Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
File: eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft (raw, json)
Hash identifier: vWOp3eMO4xy/0pdHR3b1aAy3VGa4JZd8ZtjklA200vs=
Subject key identifier: 20:A7:E8:BE:CD:CF:24:3B:54:80:88:16:E9:26:6B:75:91:35:9A:B3
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial: 0199FB7CF0F2264EE01E61D5CD78D7EA6F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
Manifest number: C8
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: FY7QWCuQ2yFMrpW5CuJdxAmkzSw.roa (hash: AB9HFdZnng1zkUR8S06NGbzzkAsazP428CDB2YNMgMs=)
2: SkLbl8YMptduMoSvRhFLVbTWkfg.roa (hash: rZ8+bmgPCyg6PTvkE0HDGH20U6oeO7+aQZ45eviGwsI=)
3: eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl (hash: ShTfse6KIDb9/BR80C+dKCLmWdmf5Gt3iVAAp2ChECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f0:f2:26:4e:e0:1e:61:d5:cd:78:d7:ea:6f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=20a7e8becdcf243b54808816e9266b7591359ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:fe:a3:8e:a6:d8:5c:df:d9:9b:1a:a1:da:
31:14:e8:c9:90:d4:b0:f5:81:b3:bf:84:67:b7:1e:
ab:e0:1c:36:d7:75:d1:b9:81:5a:19:de:50:29:51:
36:fc:26:b6:5e:75:95:83:9e:29:40:ce:20:d3:b3:
74:73:67:01:67:90:f7:7e:31:6e:14:fe:e1:89:e0:
00:cf:d9:a9:91:73:96:0c:3c:87:df:be:2b:dd:7d:
9d:40:70:14:77:a0:13:03:06:0b:f2:a1:d8:01:21:
45:85:37:fa:74:47:00:09:41:5e:ff:ac:97:15:92:
0b:0f:9d:5c:d4:00:79:69:ec:9c:ed:43:86:9c:83:
5b:26:ac:ca:20:91:43:db:b5:67:8d:16:99:32:6a:
20:b4:cc:fd:0a:a4:27:c8:4d:61:d8:53:52:59:c9:
52:45:5a:8a:e8:a0:b4:75:7f:8c:96:fc:8a:81:c2:
26:ca:80:fa:82:b1:86:55:27:70:e7:84:1c:a6:ef:
e3:0b:52:16:bc:7a:83:93:37:a1:ee:28:ed:c6:b5:
34:26:a5:87:ff:14:d1:0e:4a:29:78:81:e3:bf:9b:
80:d3:b5:17:48:dc:6b:29:e0:c8:2d:a5:63:ab:e4:
ad:bd:49:1b:8b:da:2e:b7:65:9b:99:7a:d7:fe:f4:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A7:E8:BE:CD:CF:24:3B:54:80:88:16:E9:26:6B:75:91:35:9A:B3
X509v3 Authority Key Identifier:
keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:68:4a:e6:d4:23:85:f5:90:6e:c1:7d:76:c7:d2:48:c7:23:
a3:08:1e:98:d0:5e:51:d2:bb:da:64:76:a6:2b:b4:29:2b:fe:
37:78:4d:b6:c4:f2:b4:a5:ed:3a:ea:61:64:5d:64:57:b7:5f:
d2:4b:2b:0d:f7:93:56:d6:2e:09:ed:cc:5c:49:64:2e:23:f2:
53:76:59:c9:6c:08:b0:29:54:0e:45:df:98:f2:28:2c:4e:fa:
1b:ad:9e:a5:df:ab:e2:1d:a6:41:6e:49:f8:c3:81:92:e4:77:
0a:57:44:9e:53:99:f4:4c:78:59:8f:17:9d:19:8a:4d:12:6f:
4a:43:69:55:1c:13:5c:07:9e:95:7c:d7:34:52:cd:8d:0d:7a:
b9:8b:0f:09:aa:47:44:4b:4b:4a:ce:7c:5e:f0:28:12:b6:c3:
e8:c6:61:0d:f2:01:4d:01:d7:a3:61:4a:b5:55:40:b9:4d:3f:
26:3d:55:73:51:8e:16:61:dd:75:ce:3e:da:3a:03:50:49:b8:
21:fa:5b:0b:7d:70:ff:cc:1e:88:b1:eb:85:c1:d9:d8:ad:ad:
b4:85:75:83:e5:d6:4e:e6:79:74:ad:02:b3:d3:13:53:a8:42:
b9:ad:f9:e5:54:86:5e:fb:b4:75:6a:30:e3:e5:0d:5e:79:e5:
1d:f4:85:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPDyJk7gHmHVzXjX6m9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZTk4ZGVlOWFhZGM4NmI0ZGZhOWUxNjhkOTIxYmQ4MGJh
M2YzYTYwHhcNMjUxMDE5MDgwMTMzWhcNMjUxMDIwMDgwMTMzWjAzMTEwLwYDVQQD
EygyMGE3ZThiZWNkY2YyNDNiNTQ4MDg4MTZlOTI2NmI3NTkxMzU5YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08v+o46m2Fzf2ZsaodoxFOjJkNSw
9YGzv4Rntx6r4Bw213XRuYFaGd5QKVE2/Ca2XnWVg54pQM4g07N0c2cBZ5D3fjFu
FP7hieAAz9mpkXOWDDyH374r3X2dQHAUd6ATAwYL8qHYASFFhTf6dEcACUFe/6yX
FZILD51c1AB5aeyc7UOGnINbJqzKIJFD27VnjRaZMmogtMz9CqQnyE1h2FNSWclS
RVqK6KC0dX+MlvyKgcImyoD6grGGVSdw54Qcpu/jC1IWvHqDkzeh7ijtxrU0JqWH
/xTRDkopeIHjv5uA07UXSNxrKeDILaVjq+StvUkbi9out2WbmXrX/vSF/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCn6L7NzyQ7VICIFukma3WRNZqzMB8GA1UdIwQY
MBaAFHjpje6archrTfqeFo2SG9gLo/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMt
NWM3MTk1NmE1Mzc3LzEvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMtNWM3MTk1NmE1Mzc3
LzEvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWhK5tQj
hfWQbsF9dsfSSMcjowgemNBeUdK72mR2piu0KSv+N3hNtsTytKXtOuphZF1kV7df
0ksrDfeTVtYuCe3MXElkLiPyU3ZZyWwIsClUDkXfmPIoLE76G62epd+r4h2mQW5J
+MOBkuR3CldEnlOZ9Ex4WY8XnRmKTRJvSkNpVRwTXAeelXzXNFLNjQ16uYsPCapH
REtLSs58XvAoErbD6MZhDfIBTQHXo2FKtVVAuU0/Jj1Vc1GOFmHddc4+2joDUEm4
IfpbC31w/8weiLHrhcHZ2K2ttIV1g+XWTuZ5dK0Cs9MTU6hCua355VSGXvu0dWow
4+UNXnnlHfSFbw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client