Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: TlmE4KG0BLlGGooHJYu6jVaXodn6b/QbjXWVam3OszM=
Subject key identifier: BA:67:DC:DB:A9:B5:C6:F0:4C:37:46:9E:56:A8:51:47:E2:46:B4:87
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 0199FBEADBD7310CEC0E99136614121532DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: GoqOdveHcNroy03UAgT9PCayujYiwufP1oDYlTHSlNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:db:d7:31:0c:ec:0e:99:13:66:14:12:15:32:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=ba67dcdba9b5c6f04c37469e56a85147e246b487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:77:64:f3:fd:7f:02:e3:94:19:bc:48:6d:
57:d7:4f:88:fd:ed:2d:45:15:8d:1b:dc:00:13:a5:
e1:1d:4c:03:49:6c:49:47:10:e9:ae:f5:32:8d:75:
4f:11:5d:3b:ff:13:a4:17:d2:fb:2c:37:0f:ed:f9:
ac:f8:ab:cc:8c:9c:45:10:36:23:5b:d6:20:46:f1:
f4:66:cb:bb:3b:45:5c:36:19:72:05:ad:96:e5:58:
f6:b0:de:62:14:b0:d1:ec:ff:16:9a:cc:d0:5e:8d:
c0:0e:2c:85:b9:cf:45:ca:3b:0d:91:09:2f:75:dd:
7e:e2:36:90:f3:7a:de:5f:3a:54:93:9f:f8:e5:8e:
d9:95:d2:59:14:4d:d3:2b:2c:c9:c0:ff:2f:69:1c:
04:f5:c1:bd:67:e1:c7:0b:92:bf:25:23:c1:9d:f5:
0d:3c:dc:b9:f2:93:28:da:6a:ee:cc:99:0f:11:fd:
7d:aa:3d:c7:8b:6f:9f:97:f9:eb:eb:93:23:b8:3d:
61:d3:29:27:b2:bf:86:ec:d0:c9:a6:bd:d1:f4:0e:
1a:5d:15:d3:2c:f2:17:27:f6:af:fe:f3:ac:cf:2c:
de:8b:8e:52:47:69:76:d3:2e:da:a7:6e:2d:4c:47:
c6:9b:52:45:49:c7:22:59:b6:37:0c:5a:0f:03:a8:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:67:DC:DB:A9:B5:C6:F0:4C:37:46:9E:56:A8:51:47:E2:46:B4:87
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f7:83:4e:c5:e7:ae:9c:94:97:ed:10:96:88:3d:b1:13:1f:
32:87:a4:20:2f:f1:e3:c6:5c:60:24:68:85:4e:16:2c:4d:e7:
62:b6:60:0a:7c:e7:ce:31:df:1e:f2:e5:4e:70:33:e3:7a:d8:
a4:da:d2:da:93:9b:e9:3b:00:cb:c4:39:eb:3c:c8:c6:ed:93:
c6:bd:7d:55:5c:6e:85:92:6c:06:12:96:03:f5:41:b0:7f:dd:
06:ea:c7:ef:56:51:8f:60:80:de:e1:72:f4:ca:23:09:17:75:
81:f9:36:cf:fa:a5:94:65:2a:4e:7b:ef:fa:bd:e2:d1:1e:fa:
2d:83:51:b5:82:b5:a2:8d:ac:b8:bb:97:ba:b8:d1:34:2f:8c:
6a:d8:3a:25:f1:db:f9:ef:d1:54:97:0a:68:bd:88:4e:42:66:
77:9d:8a:73:c0:d2:d5:04:3b:cc:d2:31:ce:f8:35:db:3d:09:
bc:2e:fc:d4:4d:77:69:3d:35:5b:5b:ad:fc:fb:7e:46:8b:56:
6b:3c:fb:7b:86:56:02:45:a9:29:d0:2e:d3:50:7f:80:9d:2a:
69:58:76:4b:e2:30:4a:07:07:aa:c5:82:9f:ea:b7:0c:9c:c2:
70:02:60:14:6a:82:61:8a:2f:83:db:0b:8c:cc:7b:4e:09:2e:
b1:44:a2:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tvXMQzsDpkTZhQSFTLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl
MmE5MWYwHhcNMjUxMDE5MTAwMTM2WhcNMjUxMDIwMTAwMTM2WjAzMTEwLwYDVQQD
EyhiYTY3ZGNkYmE5YjVjNmYwNGMzNzQ2OWU1NmE4NTE0N2UyNDZiNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzt3ZPP9fwLjlBm8SG1X10+I/e0t
RRWNG9wAE6XhHUwDSWxJRxDprvUyjXVPEV07/xOkF9L7LDcP7fms+KvMjJxFEDYj
W9YgRvH0Zsu7O0VcNhlyBa2W5Vj2sN5iFLDR7P8WmszQXo3ADiyFuc9FyjsNkQkv
dd1+4jaQ83reXzpUk5/45Y7ZldJZFE3TKyzJwP8vaRwE9cG9Z+HHC5K/JSPBnfUN
PNy58pMo2mruzJkPEf19qj3Hi2+fl/nr65MjuD1h0yknsr+G7NDJpr3R9A4aXRXT
LPIXJ/av/vOszyzei45SR2l20y7ap24tTEfGm1JFScciWbY3DFoPA6hiCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpn3NuptcbwTDdGnlaoUUfiRrSHMB8GA1UdIwQY
MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt
NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm
LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfeDTsXn
rpyUl+0Qlog9sRMfMoekIC/x48ZcYCRohU4WLE3nYrZgCnznzjHfHvLlTnAz43rY
pNrS2pOb6TsAy8Q56zzIxu2Txr19VVxuhZJsBhKWA/VBsH/dBurH71ZRj2CA3uFy
9MojCRd1gfk2z/qllGUqTnvv+r3i0R76LYNRtYK1oo2suLuXurjRNC+Matg6JfHb
+e/RVJcKaL2ITkJmd52Kc8DS1QQ7zNIxzvg12z0JvC781E13aT01W1ut/Pt+RotW
azz7e4ZWAkWpKdAu01B/gJ0qaVh2S+IwSgcHqsWCn+q3DJzCcAJgFGqCYYovg9sL
jMx7TgkusUSiXg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:45 2025 by rpki-client