Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File: eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier: 1wlNQDkG6cfQEwAQxoqhIPABjfLWVlW7jGOSkYuOhRc=
Subject key identifier: 25:1C:1B:1A:7F:54:97:AE:FF:22:18:4E:DA:E0:10:39:63:64:D9:60
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial: 0199FCFD50164EB218123C98CB23FCECB756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number: 02CD
Signing time: Sun 19 Oct 2025 15:01:23 +0000
Manifest this update: Sun 19 Oct 2025 15:01:23 +0000
Manifest next update: Mon 20 Oct 2025 15:01:23 +0000
Files and hashes: 1: eLGVH-huMc8rapx-zBQol7W6wbs.roa (hash: dBq0SVYODoTbT9noZtho2o8DhkqOnGRrlJMatl/O+48=)
2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: HhlAVB770eweHH/Wv5JnY/UfCnxs/T1OIH5BIpXKvyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:50:16:4e:b2:18:12:3c:98:cb:23:fc:ec:b7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Validity
Not Before: Oct 19 15:01:23 2025 GMT
Not After : Oct 20 15:01:23 2025 GMT
Subject: CN=251c1b1a7f5497aeff22184edae010396364d960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:da:06:5a:08:17:31:3e:e2:79:33:ff:00:
df:78:2d:40:22:ef:63:d5:52:30:bd:21:90:65:1b:
1d:e8:7c:f0:7f:ed:c8:87:55:9d:8e:dd:77:35:81:
54:93:ad:1c:5b:4f:fe:98:9e:be:7a:b9:4f:3c:8f:
85:94:a7:e4:93:74:90:6e:79:91:ca:2f:25:66:b3:
c4:99:f2:f6:da:c4:8f:5c:7a:95:4d:86:f1:66:c7:
47:f4:24:e0:6f:07:f8:4a:cf:04:d5:ab:d8:41:9e:
3a:88:ed:c4:0a:81:56:78:3c:41:40:10:ac:46:08:
57:2c:85:b8:a3:ee:81:ee:75:22:37:7c:31:25:22:
b8:0a:ed:e9:bb:ce:ae:81:7f:76:1c:98:50:d1:ca:
a1:72:bc:f2:df:50:65:1f:ee:3b:43:01:89:eb:56:
ef:2d:8f:71:5c:c8:11:03:32:54:d8:87:bf:16:38:
b1:05:48:66:f9:5d:3e:a7:d8:3c:84:05:5e:e1:a9:
55:1e:f9:d3:9a:8a:1e:f1:1f:26:27:42:af:ac:95:
fe:2f:d9:c1:7a:b0:49:df:5d:78:83:61:2b:aa:6f:
ae:3f:35:bb:29:0d:dc:4b:3c:27:14:1f:a7:84:20:
da:f2:a3:58:3a:e2:b7:7a:24:b5:a5:07:20:1c:dc:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:1B:1A:7F:54:97:AE:FF:22:18:4E:DA:E0:10:39:63:64:D9:60
X509v3 Authority Key Identifier:
keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b3:02:d7:48:db:2f:74:3c:cd:2c:f1:0a:0e:dc:74:9d:93:
27:83:0a:4f:c8:a1:8d:5b:9f:79:32:64:ea:9c:cf:8f:02:28:
3d:c5:f9:ba:5c:2e:40:95:85:4e:88:2b:8d:72:a6:0f:b7:a4:
a4:19:5a:cb:3f:32:1c:a5:0e:db:5b:79:77:24:14:ab:ce:ab:
2a:6a:26:4a:10:70:9f:86:d5:4b:d6:45:3c:a3:53:c1:2c:6c:
6b:c6:1d:fb:75:a9:29:3e:65:02:dc:da:f6:9f:dc:c1:a0:06:
b8:e3:b2:96:43:63:2f:76:cf:2b:dc:63:e9:23:c1:7d:b8:ad:
13:1a:8b:62:79:af:61:c4:07:3b:33:1e:94:29:f4:fa:95:36:
19:2b:a7:6f:75:40:2a:66:f5:a5:7b:35:1b:5c:f2:45:85:38:
b6:9c:6d:3c:e3:6a:d5:6e:fd:2f:dd:cb:64:be:77:1b:85:73:
e3:78:e7:a0:0a:78:c2:40:2c:9b:74:ec:84:2b:b0:47:7a:6d:
ff:b7:aa:40:1e:c7:9b:f5:8a:5c:f4:53:32:57:e9:ab:d6:a4:
fd:01:38:61:48:aa:4c:bf:86:28:91:8a:77:95:80:97:7d:00:
0d:e4:4c:28:94:66:b1:29:18:b2:9f:56:c2:3e:ed:c6:ae:11:
a1:d9:26:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VAWTrIYEjyYyyP87LdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MjdmNmQwMDYyYTk3NjZiZDU4ZjBkMDc1YzRmMGQxMDI1
N2U2MDYwHhcNMjUxMDE5MTUwMTIzWhcNMjUxMDIwMTUwMTIzWjAzMTEwLwYDVQQD
EygyNTFjMWIxYTdmNTQ5N2FlZmYyMjE4NGVkYWUwMTAzOTYzNjRkOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg3aBloIFzE+4nkz/wDfeC1AIu9j
1VIwvSGQZRsd6Hzwf+3Ih1Wdjt13NYFUk60cW0/+mJ6+erlPPI+FlKfkk3SQbnmR
yi8lZrPEmfL22sSPXHqVTYbxZsdH9CTgbwf4Ss8E1avYQZ46iO3ECoFWeDxBQBCs
RghXLIW4o+6B7nUiN3wxJSK4Cu3pu86ugX92HJhQ0cqhcrzy31BlH+47QwGJ61bv
LY9xXMgRAzJU2Ie/FjixBUhm+V0+p9g8hAVe4alVHvnTmooe8R8mJ0KvrJX+L9nB
erBJ3114g2Erqm+uPzW7KQ3cSzwnFB+nhCDa8qNYOuK3eiS1pQcgHNyTKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUcGxp/VJeu/yIYTtrgEDljZNlgMB8GA1UdIwQY
MBaAFHkn9tAGKpdmvVjw0HXE8NECV+YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWIt
YzVkMGNiN2I3ZGY1LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWItYzVkMGNiN2I3ZGY1
LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULMC10jb
L3Q8zSzxCg7cdJ2TJ4MKT8ihjVufeTJk6pzPjwIoPcX5ulwuQJWFTogrjXKmD7ek
pBlayz8yHKUO21t5dyQUq86rKmomShBwn4bVS9ZFPKNTwSxsa8Yd+3WpKT5lAtza
9p/cwaAGuOOylkNjL3bPK9xj6SPBfbitExqLYnmvYcQHOzMelCn0+pU2GSunb3VA
Kmb1pXs1G1zyRYU4tpxtPONq1W79L93LZL53G4Vz43jnoAp4wkAsm3TshCuwR3pt
/7eqQB7Hm/WKXPRTMlfpq9ak/QE4YUiqTL+GKJGKd5WAl30ADeRMKJRmsSkYsp9W
wj7txq4Rodkmxg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:40 2025 by rpki-client