Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier: DdtVmBz6M9ASUXN+rutfHhmfzKN7en4laQX9uhb6PV8=
Subject key identifier: 99:F7:E5:BD:F0:43:C6:9C:8C:FA:57:55:1A:E0:2C:7C:EE:26:63:1C
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer: /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial: 0199FCC606174CFD5815DBC658B3BE16BBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number: 0DCA
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: HcGcoVX21qlPjVIK7q9DYNM75CkGNd3bHq4pgt+vpzs=)
2: FNssP3Vnl359dcbgHZkufRV_lXA.roa (hash: JifcLzI/Tl7E2mLCjrs1dQqQn1Db6poPn/8XtbADxCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:06:17:4c:fd:58:15:db:c6:58:b3:be:16:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=99f7e5bdf043c69c8cfa57551ae02c7cee26631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:d1:be:af:31:52:d6:8b:28:d0:d4:68:3a:
55:5e:22:ee:bc:5c:05:64:3a:3a:b9:af:be:4c:02:
d5:93:f7:36:1d:f5:27:32:86:56:d0:a5:7c:27:52:
01:36:96:3b:64:a8:08:53:1d:01:b4:65:96:f6:b2:
34:b5:e6:b6:4c:2d:74:76:82:0b:e0:fc:c5:39:f0:
e4:b3:e4:fe:a9:ae:ba:72:96:9a:16:ad:02:a6:31:
b8:67:02:43:8f:07:f9:fc:de:94:63:89:21:f4:75:
4e:68:b4:02:4e:ac:81:51:3b:14:5c:db:25:ad:d5:
65:cf:65:d1:f1:53:55:be:93:ef:e9:54:19:dc:79:
3e:bd:df:d2:4d:03:d4:41:26:04:9b:ab:fb:78:8e:
cd:41:2b:df:36:6d:53:d3:ed:25:d9:ac:2e:00:d8:
59:c6:bb:5a:0e:c2:44:2f:6f:d4:50:63:f9:22:73:
06:0e:b8:d2:80:9f:a7:85:a7:62:49:fe:ee:36:ba:
5b:ac:0c:60:7a:68:b4:1b:80:50:92:9a:56:36:29:
8b:79:8f:2d:87:be:70:ec:a2:59:2c:54:41:2d:19:
da:90:d4:c7:38:b4:83:a5:ec:54:94:8b:92:a4:fe:
cc:37:60:9a:92:ab:c1:e9:73:a0:f4:83:bf:2c:65:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:E5:BD:F0:43:C6:9C:8C:FA:57:55:1A:E0:2C:7C:EE:26:63:1C
X509v3 Authority Key Identifier:
keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e4:22:e7:e9:d1:3c:63:29:be:98:86:0a:ca:97:b1:1a:20:
f9:1c:2a:d1:d8:0e:70:1b:8e:e5:05:91:c1:09:f4:d0:40:cc:
37:af:66:a9:dc:6b:fa:37:a6:03:fe:ae:a5:ee:ce:61:c8:57:
28:22:c4:36:ef:f0:22:b5:df:52:b1:5c:1f:69:c4:93:e1:23:
73:67:86:c4:2d:51:34:23:4d:e2:a6:81:98:11:a7:4e:b9:1a:
51:93:4d:cc:6f:0c:2a:ff:f4:dc:d9:a8:bd:b6:34:63:ab:3c:
83:bd:d5:d1:ae:46:a1:9e:f1:e5:e1:32:59:31:a9:d8:39:71:
d4:04:dc:38:b9:99:9d:66:20:68:d4:5a:fb:87:b0:2b:49:b2:
78:7e:a9:64:4c:b7:10:34:a6:44:9c:92:b4:85:75:3e:ed:a2:
ba:d8:ed:3f:e8:1c:ba:0e:e1:14:a0:d8:0c:0d:c0:fa:09:8d:
34:b7:b3:82:cc:7a:c1:d8:bc:f7:86:18:1f:9a:75:dc:53:69:
51:5c:0e:37:47:fe:a5:49:d0:f5:71:61:c3:eb:f4:9e:2c:05:
44:de:9e:cd:27:ca:45:1b:4b:cd:61:9b:8d:4d:23:19:d8:5c:
0a:25:6d:02:c4:b9:99:b2:1d:5f:56:10:a3:d2:6d:d1:73:10:
8d:a6:5e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xgYXTP1YFdvGWLO+Frv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx
NWUyNTYwHhcNMjUxMDE5MTQwMTAwWhcNMjUxMDIwMTQwMTAwWjAzMTEwLwYDVQQD
Eyg5OWY3ZTViZGYwNDNjNjljOGNmYTU3NTUxYWUwMmM3Y2VlMjY2MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztzRvq8xUtaLKNDUaDpVXiLuvFwF
ZDo6ua++TALVk/c2HfUnMoZW0KV8J1IBNpY7ZKgIUx0BtGWW9rI0tea2TC10doIL
4PzFOfDks+T+qa66cpaaFq0CpjG4ZwJDjwf5/N6UY4kh9HVOaLQCTqyBUTsUXNsl
rdVlz2XR8VNVvpPv6VQZ3Hk+vd/STQPUQSYEm6v7eI7NQSvfNm1T0+0l2awuANhZ
xrtaDsJEL2/UUGP5InMGDrjSgJ+nhadiSf7uNrpbrAxgemi0G4BQkppWNimLeY8t
h75w7KJZLFRBLRnakNTHOLSDpexUlIuSpP7MN2CakqvB6XOg9IO/LGX09wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn35b3wQ8acjPpXVRrgLHzuJmMcMB8GA1UdIwQY
MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt
YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm
LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOQi5+nR
PGMpvpiGCsqXsRog+Rwq0dgOcBuO5QWRwQn00EDMN69mqdxr+jemA/6upe7OYchX
KCLENu/wIrXfUrFcH2nEk+Ejc2eGxC1RNCNN4qaBmBGnTrkaUZNNzG8MKv/03Nmo
vbY0Y6s8g73V0a5GoZ7x5eEyWTGp2Dlx1ATcOLmZnWYgaNRa+4ewK0myeH6pZEy3
EDSmRJyStIV1Pu2iutjtP+gcug7hFKDYDA3A+gmNNLezgsx6wdi894YYH5p13FNp
UVwON0f+pUnQ9XFhw+v0niwFRN6ezSfKRRtLzWGbjU0jGdhcCiVtAsS5mbIdX1YQ
o9Jt0XMQjaZeeA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:28 2025 by rpki-client