
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: 4IJql78my5WhfQIcxQ/Gdrw9KCaSD+92k8G7BaKEWF0=
Subject key identifier: 96:4A:93:5A:CC:D2:65:95:57:D6:A5:26:2E:60:80:A1:74:07:E5:93
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 0199FBEB499F7F550C56800828BE0A9B4325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0DFB
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: o5gwCirrs1VP8kVFO1YfQZmr8AmvF9UBjE6iSwj7wSQ=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:49:9f:7f:55:0c:56:80:08:28:be:0a:9b:43:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=964a935accd2659557d6a5262e6080a17407e593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:7b:23:b0:c1:f0:bc:80:44:a8:d2:a3:f6:
ac:a4:fa:52:9b:a1:d2:ed:54:af:2a:6d:56:88:60:
7d:89:60:1b:a8:ad:b9:cd:28:da:99:c9:a6:79:8c:
29:80:0f:1e:8a:f9:46:39:c7:c4:c7:9f:90:08:92:
be:60:0d:c2:e3:8a:48:8d:56:1d:0b:35:80:f1:f0:
54:99:1e:2c:b3:94:57:83:3a:65:7b:40:2e:13:0b:
27:42:63:27:f8:f0:f6:26:cc:fa:7e:78:05:fe:55:
ee:52:2f:00:68:ab:3b:74:3c:c8:68:84:9c:9b:2c:
0d:ab:1c:ab:bb:8c:fd:02:14:3e:41:d4:96:3f:da:
64:ee:e7:db:ec:cb:b8:1c:ba:f5:33:83:5d:39:2c:
88:b8:25:10:c0:3b:78:81:46:e4:47:49:ec:92:af:
dc:5f:dd:b1:ba:fb:a2:05:c1:d7:9f:89:fc:06:dc:
50:da:3f:8f:09:7e:38:7b:d6:85:2d:b6:a2:7f:95:
45:25:a2:3f:b4:30:59:6d:01:8d:0f:83:d4:c9:52:
ed:c6:7f:42:1c:9b:33:92:31:85:c7:02:6a:c3:eb:
2b:86:26:f6:56:8b:3d:93:b5:88:33:88:04:8c:8b:
c3:08:43:dc:d5:93:8b:be:1e:1b:83:c4:88:50:fc:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4A:93:5A:CC:D2:65:95:57:D6:A5:26:2E:60:80:A1:74:07:E5:93
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f2:2e:4b:79:79:b1:d6:a7:97:16:2b:5a:e5:07:a3:d4:df:
29:98:d7:c4:2b:42:80:dc:aa:f1:b6:fa:45:1b:29:ea:2a:ba:
cc:b3:76:3f:68:76:3b:e1:13:f8:de:75:41:c3:5e:ec:73:e8:
5d:6b:68:34:03:a3:f9:5e:7d:25:87:98:3e:64:02:21:63:91:
70:78:4d:a2:01:1d:bb:ca:21:52:cb:18:a2:53:3b:dc:47:44:
78:43:2d:a9:df:13:44:4f:aa:06:09:db:27:c7:fa:87:14:ef:
3f:b5:62:af:9e:aa:37:3e:de:c1:35:aa:19:ba:46:8d:8d:55:
e4:40:95:e6:2b:a5:4b:fb:97:bb:15:a0:6f:fc:a6:50:7e:0d:
02:6b:63:a3:e0:15:d5:36:8e:6b:b5:df:61:f6:2d:b7:88:c6:
57:22:23:3a:b8:a3:34:c7:e8:ef:f0:08:35:c4:40:00:a1:15:
12:aa:7b:1f:b4:e9:af:b5:0c:d4:16:97:36:70:b7:d4:87:8b:
00:45:81:56:f6:b7:e2:22:99:2c:29:e1:ce:3e:2d:2c:bc:5e:
5a:08:e4:ec:c2:dc:0e:61:db:7d:1d:24:4a:e0:db:2d:81:cb:
6f:cd:44:22:d6:78:d2:35:a9:21:a6:a6:df:6c:d7:f6:37:e9:
2f:3d:43:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760mff1UMVoAIKL4Km0MlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDI0NjZmOGY4NjQ1YzlmMzlmMDQ4NzRkZGFkZjBkNzEz
NmY2N2YwHhcNMjUxMDE5MTAwMjA1WhcNMjUxMDIwMTAwMjA1WjAzMTEwLwYDVQQD
Eyg5NjRhOTM1YWNjZDI2NTk1NTdkNmE1MjYyZTYwODBhMTc0MDdlNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyx7I7DB8LyARKjSo/aspPpSm6HS
7VSvKm1WiGB9iWAbqK25zSjamcmmeYwpgA8eivlGOcfEx5+QCJK+YA3C44pIjVYd
CzWA8fBUmR4ss5RXgzple0AuEwsnQmMn+PD2Jsz6fngF/lXuUi8AaKs7dDzIaISc
mywNqxyru4z9AhQ+QdSWP9pk7ufb7Mu4HLr1M4NdOSyIuCUQwDt4gUbkR0nskq/c
X92xuvuiBcHXn4n8BtxQ2j+PCX44e9aFLbaif5VFJaI/tDBZbQGND4PUyVLtxn9C
HJszkjGFxwJqw+srhib2Vos9k7WIM4gEjIvDCEPc1ZOLvh4bg8SIUPxJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZKk1rM0mWVV9alJi5ggKF0B+WTMB8GA1UdIwQY
MBaAFBJCRm+PhkXJ858Eh03a3w1xNvZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUt
MGY1NWVhMzNhZmUzLzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUtMGY1NWVhMzNhZmUz
LzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfIuS3l5
sdanlxYrWuUHo9TfKZjXxCtCgNyq8bb6RRsp6iq6zLN2P2h2O+ET+N51QcNe7HPo
XWtoNAOj+V59JYeYPmQCIWORcHhNogEdu8ohUssYolM73EdEeEMtqd8TRE+qBgnb
J8f6hxTvP7Vir56qNz7ewTWqGbpGjY1V5ECV5iulS/uXuxWgb/ymUH4NAmtjo+AV
1TaOa7XfYfYtt4jGVyIjOrijNMfo7/AINcRAAKEVEqp7H7Tpr7UM1BaXNnC31IeL
AEWBVva34iKZLCnhzj4tLLxeWgjk7MLcDmHbfR0kSuDbLYHLb81EItZ40jWpIaam
32zX9jfpLz1DNA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:10 2025 by rpki-client