Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
File: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft (raw, json)
Hash identifier: kJcpy9Y4xWZcYwMFMAk9SVDKg76LaMv1qliG9u976nM=
Subject key identifier: 5E:AB:27:F8:67:A3:1C:6D:B8:CF:EA:49:CA:96:21:EE:BB:D2:97:6B
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Certificate issuer: /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial: 0199FEEC160DBA80378A3D2C571DB51D601F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
Manifest number: 0837
Signing time: Mon 20 Oct 2025 00:01:48 +0000
Manifest this update: Mon 20 Oct 2025 00:01:48 +0000
Manifest next update: Tue 21 Oct 2025 00:01:48 +0000
Files and hashes: 1: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl (hash: 1jdpJ1Op9pw0eqwDyERN96SzqLLVDDItYxjaBGiOgy8=)
2: mJE_Ax4JDpdyNPeWFMSVsXGju14.roa (hash: t5TGMLR0+nDNKqcsV3Ft/NZxzvRzL5m7zfzdz2TzA60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:16:0d:ba:80:37:8a:3d:2c:57:1d:b5:1d:60:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Validity
Not Before: Oct 20 00:01:48 2025 GMT
Not After : Oct 21 00:01:48 2025 GMT
Subject: CN=5eab27f867a31c6db8cfea49ca9621eebbd2976b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:c4:f2:d7:09:e6:8e:3c:3c:7d:a5:03:19:
0e:18:f0:36:4c:d7:82:1d:9a:59:ce:64:d9:b4:eb:
fa:56:83:4c:e1:b5:b0:d0:7f:33:cc:ae:9a:b7:5d:
00:b7:25:2e:13:38:06:b4:2d:44:34:c6:e1:0d:44:
ac:2e:b9:9e:4c:bb:06:14:21:53:07:0a:23:bc:b0:
75:f5:e8:0e:3e:28:61:8a:2a:3f:01:2c:cf:d5:a4:
7d:1e:61:06:7d:f8:16:29:9f:0f:86:c5:c3:4e:e6:
53:df:d7:22:07:41:80:b9:a4:21:db:74:fc:68:c4:
46:28:16:94:8b:ac:37:84:1b:65:e4:9d:dd:e0:3d:
e5:a6:46:ff:b7:d8:fe:53:76:50:14:dd:f7:b9:c2:
34:a5:5a:55:eb:32:01:0f:2c:03:cf:d5:ad:b9:a7:
16:94:c1:0e:fd:c5:e5:40:04:14:ac:2b:de:a4:d3:
9e:b5:f8:b6:cd:24:ef:71:29:93:a9:b4:de:65:8c:
5c:78:cd:78:15:c6:19:a8:c3:c9:97:7d:2f:40:2b:
35:a6:6d:b1:22:a1:8c:f5:05:14:5f:6b:5a:3f:33:
29:53:a5:9c:d9:fd:29:8e:85:60:c9:c6:c9:9c:0f:
59:bb:43:35:cd:89:78:ed:78:87:70:ea:8a:f4:51:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AB:27:F8:67:A3:1C:6D:B8:CF:EA:49:CA:96:21:EE:BB:D2:97:6B
X509v3 Authority Key Identifier:
keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6f:70:38:2f:ed:62:b7:13:7a:51:1f:4f:ac:11:0b:da:90:
a6:ce:e8:9c:f3:68:fb:dc:b1:07:03:53:a3:9e:96:c1:f6:6e:
3a:b1:c3:44:d2:34:32:af:97:3d:51:b3:6b:10:88:81:e6:81:
d7:a5:11:eb:b8:82:53:35:0d:b2:48:cc:71:a9:70:c4:e6:b3:
fe:7d:e4:5c:e1:40:b0:df:73:9d:24:07:9f:7f:44:2f:3d:9c:
03:1a:35:1a:34:40:6f:59:78:b6:d4:44:dc:6f:85:a7:6c:b7:
bc:ac:5c:5d:e0:c9:a2:70:3c:a6:07:d9:18:1e:c3:2e:bd:ac:
b2:4e:bd:4e:db:a3:62:28:b9:48:4a:01:a9:45:55:19:05:83:
37:f3:56:81:07:f9:8d:72:af:78:6e:df:02:bb:62:42:fb:90:
60:06:8c:5c:ba:68:2b:0c:77:65:31:30:74:68:9c:a6:1f:d5:
be:10:e8:a7:e6:70:ac:1f:11:b4:f9:44:c1:1a:a4:3d:a4:9a:
28:85:c3:57:1e:41:61:a6:4e:db:47:ee:2f:58:b2:73:fa:4e:
38:13:19:d3:fd:38:e8:15:10:f3:44:78:39:59:8b:f6:bd:f8:
e9:12:97:25:f0:b7:e5:3d:b7:0b:14:d3:27:ea:de:e9:73:ae:
be:af:58:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+7BYNuoA3ij0sVx21HWAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZTM3NmM4ZTQ5MGQyODYyMGMyNGY5N2UyYjkzM2Q2MmZk
MDIzOGIwHhcNMjUxMDIwMDAwMTQ4WhcNMjUxMDIxMDAwMTQ4WjAzMTEwLwYDVQQD
Eyg1ZWFiMjdmODY3YTMxYzZkYjhjZmVhNDljYTk2MjFlZWJiZDI5NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUrE8tcJ5o48PH2lAxkOGPA2TNeC
HZpZzmTZtOv6VoNM4bWw0H8zzK6at10AtyUuEzgGtC1ENMbhDUSsLrmeTLsGFCFT
BwojvLB19egOPihhiio/ASzP1aR9HmEGffgWKZ8PhsXDTuZT39ciB0GAuaQh23T8
aMRGKBaUi6w3hBtl5J3d4D3lpkb/t9j+U3ZQFN33ucI0pVpV6zIBDywDz9WtuacW
lMEO/cXlQAQUrCvepNOetfi2zSTvcSmTqbTeZYxceM14FcYZqMPJl30vQCs1pm2x
IqGM9QUUX2taPzMpU6Wc2f0pjoVgycbJnA9Zu0M1zYl47XiHcOqK9FENQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6rJ/hnoxxtuM/qScqWIe670pdrMB8GA1UdIwQY
MBaAFHnjdsjkkNKGIMJPl+K5M9Yv0COLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWVOMnlPU1Ewb1lnd2stWDRya3oxaV9RSTRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOGI4NWEtZjM3NS00NzcxLWFmM2Qt
MTI1ZTFlMWYxNTliLzEvZWVOMnlPU1Ewb1lnd2stWDRya3oxaV9RSTRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOGI4NWEtZjM3NS00NzcxLWFmM2QtMTI1ZTFlMWYxNTli
LzEvZWVOMnlPU1Ewb1lnd2stWDRya3oxaV9RSTRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF29wOC/t
YrcTelEfT6wRC9qQps7onPNo+9yxBwNTo56WwfZuOrHDRNI0Mq+XPVGzaxCIgeaB
16UR67iCUzUNskjMcalwxOaz/n3kXOFAsN9znSQHn39ELz2cAxo1GjRAb1l4ttRE
3G+Fp2y3vKxcXeDJonA8pgfZGB7DLr2ssk69TtujYii5SEoBqUVVGQWDN/NWgQf5
jXKveG7fArtiQvuQYAaMXLpoKwx3ZTEwdGicph/VvhDop+ZwrB8RtPlEwRqkPaSa
KIXDVx5BYaZO20fuL1iyc/pOOBMZ0/046BUQ80R4OVmL9r346RKXJfC35T23CxTT
J+re6XOuvq9Ytw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:49 2025 by rpki-client