Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json)
Hash identifier: hmFUZvAcLOO6XF4fHbML+TMp2F1XVCxLS5DjvpPEkP8=
Subject key identifier: C0:F2:5C:1F:CA:EE:AF:AA:FB:28:7D:9A:61:E9:C6:A0:A5:69:42:4A
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 0199FB7C9A13F37CE4D9E1E00101BEC7986A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
Manifest number: 0CF6
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=)
2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: A0EWz484mYtN2yaizYMkYNMjtUIxFowyeYdCdZFUg/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9a:13:f3:7c:e4:d9:e1:e0:01:01:be:c7:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=c0f25c1fcaeeafaafb287d9a61e9c6a0a569424a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:35:9e:71:33:bf:db:74:88:b5:f2:32:8d:
3b:b8:5e:df:5d:cb:6c:22:1f:9f:d7:9c:43:0f:51:
2d:3b:ce:4a:94:16:d0:c0:a6:c0:44:c0:0e:49:fc:
d2:91:1e:5c:01:5b:14:2b:af:ef:5b:df:9f:a4:34:
39:8a:95:b2:2b:62:c5:57:98:a0:f9:da:3f:da:52:
fc:db:a2:56:dc:d0:52:e9:f1:53:35:da:1e:21:36:
31:4a:dc:64:73:be:a2:22:62:f6:51:ad:20:d7:09:
8f:61:a1:22:25:27:1c:c2:dc:84:7b:29:83:41:b7:
5e:44:45:da:b4:03:94:cb:05:44:d0:6d:f5:fb:58:
07:11:d5:56:65:1a:24:51:eb:ae:bf:54:e5:5f:01:
96:80:05:54:72:9e:14:a3:9d:bf:94:6e:60:f4:08:
fb:3d:8e:eb:2c:10:92:22:0b:52:b2:ed:39:3f:05:
72:9a:d3:5b:5c:4f:8a:6d:85:09:15:44:43:a1:08:
56:86:92:14:29:fd:1b:45:b8:10:5a:07:14:4e:25:
b9:7c:3c:ff:c2:da:78:fc:7a:16:52:b0:e6:41:b0:
ba:ee:cc:0e:d3:7b:e7:8e:90:c3:d8:bb:93:61:50:
6c:34:63:63:dc:69:2f:02:94:4c:68:fc:f4:89:a1:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:5C:1F:CA:EE:AF:AA:FB:28:7D:9A:61:E9:C6:A0:A5:69:42:4A
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:bb:b9:c4:b9:d7:fd:49:18:87:29:ca:08:2b:31:24:f8:
b8:33:35:85:2b:cd:d3:91:d6:90:01:45:dc:b3:65:ea:6a:ca:
56:82:54:78:ed:36:fd:bb:12:1f:d4:c3:df:6f:1f:56:61:1e:
92:52:6e:59:37:a8:a7:41:8e:3b:08:fe:bd:72:4e:24:4c:c5:
02:7f:8c:24:f3:45:6b:7e:66:b6:ba:47:95:eb:70:25:96:54:
e9:56:85:e5:0b:e0:20:6d:ad:7e:20:bc:b0:5e:e4:15:97:8e:
1a:5e:ed:73:78:84:b9:e6:1a:62:74:15:aa:03:90:72:68:37:
59:02:72:85:da:be:a0:d0:2f:8b:7a:74:24:82:07:cd:47:19:
65:de:78:f2:ac:a9:42:e2:b9:0d:7b:74:ae:ed:60:bc:17:43:
32:55:cb:ff:9a:c5:20:48:38:cd:55:18:84:0f:b1:58:93:e8:
1e:56:f5:0e:07:19:62:86:5a:bd:94:62:1b:0d:3a:a8:02:d9:
f9:97:1f:0f:35:b1:47:a0:e7:73:02:e1:5c:2a:4b:de:d2:27:
d8:bf:fd:3f:a3:2b:d2:7b:15:83:0a:95:6e:97:be:2f:54:6c:
a0:77:31:92:45:da:d4:89:81:66:42:79:fa:a1:44:c2:e2:43:
dd:dd:08:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJoT83zk2eHgAQG+x5hqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MjMyNTMyMWEzMDJmMGJhYzEzMWJlZTExYzlhZWE2OTZl
NTEwYmEwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
EyhjMGYyNWMxZmNhZWVhZmFhZmIyODdkOWE2MWU5YzZhMGE1Njk0MjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQg1nnEzv9t0iLXyMo07uF7fXcts
Ih+f15xDD1EtO85KlBbQwKbARMAOSfzSkR5cAVsUK6/vW9+fpDQ5ipWyK2LFV5ig
+do/2lL826JW3NBS6fFTNdoeITYxStxkc76iImL2Ua0g1wmPYaEiJSccwtyEeymD
QbdeREXatAOUywVE0G31+1gHEdVWZRokUeuuv1TlXwGWgAVUcp4Uo52/lG5g9Aj7
PY7rLBCSIgtSsu05PwVymtNbXE+KbYUJFURDoQhWhpIUKf0bRbgQWgcUTiW5fDz/
wtp4/HoWUrDmQbC67swO03vnjpDD2LuTYVBsNGNj3GkvApRMaPz0iaHGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDyXB/K7q+q+yh9mmHpxqClaUJKMB8GA1UdIwQY
MBaAFHgjJTIaMC8LrBMb7hHJrqaW5RC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzU2NDItMTcyYi00MmMxLWExZDEt
ZDI1NDY2YTFmYTlmLzEvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jNzU2NDItMTcyYi00MmMxLWExZDEtZDI1NDY2YTFmYTlm
LzEvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUe7ucS5
1/1JGIcpyggrMST4uDM1hSvN05HWkAFF3LNl6mrKVoJUeO02/bsSH9TD328fVmEe
klJuWTeop0GOOwj+vXJOJEzFAn+MJPNFa35mtrpHletwJZZU6VaF5QvgIG2tfiC8
sF7kFZeOGl7tc3iEueYaYnQVqgOQcmg3WQJyhdq+oNAvi3p0JIIHzUcZZd548qyp
QuK5DXt0ru1gvBdDMlXL/5rFIEg4zVUYhA+xWJPoHlb1DgcZYoZavZRiGw06qALZ
+ZcfDzWxR6DncwLhXCpL3tIn2L/9P6Mr0nsVgwqVbpe+L1RsoHcxkkXa1ImBZkJ5
+qFEwuJD3d0I3g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:45 2025 by rpki-client