Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: MmInE4lXmK+roPgXH0tyjhRgEefkGj6aGkcpubEh1ls=
Subject key identifier: 1E:9C:B7:EC:94:63:71:48:AA:E9:E1:52:D1:1A:BF:4D:DE:8C:C7:A3
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 0199FC8F58B08072F44688C47F05731D2908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: lUy1365jt2HyC3t7N2IulwDQrkHhaD0jnq6mLTmDt6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:58:b0:80:72:f4:46:88:c4:7f:05:73:1d:29:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=1e9cb7ec94637148aae9e152d11abf4dde8cc7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:e8:e4:e1:a4:70:ae:96:83:0f:72:b8:88:
40:7b:1b:53:5c:01:86:b8:1a:ef:da:1d:1f:ac:ab:
e7:0f:29:8a:40:de:1d:d1:c0:b4:cc:4e:f2:06:b1:
78:92:89:65:69:5f:c2:6d:dc:f4:aa:49:54:10:fb:
8c:3a:33:2b:38:b1:73:52:44:af:22:e7:ca:64:76:
2a:98:62:d5:81:4d:b5:05:2c:b2:5a:69:2f:e3:4e:
4c:66:13:ab:ed:51:52:b9:83:f1:08:54:96:d1:de:
df:a7:cb:70:8e:a9:d7:86:97:20:23:d6:14:4c:3e:
87:ed:a9:5f:e1:87:78:10:4e:36:47:79:61:2b:4d:
5d:72:76:42:d6:bc:52:01:85:66:db:77:e2:62:e0:
73:46:97:4f:80:cd:5c:8d:e0:7e:14:73:8f:8a:7a:
00:0a:16:0e:ac:f0:0e:00:a0:65:6f:c9:64:f4:e1:
cd:d8:89:4a:fa:34:0d:b5:42:63:07:3d:ad:99:d7:
b5:c5:34:f8:f2:25:d6:af:45:ba:79:5c:ec:a4:75:
f7:15:e8:3a:18:b5:43:75:40:23:b8:5a:e7:b0:e8:
58:7c:84:3c:05:c5:e4:9a:25:d9:3e:f3:17:13:17:
08:f0:3e:72:28:c7:02:41:30:b4:e7:d3:69:b0:07:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9C:B7:EC:94:63:71:48:AA:E9:E1:52:D1:1A:BF:4D:DE:8C:C7:A3
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6f:16:ed:e7:be:66:b0:6f:e4:84:3b:1f:61:e5:c4:e1:61:
26:77:64:3f:b9:65:8c:b4:9f:9e:86:c5:30:e4:32:ca:7e:ac:
37:da:c7:3d:ad:42:e5:3c:aa:3b:d4:f8:c4:4b:8e:f6:58:94:
9f:5c:38:23:d3:32:39:82:8a:ee:f2:3a:71:5b:32:f4:ca:d1:
39:0a:a8:a8:24:2e:1f:27:4b:68:40:9a:1c:90:ea:01:97:98:
22:1f:0d:a6:68:c1:fa:64:83:ca:e2:01:79:f2:16:cb:cf:f4:
e8:ea:2e:f6:9f:90:52:03:81:7e:9f:14:ca:30:f9:98:bc:42:
ba:c5:48:09:2b:17:2f:53:a7:5d:fa:4f:87:d5:57:66:f5:0d:
89:80:ea:78:05:62:f5:21:56:a2:75:75:b5:37:ac:49:d9:5e:
91:0c:f8:65:39:95:dd:8f:1f:03:0a:de:15:56:8d:7c:18:d3:
83:b1:f5:1f:83:77:21:a7:e3:cc:60:f9:d4:45:c7:a9:4c:19:
fe:b1:86:b1:f5:8b:a5:00:c1:23:4b:d4:63:e5:47:dc:da:17:
5c:4b:a4:b4:4a:ea:76:ab:d4:bb:ed:5f:25:b7:b7:27:3b:2c:
0e:82:2a:7e:cc:db:14:9a:cb:f1:11:71:2d:dd:bc:44:f2:17:
fd:a6:39:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1iwgHL0RojEfwVzHSkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2QxMGYyMmU1ZmZhNGIyMGY3ZDViNzgyOGM1NWI5NTA5
YTk3NTkwHhcNMjUxMDE5MTMwMTE2WhcNMjUxMDIwMTMwMTE2WjAzMTEwLwYDVQQD
EygxZTljYjdlYzk0NjM3MTQ4YWFlOWUxNTJkMTFhYmY0ZGRlOGNjN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSHo5OGkcK6Wgw9yuIhAextTXAGG
uBrv2h0frKvnDymKQN4d0cC0zE7yBrF4kollaV/Cbdz0qklUEPuMOjMrOLFzUkSv
IufKZHYqmGLVgU21BSyyWmkv405MZhOr7VFSuYPxCFSW0d7fp8twjqnXhpcgI9YU
TD6H7alf4Yd4EE42R3lhK01dcnZC1rxSAYVm23fiYuBzRpdPgM1cjeB+FHOPinoA
ChYOrPAOAKBlb8lk9OHN2IlK+jQNtUJjBz2tmde1xTT48iXWr0W6eVzspHX3Feg6
GLVDdUAjuFrnsOhYfIQ8BcXkmiXZPvMXExcI8D5yKMcCQTC059NpsAfIWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6ct+yUY3FIqunhUtEav03ejMejMB8GA1UdIwQY
MBaAFHh9EPIuX/pLIPfVt4KMVblQmpdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYjgwNTUtMzg5Yy00M2VkLWFiZGUt
YmYwZGUyYmIxYzNjLzEvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hYjgwNTUtMzg5Yy00M2VkLWFiZGUtYmYwZGUyYmIxYzNj
LzEvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlG8W7ee+
ZrBv5IQ7H2HlxOFhJndkP7lljLSfnobFMOQyyn6sN9rHPa1C5TyqO9T4xEuO9liU
n1w4I9MyOYKK7vI6cVsy9MrROQqoqCQuHydLaECaHJDqAZeYIh8NpmjB+mSDyuIB
efIWy8/06Oou9p+QUgOBfp8UyjD5mLxCusVICSsXL1OnXfpPh9VXZvUNiYDqeAVi
9SFWonV1tTesSdlekQz4ZTmV3Y8fAwreFVaNfBjTg7H1H4N3IafjzGD51EXHqUwZ
/rGGsfWLpQDBI0vUY+VH3NoXXEuktErqdqvUu+1fJbe3JzssDoIqfszbFJrL8RFx
Ld28RPIX/aY5Yg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:30 2025 by rpki-client