:6f:af:
26:dd:d2:8f:51:06:bc:6d:6b:86:78:54:5c:f1:2a:
94:45:a9:91:45:73:a5:48:f7:83:a5:b5:37:c1:72:
aa:6c:8d:ec:34:6a:f3:f0:be:8e:eb:7c:1f:ea:88:
85:fd:97:a7:69:c3:31:f5:ba:59:7d:d0:a5:59:7e:
4d:b6:df:84:97:a2:a2:61:33:b8:54:86:8f:f6:1e:
cb:41:1c:32:8d:b9:bb:82:e7:cd:f1:ea:be:ad:5f:
fd:31:85:ba:2c:55:39:eb:13:7b:7e:05:db:ba:94:
df:c0:80:aa:47:50:4e:96:26:a0:e6:ef:4d:7a:b3:
e5:0c:52:4e:86:bd:4b:ee:53:6f:2d:9e:00:10:b6:
c0:22:e7:42:15:f9:1e:e5:5f:6f:66:eb:ac:c2:2e:
08:02:31:2e:a4:3c:0a:d5:28:3a:ca:46:aa:fa:4a:
fd:f0:35:63:e0:bd:06:bd:33:d1:2a:c9:a5:73:d8:
dd:5a:7b:e6:23:aa:a6:27:30:d4:82:f4:0e:d3:87:
71:d8:e7:ac:2a:2b:5d:27:19:fc:8a:05:2f:31:41:
06:67:5e:21:60:95:ca:26:f0:6b:a4:80:d5:42:72:
cc:e0:d7:ab:0f:65:04:67:31:15:d7:e2:8b:7d:85:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BC:BC:C3:A2:6C:57:95:E2:00:BA:45:EE:0C:BB:00:E9:38:1A:05
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:09:70:99:fe:e7:64:f3:f8:c5:e7:ac:76:36:0f:2d:f3:cf:
7a:41:bd:b6:1f:4c:55:fc:63:0e:c7:16:4b:13:8a:41:9d:3f:
bc:72:49:1b:f4:14:9d:f8:71:3d:45:da:c4:c2:b1:12:79:56:
4a:b1:a5:0c:be:ca:76:72:c8:6a:d8:db:a0:55:f8:97:b8:89:
bb:ff:78:56:f9:04:1b:9b:e4:34:88:56:10:cc:e6:da:c3:87:
bf:37:4e:13:b0:43:1c:76:00:c5:c4:b2:41:3d:01:1a:d4:6d:
c4:cc:58:74:11:52:34:1a:5c:ab:08:1a:80:c5:45:1c:e0:0a:
f7:18:d3:33:f4:b8:47:5c:29:20:8b:cd:28:e6:d1:0b:c3:83:
65:7e:23:c0:da:ac:64:a9:d0:f8:40:8d:6d:1a:8b:71:f8:35:
38:8d:52:04:b4:88:40:9e:55:32:53:af:de:6f:6b:95:cd:c3:
6b:5d:9c:14:b0:4c:44:48:8e:21:34:5c:bc:90:29:71:b4:38:
9e:f7:3c:ee:0a:3c:25:5c:2c:5e:65:cc:c8:1d:31:c4:66:d1:
88:30:7c:14:09:38:9c:50:a7:ca:44:ad:27:ab:b7:2e:d3:94:
b0:0d:76:4b:43:37:b7:40:e8:00:c3:cf:92:01:9b:8f:0f:21:
dd:94:00:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RjgXU1QoSB5o6z0g1KIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDYzNmM1MDVkNTZhZjQyYTQxNGMxNjdkNTI0MDdkMzU2
YjNkMGIwHhcNMjUxMDE5MDcwMTQ3WhcNMjUxMDIwMDcwMTQ3WjAzMTEwLwYDVQQD
EygxMmJjYmNjM2EyNmM1Nzk1ZTIwMGJhNDVlZTBjYmIwMGU5MzgxYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DhHg3OwG5xoYtLTb68m3dKPUQa8
bWuGeFRc8SqURamRRXOlSPeDpbU3wXKqbI3sNGrz8L6O63wf6oiF/ZenacMx9bpZ
fdClWX5Ntt+El6KiYTO4VIaP9h7LQRwyjbm7gufN8eq+rV/9MYW6LFU56xN7fgXb
upTfwICqR1BOliag5u9NerPlDFJOhr1L7lNvLZ4AELbAIudCFfke5V9vZuuswi4I
AjEupDwK1Sg6ykaq+kr98DVj4L0GvTPRKsmlc9jdWnvmI6qmJzDUgvQO04dx2Oes
KitdJxn8igUvMUEGZ14hYJXKJvBrpIDVQnLM4NerD2UEZzEV1+KLfYUx0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBK8vMOibFeV4gC6Re4MuwDpOBoFMB8GA1UdIwQY
MBaAFHjWNsUF1Wr0KkFMFn1SQH01az0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTIt
ZGRjZDRkOTM1MDMwLzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTItZGRjZDRkOTM1MDMw
LzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATglwmf7n
ZPP4xeesdjYPLfPPekG9th9MVfxjDscWSxOKQZ0/vHJJG/QUnfhxPUXaxMKxEnlW
SrGlDL7KdnLIatjboFX4l7iJu/94VvkEG5vkNIhWEMzm2sOHvzdOE7BDHHYAxcSy
QT0BGtRtxMxYdBFSNBpcqwgagMVFHOAK9xjTM/S4R1wpIIvNKObRC8ODZX4jwNqs
ZKnQ+ECNbRqLcfg1OI1SBLSIQJ5VMlOv3m9rlc3Da12cFLBMREiOITRcvJApcbQ4
nvc87go8JVwsXmXMyB0xxGbRiDB8FAk4nFCnykStJ6u3LtOUsA12S0M3t0DoAMPP
kgGbjw8h3ZQANA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:41 2025 by rpki-client