Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
File: EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft (raw, json)
Hash identifier: MFFh+C5zgaofdZ3SvX66E0Oqm2y3EPB1vxHeIlSjAUE=
Subject key identifier: 4B:AD:28:A1:A6:3A:39:D6:32:DA:77:5C:C3:CB:AC:18:31:38:35:07
Authority key identifier: 12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82
Certificate issuer: /CN=12868f5e34eefefce655c1bb8383299fa56c5c82
Certificate serial: 0199FBEBCCAC8E0E9ED3ABA363BCF0EC228D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
Manifest number: 125F
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl (hash: NL6PnbwamIThdhTatasDW3BifcpTgwJp+L8yjv5s7es=)
2: VxIYrmkfaudMi3uvOgmfLEYS9i4.roa (hash: HVOJKOfT05YM4fO+NpvciBLZRFLtFXYsLyo0g2RCD3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cc:ac:8e:0e:9e:d3:ab:a3:63:bc:f0:ec:22:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12868f5e34eefefce655c1bb8383299fa56c5c82
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=4bad28a1a63a39d632da775cc3cbac1831383507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:a9:d1:1e:1b:aa:43:35:8a:25:ae:fc:79:
fb:2e:72:d8:45:55:75:44:17:fa:70:d4:b1:00:98:
b4:d2:c0:ea:bc:96:b6:c3:43:ed:29:7a:fe:6e:53:
1d:33:29:13:b4:fc:6b:b1:67:ed:b4:b9:9b:50:cf:
18:83:55:de:a2:21:4f:e3:1b:fa:ae:50:10:25:77:
c6:50:44:7f:27:62:4e:d0:ff:60:73:66:90:80:dc:
d7:d4:ec:40:25:17:5e:03:1e:c5:b5:98:14:94:9f:
b1:97:94:d6:6f:b6:97:ea:18:5e:23:b9:b3:9e:f7:
99:a0:89:9c:ee:3e:36:b7:49:95:e6:4d:96:a9:e1:
51:6b:f8:58:5b:de:75:3a:e9:1c:2c:47:5e:77:42:
49:f7:fe:26:b5:d0:df:ff:b5:5e:3d:e9:c2:ea:7b:
37:a5:ad:d6:79:c8:55:09:ee:d3:e4:df:df:9a:72:
fa:4e:cd:3f:df:92:8a:f0:46:4d:d3:55:59:33:fb:
fb:70:7a:b2:b3:18:05:c6:f3:eb:7c:7d:f1:50:49:
8a:8e:14:40:26:97:cc:f6:0b:0a:05:9d:37:19:2b:
b4:89:f1:d8:64:ae:d5:78:64:bf:a2:df:f1:60:cb:
af:4a:cf:bd:d0:87:2e:1a:82:b4:09:49:73:80:3d:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:28:A1:A6:3A:39:D6:32:DA:77:5C:C3:CB:AC:18:31:38:35:07
X509v3 Authority Key Identifier:
keyid:12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:51:7a:ae:50:67:4b:bd:5e:68:32:a5:bb:19:c9:51:06:8f:
05:6b:8b:05:da:1d:6d:c5:1b:bc:62:0c:9d:d2:47:29:06:16:
cf:f6:e7:4e:25:6a:8a:c8:79:98:d0:6f:bb:02:07:47:96:7f:
1e:a9:d5:5f:e4:9a:08:c7:9e:66:b7:ec:6f:77:ad:bc:05:de:
db:fc:97:e4:6c:13:67:4d:f8:60:29:99:81:ab:c3:45:c5:49:
25:f6:32:c8:95:27:b8:40:c1:6c:ec:55:4b:f7:07:28:c3:20:
61:e3:45:68:cb:56:a2:6f:76:a4:cf:ec:f7:c5:fe:be:00:9a:
79:ba:9f:96:b4:90:b4:19:91:da:b9:d4:4e:db:7b:36:49:16:
06:ff:ec:8f:4d:dd:41:d1:f1:fe:7d:30:26:d1:dc:69:1a:2d:
4c:ff:80:bd:02:34:bd:76:6a:53:fb:e9:fc:0a:d4:a3:78:0d:
40:af:83:bf:3e:27:ce:45:f1:d5:2d:e5:0e:e8:4e:dc:1e:d7:
aa:34:7e:6f:62:77:98:0c:6a:78:6c:01:f8:1d:c8:72:d4:ca:
21:ee:7d:1e:63:38:c2:4f:5f:e2:9a:20:7f:f0:a4:3f:90:b1:
72:48:8f:e0:cc:2e:f7:78:f3:90:19:32:34:f1:df:dc:84:54:
6b:fa:00:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768ysjg6e06ujY7zw7CKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODY4ZjVlMzRlZWZlZmNlNjU1YzFiYjgzODMyOTlmYTU2
YzVjODIwHhcNMjUxMDE5MTAwMjM4WhcNMjUxMDIwMTAwMjM4WjAzMTEwLwYDVQQD
Eyg0YmFkMjhhMWE2M2EzOWQ2MzJkYTc3NWNjM2NiYWMxODMxMzgzNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaip0R4bqkM1iiWu/Hn7LnLYRVV1
RBf6cNSxAJi00sDqvJa2w0PtKXr+blMdMykTtPxrsWfttLmbUM8Yg1XeoiFP4xv6
rlAQJXfGUER/J2JO0P9gc2aQgNzX1OxAJRdeAx7FtZgUlJ+xl5TWb7aX6hheI7mz
nveZoImc7j42t0mV5k2WqeFRa/hYW951OukcLEded0JJ9/4mtdDf/7VePenC6ns3
pa3WechVCe7T5N/fmnL6Ts0/35KK8EZN01VZM/v7cHqysxgFxvPrfH3xUEmKjhRA
JpfM9gsKBZ03GSu0ifHYZK7VeGS/ot/xYMuvSs+90IcuGoK0CUlzgD3PlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEutKKGmOjnWMtp3XMPLrBgxODUHMB8GA1UdIwQY
MBaAFBKGj1407v785lXBu4ODKZ+lbFyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTIt
MWYzNGVmYjViN2QxLzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTItMWYzNGVmYjViN2Qx
LzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1F6rlBn
S71eaDKluxnJUQaPBWuLBdodbcUbvGIMndJHKQYWz/bnTiVqish5mNBvuwIHR5Z/
HqnVX+SaCMeeZrfsb3etvAXe2/yX5GwTZ034YCmZgavDRcVJJfYyyJUnuEDBbOxV
S/cHKMMgYeNFaMtWom92pM/s98X+vgCaebqflrSQtBmR2rnUTtt7NkkWBv/sj03d
QdHx/n0wJtHcaRotTP+AvQI0vXZqU/vp/ArUo3gNQK+Dvz4nzkXx1S3lDuhO3B7X
qjR+b2J3mAxqeGwB+B3IctTKIe59HmM4wk9f4pogf/CkP5CxckiP4Mwu93jzkBky
NPHf3IRUa/oA7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:27 2025 by rpki-client