Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: jWsu3hN7GuzIYXY+2gbGpesHgnF3nYBKaj8rbcKh61w=
Subject key identifier: 17:3B:68:64:75:54:E6:62:F2:68:80:7A:21:24:94:F2:C6:FE:49:7E
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 0199FB457D97078B4F11A34B1783DCCA758A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 07:00:59 +0000
Manifest this update: Sun 19 Oct 2025 07:00:59 +0000
Manifest next update: Mon 20 Oct 2025 07:00:59 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: ES4PU1BJe91oZnnz0k32RertnkdjXgknBjbwk7QAisk=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:7d:97:07:8b:4f:11:a3:4b:17:83:dc:ca:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Oct 19 07:00:59 2025 GMT
Not After : Oct 20 07:00:59 2025 GMT
Subject: CN=173b68647554e662f268807a212494f2c6fe497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:d0:dd:7f:57:b7:a7:a2:55:29:38:1b:48:
06:26:b0:7b:d0:4e:6a:d3:21:ee:77:6f:b2:f6:b9:
37:e4:8d:7f:f6:73:88:34:66:db:4d:f6:37:05:87:
f9:f1:63:ae:de:40:4f:5a:60:ca:75:51:39:42:69:
0d:66:c1:27:35:97:63:d0:73:17:be:83:47:bf:27:
6b:f3:03:53:0d:ca:37:04:6e:36:a1:f7:27:2f:08:
25:8f:0b:66:8d:55:8d:09:e0:d1:38:da:31:e4:4a:
a1:e4:28:7d:76:f0:81:4c:83:33:f1:78:30:03:98:
96:60:43:54:11:28:05:58:5b:9c:4b:76:4e:b1:66:
e3:90:05:21:09:15:2f:50:48:e5:23:35:cc:b0:a6:
7d:c6:54:3e:04:0c:ba:e2:83:2f:04:f8:23:50:f2:
ee:97:1f:b2:9d:e5:54:28:6e:16:68:0e:ac:8d:de:
c0:03:56:27:a9:43:56:77:3c:88:b3:7b:e0:f5:70:
4e:d1:69:44:9c:23:70:3a:ae:70:51:0a:10:0e:b2:
8e:bc:fb:51:c0:cc:10:48:93:0a:f0:2f:3f:d4:d4:
22:37:d5:74:db:31:a2:bc:e9:d6:b6:62:1a:a5:fa:
f2:f9:9a:99:ed:c3:5b:43:3c:65:ed:dd:b9:6a:e8:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3B:68:64:75:54:E6:62:F2:68:80:7A:21:24:94:F2:C6:FE:49:7E
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:35:a1:4d:df:56:02:c1:f1:ec:be:2a:66:84:1c:e2:59:55:
da:96:fd:2a:52:a9:38:90:5a:78:37:da:1c:db:a2:13:44:2e:
cd:8e:b0:62:4c:75:1f:3b:d8:a5:15:23:3e:25:9b:ce:90:3d:
89:43:ff:9e:a8:7c:ab:16:af:cf:1d:97:15:9f:6c:ec:6f:e4:
01:40:4f:6e:b6:60:df:49:80:78:b2:58:9a:ac:22:5c:e8:ef:
13:31:50:0f:38:ff:16:49:b9:90:25:e6:16:ad:89:af:f5:d5:
5e:22:00:26:dc:51:6d:6c:a0:f1:04:5a:3c:e9:aa:34:ec:38:
53:cc:f4:b5:e4:bb:58:a3:f0:86:f1:8a:d7:45:3a:28:61:4f:
25:f1:c5:c2:07:0d:be:e6:79:77:e4:db:51:c2:fe:84:a3:e0:
6a:50:37:03:47:6a:c2:11:a9:83:c9:07:f1:b3:b3:b6:a5:9d:
ab:bf:1e:e1:de:47:00:c6:d8:a1:37:b7:23:9c:f2:96:79:d5:
12:82:d5:62:08:93:bc:f6:c2:0a:48:c4:ea:7e:dc:3e:59:97:
44:6b:b8:9f:eb:0a:36:05:19:cb:e4:55:b3:7e:c5:1f:72:e2:
c5:42:00:49:c7:16:ff:b2:57:24:3e:5c:d6:ea:4e:da:2c:20:
58:c0:63:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RX2XB4tPEaNLF4PcynWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjUxMDE5MDcwMDU5WhcNMjUxMDIwMDcwMDU5WjAzMTEwLwYDVQQD
EygxNzNiNjg2NDc1NTRlNjYyZjI2ODgwN2EyMTI0OTRmMmM2ZmU0OTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW3Q3X9Xt6eiVSk4G0gGJrB70E5q
0yHud2+y9rk35I1/9nOINGbbTfY3BYf58WOu3kBPWmDKdVE5QmkNZsEnNZdj0HMX
voNHvydr8wNTDco3BG42ofcnLwgljwtmjVWNCeDRONox5Eqh5Ch9dvCBTIMz8Xgw
A5iWYENUESgFWFucS3ZOsWbjkAUhCRUvUEjlIzXMsKZ9xlQ+BAy64oMvBPgjUPLu
lx+yneVUKG4WaA6sjd7AA1YnqUNWdzyIs3vg9XBO0WlEnCNwOq5wUQoQDrKOvPtR
wMwQSJMK8C8/1NQiN9V02zGivOnWtmIapfry+ZqZ7cNbQzxl7d25aug/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc7aGR1VOZi8miAeiEklPLG/kl+MB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTWhTd9W
AsHx7L4qZoQc4llV2pb9KlKpOJBaeDfaHNuiE0QuzY6wYkx1HzvYpRUjPiWbzpA9
iUP/nqh8qxavzx2XFZ9s7G/kAUBPbrZg30mAeLJYmqwiXOjvEzFQDzj/Fkm5kCXm
Fq2Jr/XVXiIAJtxRbWyg8QRaPOmqNOw4U8z0teS7WKPwhvGK10U6KGFPJfHFwgcN
vuZ5d+TbUcL+hKPgalA3A0dqwhGpg8kH8bOztqWdq78e4d5HAMbYoTe3I5zylnnV
EoLVYgiTvPbCCkjE6n7cPlmXRGu4n+sKNgUZy+RVs37FH3LixUIASccW/7JXJD5c
1upO2iwgWMBjeA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:41 2025 by rpki-client