Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: bycJWPhuD6Vhf/cxE6vcRyLh7UgeuMArGA7aovh6c7w=
Subject key identifier: 77:C8:D4:5B:56:A8:E1:9D:1C:DA:55:D1:D3:98:65:C5:86:50:2E:E8
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 0199FB7C9BB23E808B93C3335B2ECD2FE663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0E1A
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=)
2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: F+N8B5wZXm/yhY/RUWPy5Jvmb6tBnXcQUSUXvSpgneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9b:b2:3e:80:8b:93:c3:33:5b:2e:cd:2f:e6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=77c8d45b56a8e19d1cda55d1d39865c586502ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:2e:a5:aa:36:4d:7e:b7:3a:75:20:25:7b:
9e:67:f7:f1:44:31:94:bc:11:8f:42:ed:78:79:fd:
41:6c:d7:5a:d0:c5:c4:30:5c:d2:a7:df:d3:81:3b:
0c:14:67:c5:ba:0c:d4:b5:af:fc:c2:42:3b:9b:ce:
f6:6e:17:70:a2:49:88:32:a7:f9:94:a3:e9:d7:dc:
e0:b7:df:a5:e6:0a:27:5b:bc:87:33:a1:cf:71:83:
60:1b:ec:83:bc:e0:b3:21:9b:91:a1:4a:12:bf:6c:
2d:48:3f:47:42:e7:4d:d9:9b:16:8b:8b:c7:d6:1b:
e0:33:06:56:d7:44:3a:b1:90:de:66:2b:d1:d0:66:
73:62:57:61:74:34:8c:fd:a7:5d:26:4a:b6:b7:91:
ef:58:f0:84:e5:87:b6:36:c6:0f:9c:dc:84:b7:7a:
83:48:be:98:95:d8:bb:57:bb:f0:43:8a:d7:c6:50:
36:72:ee:69:bf:e4:8a:de:e4:87:c4:cd:64:31:68:
c0:81:9a:18:44:51:4d:fb:06:a8:9d:57:f4:c6:09:
fd:ee:58:cc:43:49:6a:b4:d2:22:3c:22:27:a5:c0:
5a:67:09:21:2d:8a:c4:e0:46:e3:e6:21:9c:dd:d2:
61:ea:93:25:22:68:1d:ee:48:38:4c:ab:44:dd:29:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C8:D4:5B:56:A8:E1:9D:1C:DA:55:D1:D3:98:65:C5:86:50:2E:E8
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:44:b0:1e:96:a1:75:ab:fe:d6:dc:19:a0:2a:0c:30:df:5b:
e0:07:b3:a3:da:77:66:ef:b4:3a:e5:ab:d1:e5:4f:79:87:4e:
73:66:9e:95:6c:a4:d7:9d:09:e8:62:a0:47:fb:5e:36:6f:05:
24:c5:09:50:72:a7:e1:31:5c:2e:4f:0f:d4:6c:90:da:15:f3:
73:e0:97:45:b5:2f:3b:a7:6d:de:f9:09:4e:56:30:9a:87:fe:
5e:6b:d2:e0:ad:1a:82:57:ba:e1:a5:67:96:5c:f0:3e:74:7d:
de:eb:ec:1f:5b:5b:b6:f0:2c:0d:20:bb:8b:95:46:96:2b:c5:
ad:57:47:d8:af:63:9b:b9:0d:08:d7:79:67:b1:4b:69:9c:6c:
92:30:77:da:bd:0c:a7:83:75:b7:b5:13:62:fb:93:2f:fa:bf:
b0:f7:3f:e7:22:fb:64:6b:16:0f:d5:c6:be:f0:73:0b:59:e6:
15:d2:87:19:a4:80:c3:1d:63:01:41:87:b8:19:66:3e:52:e2:
22:c0:83:bb:db:70:85:55:24:f9:5e:fc:77:6d:3a:bb:ef:79:
5e:e7:b5:1a:60:da:a4:3b:85:61:f5:a4:32:99:11:37:28:6e:
59:40:b7:25:24:3f:4e:c9:9b:ad:15:d2:44:89:94:3f:9e:bd:
3c:32:cc:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJuyPoCLk8MzWy7NL+ZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh
YzA4NTkwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
Eyg3N2M4ZDQ1YjU2YThlMTlkMWNkYTU1ZDFkMzk4NjVjNTg2NTAyZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKUupao2TX63OnUgJXueZ/fxRDGU
vBGPQu14ef1BbNda0MXEMFzSp9/TgTsMFGfFugzUta/8wkI7m872bhdwokmIMqf5
lKPp19zgt9+l5gonW7yHM6HPcYNgG+yDvOCzIZuRoUoSv2wtSD9HQudN2ZsWi4vH
1hvgMwZW10Q6sZDeZivR0GZzYldhdDSM/addJkq2t5HvWPCE5Ye2NsYPnNyEt3qD
SL6Yldi7V7vwQ4rXxlA2cu5pv+SK3uSHxM1kMWjAgZoYRFFN+waonVf0xgn97ljM
Q0lqtNIiPCInpcBaZwkhLYrE4Ebj5iGc3dJh6pMlImgd7kg4TKtE3SlUkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfI1FtWqOGdHNpV0dOYZcWGUC7oMB8GA1UdIwQY
MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt
ZWYyMTkzODFmMTBlLzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl
LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0SwHpah
dav+1twZoCoMMN9b4Aezo9p3Zu+0OuWr0eVPeYdOc2aelWyk150J6GKgR/teNm8F
JMUJUHKn4TFcLk8P1GyQ2hXzc+CXRbUvO6dt3vkJTlYwmof+XmvS4K0agle64aVn
llzwPnR93uvsH1tbtvAsDSC7i5VGlivFrVdH2K9jm7kNCNd5Z7FLaZxskjB32r0M
p4N1t7UTYvuTL/q/sPc/5yL7ZGsWD9XGvvBzC1nmFdKHGaSAwx1jAUGHuBlmPlLi
IsCDu9twhVUk+V78d206u+95Xue1GmDapDuFYfWkMpkRNyhuWUC3JSQ/TsmbrRXS
RImUP569PDLMIw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:58 2025 by rpki-client