Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: 1MEN+0Oeavqxdmk0HGQrn8kon0SPDyWIMTP6xeJtDOs=
Subject key identifier: 84:6B:CE:F8:9F:3C:B2:3D:97:46:83:60:76:8F:AD:CF:F3:76:04:46
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 0199FBEA900F9A2E14A4AA7C3D29CE3ABF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: bXpWq6DINK8JDpcRp6WsRCdW1NVfbvqUdot5mqohKxw=)
2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:90:0f:9a:2e:14:a4:aa:7c:3d:29:ce:3a:bf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=846bcef89f3cb23d97468360768fadcff3760446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:bd:81:e9:84:bd:4d:27:9c:c2:71:6e:63:
e9:18:c6:93:11:ff:cd:05:b5:2e:6c:c8:8c:66:30:
84:6a:14:d7:ec:fa:e6:73:f9:66:3a:d7:e1:ad:6c:
25:0c:3d:57:88:43:76:5e:9c:e2:c9:88:1c:ce:50:
8d:0c:62:cf:c0:ea:90:2d:95:a4:4d:d1:07:f5:00:
a8:fc:37:50:d2:b6:41:7b:42:c3:c3:3b:a3:75:2c:
eb:f6:8c:a3:f6:8f:06:65:08:12:aa:10:dd:2d:47:
1d:4e:31:85:62:97:ad:0c:70:fb:d1:8e:cc:30:a1:
ce:f6:65:f3:66:a0:65:fe:e6:48:dd:fe:28:87:5d:
93:f3:d6:fc:3e:9d:28:c9:74:75:b3:89:7a:a8:83:
8d:fe:11:92:0c:b0:1b:c0:4a:ae:9d:e5:c8:3c:36:
11:a3:d5:f6:00:5c:7c:b4:cc:cd:58:b0:2c:2d:29:
80:79:3c:0c:20:b4:97:5b:63:5d:bb:8b:b2:5d:cc:
28:32:ce:bb:ed:d8:f7:31:4f:26:74:73:2c:0d:51:
ee:cb:6c:c8:3b:ff:c1:76:01:94:14:32:49:f0:a0:
a2:e6:f5:76:e4:47:13:12:8c:42:e8:1f:e7:76:fa:
a3:b6:44:16:87:a1:d6:80:dd:c8:c2:08:52:8c:45:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6B:CE:F8:9F:3C:B2:3D:97:46:83:60:76:8F:AD:CF:F3:76:04:46
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:71:56:32:2b:41:e6:b5:6f:31:54:99:de:98:d4:52:35:b8:
82:a2:a6:80:9d:3c:a0:6a:69:26:c9:32:c8:23:e5:b7:44:92:
27:1c:84:13:fe:ea:63:96:48:7f:ff:34:e5:ed:00:32:bc:b8:
e3:3f:7e:48:d2:18:f0:23:d1:28:d3:f6:b7:4a:b2:50:50:2d:
ac:ae:42:8c:9a:42:cb:14:a5:9c:f3:4f:6c:2f:43:78:a5:f4:
9f:dd:2f:df:29:3a:c6:9f:f0:eb:78:27:ca:f4:fb:2f:64:f6:
2d:66:f3:dd:48:4a:8e:12:e8:91:97:ca:df:88:42:c9:dd:61:
62:2c:61:a8:21:00:09:e5:18:44:81:ae:78:78:e5:30:2d:5c:
2c:f0:90:1e:92:ea:97:ed:91:11:8b:28:ad:cf:34:0f:48:43:
48:3c:c9:e7:06:52:81:41:48:4c:f8:c1:40:72:af:5a:89:84:
bd:5d:ca:53:47:82:67:f2:39:ca:25:b4:6d:05:a0:bc:f3:7f:
fe:4c:c6:a2:a2:74:64:30:3c:13:c6:72:b6:63:df:f9:18:e2:
81:8d:4d:74:d4:d1:ac:e4:cd:e1:89:16:2c:40:eb:ee:b2:8f:
24:57:9f:c6:00:70:15:ed:3d:16:58:da:51:18:7d:99:c9:b6:
c0:96:71:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pAPmi4UpKp8PSnOOr9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZWVkYzMzYWE0NDI5MDcxODlmMGIzYzU2MzgzNjk1MWZi
MTg1YmIwHhcNMjUxMDE5MTAwMTE3WhcNMjUxMDIwMTAwMTE3WjAzMTEwLwYDVQQD
Eyg4NDZiY2VmODlmM2NiMjNkOTc0NjgzNjA3NjhmYWRjZmYzNzYwNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QG9gemEvU0nnMJxbmPpGMaTEf/N
BbUubMiMZjCEahTX7Prmc/lmOtfhrWwlDD1XiEN2XpziyYgczlCNDGLPwOqQLZWk
TdEH9QCo/DdQ0rZBe0LDwzujdSzr9oyj9o8GZQgSqhDdLUcdTjGFYpetDHD70Y7M
MKHO9mXzZqBl/uZI3f4oh12T89b8Pp0oyXR1s4l6qION/hGSDLAbwEquneXIPDYR
o9X2AFx8tMzNWLAsLSmAeTwMILSXW2Ndu4uyXcwoMs677dj3MU8mdHMsDVHuy2zI
O//BdgGUFDJJ8KCi5vV25EcTEoxC6B/ndvqjtkQWh6HWgN3IwghSjEUkqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRrzvifPLI9l0aDYHaPrc/zdgRGMB8GA1UdIwQY
MBaAFBDu3DOqRCkHGJ8LPFY4NpUfsYW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMt
NTM0ZWJlZWYzMzg5LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMtNTM0ZWJlZWYzMzg5
LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHFWMitB
5rVvMVSZ3pjUUjW4gqKmgJ08oGppJskyyCPlt0SSJxyEE/7qY5ZIf/805e0AMry4
4z9+SNIY8CPRKNP2t0qyUFAtrK5CjJpCyxSlnPNPbC9DeKX0n90v3yk6xp/w63gn
yvT7L2T2LWbz3UhKjhLokZfK34hCyd1hYixhqCEACeUYRIGueHjlMC1cLPCQHpLq
l+2REYsorc80D0hDSDzJ5wZSgUFITPjBQHKvWomEvV3KU0eCZ/I5yiW0bQWgvPN/
/kzGoqJ0ZDA8E8ZytmPf+RjigY1NdNTRrOTN4YkWLEDr7rKPJFefxgBwFe09Flja
URh9mcm2wJZx3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:41 2025 by rpki-client