Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: eskn5hYRi4tXNRhQ7rvawxhCz2Y/O9Vf7Zwqfbs1TXA=
Subject key identifier: 6F:FC:4F:AE:A5:D3:B4:5F:F6:0D:F2:59:0A:24:96:0F:DB:A0:A0:C7
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 019A0259CD09D6B69E25448ED61EBAACB970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 0FE4
Signing time: Mon 20 Oct 2025 16:00:30 +0000
Manifest this update: Mon 20 Oct 2025 16:00:30 +0000
Manifest next update: Tue 21 Oct 2025 16:00:30 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: jA16YfdCD11p7gBG+Llz9y4TGHflmu8SjSYB7x+vxi4=)
2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:cd:09:d6:b6:9e:25:44:8e:d6:1e:ba:ac:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Oct 20 16:00:30 2025 GMT
Not After : Oct 21 16:00:30 2025 GMT
Subject: CN=6ffc4faea5d3b45ff60df2590a24960fdba0a0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:f9:cc:aa:ad:55:79:e1:ca:9e:7f:e2:0e:
e7:96:e8:32:7d:41:0c:bc:5e:a0:02:26:51:da:d8:
19:84:a2:27:68:57:90:68:c2:d1:d3:b4:36:5a:fb:
73:71:42:c0:a0:ef:1c:46:c6:ec:64:b4:20:5b:55:
ce:ff:62:09:28:5d:91:e1:c2:ca:fe:19:83:97:31:
cd:66:99:3d:9a:2b:71:df:b9:da:61:73:91:d3:82:
bc:77:6e:c7:bc:79:ff:4f:52:f8:6d:7c:04:3c:8f:
62:15:4c:cf:e5:b5:f5:fc:a8:57:a1:bc:12:70:6a:
34:64:f7:08:e7:d0:39:a8:48:14:28:3e:45:b9:f0:
c8:24:dd:90:06:67:d8:cc:bb:13:8d:ab:6f:70:17:
e2:00:9a:be:4a:fe:5c:9e:7a:d7:c3:5c:ad:88:e7:
2b:a1:cf:9a:c2:f5:b4:63:1e:2e:4d:5a:84:f6:28:
38:52:63:4b:c0:16:3e:fc:ac:73:a2:06:83:9e:1b:
56:d8:74:5c:0f:04:d8:fd:af:84:48:20:1c:91:22:
19:31:e9:bf:cc:c6:7b:9a:17:7c:9b:86:f0:c1:b0:
f6:f8:2b:3e:8b:ca:b6:3f:d0:08:07:9f:fd:12:bf:
36:70:9b:44:22:f8:34:6f:15:51:e2:7d:4c:e8:df:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:4F:AE:A5:D3:B4:5F:F6:0D:F2:59:0A:24:96:0F:DB:A0:A0:C7
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:0a:ff:69:e3:97:2b:85:68:68:e5:2e:ff:50:2a:16:09:
50:74:7c:5b:50:11:0c:e7:9e:fe:15:0c:0c:e5:5f:c6:97:87:
b2:44:e1:f1:d5:d1:23:74:d1:bf:f9:5d:be:05:b9:ad:58:eb:
b0:30:61:29:33:9e:8e:bb:79:3e:32:42:ba:45:b3:84:40:0d:
70:0b:17:44:9b:98:0f:a4:11:e1:32:bd:3b:5a:2a:e6:49:b8:
58:00:0c:d2:ba:94:4d:a2:68:e2:a9:ce:cc:ca:1b:f9:73:64:
83:4a:5c:fd:dc:8f:93:0c:7b:ad:fa:15:b6:b1:27:00:cd:0f:
32:ec:70:e4:be:13:35:59:a5:7c:b3:b7:1a:08:1e:7e:f6:12:
86:ab:4a:9e:1f:63:82:c3:fe:41:98:ac:e6:d8:c5:59:b8:8c:
f8:46:3b:b4:b4:b3:c9:51:d9:48:52:d3:89:45:40:31:ee:90:
7a:12:8f:42:23:6a:56:da:c0:11:67:36:c8:0e:98:eb:26:9b:
6c:a2:fa:ab:8f:1b:b7:90:55:b9:27:2c:cf:52:ca:8b:bf:b4:
2d:a9:42:33:61:24:06:7a:b5:b9:67:09:87:3d:90:94:39:2c:
fb:ac:c3:6c:c9:af:06:e2:a9:48:78:3d:73:24:94:ab:fc:1c:
e1:a1:7b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWc0J1raeJUSO1h66rLlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTVhZjRjNzI4NjkyMDk1MzliMTE5NDU5N2IwM2ZhM2E0
YTU1NGEwHhcNMjUxMDIwMTYwMDMwWhcNMjUxMDIxMTYwMDMwWjAzMTEwLwYDVQQD
Eyg2ZmZjNGZhZWE1ZDNiNDVmZjYwZGYyNTkwYTI0OTYwZmRiYTBhMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBb5zKqtVXnhyp5/4g7nlugyfUEM
vF6gAiZR2tgZhKInaFeQaMLR07Q2WvtzcULAoO8cRsbsZLQgW1XO/2IJKF2R4cLK
/hmDlzHNZpk9mitx37naYXOR04K8d27HvHn/T1L4bXwEPI9iFUzP5bX1/KhXobwS
cGo0ZPcI59A5qEgUKD5FufDIJN2QBmfYzLsTjatvcBfiAJq+Sv5cnnrXw1ytiOcr
oc+awvW0Yx4uTVqE9ig4UmNLwBY+/KxzogaDnhtW2HRcDwTY/a+ESCAckSIZMem/
zMZ7mhd8m4bwwbD2+Cs+i8q2P9AIB5/9Er82cJtEIvg0bxVR4n1M6N8uBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/8T66l07Rf9g3yWQoklg/boKDHMB8GA1UdIwQY
MBaAFBHlr0xyhpIJU5sRlFl7A/o6SlVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEt
ZjQyOGI5OTU0YWIyLzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEtZjQyOGI5OTU0YWIy
LzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoEK/2nj
lyuFaGjlLv9QKhYJUHR8W1ARDOee/hUMDOVfxpeHskTh8dXRI3TRv/ldvgW5rVjr
sDBhKTOejrt5PjJCukWzhEANcAsXRJuYD6QR4TK9O1oq5km4WAAM0rqUTaJo4qnO
zMob+XNkg0pc/dyPkwx7rfoVtrEnAM0PMuxw5L4TNVmlfLO3GggefvYShqtKnh9j
gsP+QZis5tjFWbiM+EY7tLSzyVHZSFLTiUVAMe6QehKPQiNqVtrAEWc2yA6Y6yab
bKL6q48bt5BVuScsz1LKi7+0LalCM2EkBnq1uWcJhz2QlDks+6zDbMmvBuKpSHg9
cySUq/wc4aF7yA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:31:11 2025 by rpki-client