Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File: eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier: 5VRpjxM7ojN1/vqL8bUh9avdvQhLC0EuD5pbzxP0J5Q=
Subject key identifier: 71:5E:01:A1:FA:5F:35:F5:85:A3:F7:38:F7:66:1E:7F:D8:21:AD:3F
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial: 0199FEEBE3F4E856B656E87303AFFCF4E1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 00:01:36 +0000
Manifest this update: Mon 20 Oct 2025 00:01:36 +0000
Manifest next update: Tue 21 Oct 2025 00:01:36 +0000
Files and hashes: 1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: 2B8+RsJ3Hq15OW13jINtBcbFiT/YR/etIcaZreqz4O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e3:f4:e8:56:b6:56:e8:73:03:af:fc:f4:e1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
Validity
Not Before: Oct 20 00:01:36 2025 GMT
Not After : Oct 21 00:01:36 2025 GMT
Subject: CN=715e01a1fa5f35f585a3f738f7661e7fd821ad3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4b:23:08:ef:b2:89:d7:9d:e3:59:83:e9:ac:
f5:45:9a:29:45:af:0e:29:ce:b4:b7:a2:31:64:9a:
62:b3:16:45:9a:00:c2:a3:88:15:f1:d4:74:3f:13:
f7:c7:e4:56:53:bd:20:ea:2c:54:10:d6:a8:a8:e1:
74:d1:d4:05:8e:f1:2c:c3:8c:25:93:7f:1e:70:c4:
c8:47:ca:42:1c:96:40:18:cf:a2:9e:58:7b:c5:f0:
3e:56:9a:3d:37:7e:e1:5a:db:b9:b4:55:9a:b1:37:
74:d1:3d:27:94:d6:11:9e:70:d0:ea:57:0f:af:b2:
6a:29:ac:ac:00:c4:5e:5f:17:bf:5b:52:34:6c:8a:
a6:6e:65:c6:74:0a:a4:7a:45:31:29:b7:eb:fe:b0:
10:6b:bb:ed:6d:f8:6e:3a:a4:b4:15:b4:0e:c7:bf:
79:02:08:f8:0e:9c:dd:4b:47:7b:8b:9b:48:6a:96:
11:c7:14:d1:af:a6:8a:cc:38:67:0a:0b:58:4e:fd:
5b:29:4b:c3:9a:78:23:dd:53:4c:b7:7c:bd:96:6c:
58:c2:db:f3:d7:77:ed:65:c4:20:23:d8:2d:07:a3:
2d:20:1a:f4:db:75:12:2a:e7:47:53:72:e8:62:97:
5a:8d:ce:e7:2c:93:e0:a2:87:d5:f7:7e:4e:63:1e:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:01:A1:FA:5F:35:F5:85:A3:F7:38:F7:66:1E:7F:D8:21:AD:3F
X509v3 Authority Key Identifier:
keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:38:75:dc:f9:a0:b1:ad:46:15:b5:48:a9:ef:71:90:cf:e2:
09:76:ce:41:5b:e2:57:65:b5:06:2e:70:6a:1d:2d:2c:41:4b:
1d:26:3f:df:f7:37:91:c0:db:92:51:cb:54:29:4c:4b:81:9d:
3c:9a:04:69:91:9c:a7:a7:65:94:b0:7b:28:ac:13:a4:e3:b2:
68:3f:c2:9c:60:15:f3:1a:a4:d6:97:a3:1b:7e:7f:df:bb:37:
92:de:6a:1d:33:08:82:07:71:66:e6:3c:e6:f0:e2:3d:11:35:
7f:df:67:1c:ae:35:57:b9:58:ae:54:f6:d8:89:c5:00:b0:38:
ee:e3:c8:db:1b:d8:c0:85:ca:ba:3f:20:b1:21:fd:32:5a:ab:
4f:32:2f:3e:db:a6:05:88:7a:65:95:5e:be:14:4b:ae:8e:8d:
57:70:0e:11:61:fb:54:8d:4c:93:9f:7e:86:13:64:4d:05:00:
86:86:ae:11:a0:e6:49:26:84:b1:6c:23:23:cf:3f:56:d4:1d:
48:67:ec:ed:54:95:92:be:c0:3f:30:8a:68:e6:c4:80:88:dd:
d4:c7:03:91:d3:83:68:63:1a:10:31:94:50:11:f2:16:31:5c:
ba:94:02:0a:71:c1:b8:4a:d8:31:d8:5a:aa:7c:7f:be:8e:74:
b0:13:b5:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6+P06Fa2VuhzA6/89OG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NGY1NTFlOTdhMTMyNTQyZTNiMDU2ZTkwNWRlOGYzZGJh
MjRjOWMwHhcNMjUxMDIwMDAwMTM2WhcNMjUxMDIxMDAwMTM2WjAzMTEwLwYDVQQD
Eyg3MTVlMDFhMWZhNWYzNWY1ODVhM2Y3MzhmNzY2MWU3ZmQ4MjFhZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ksjCO+yided41mD6az1RZopRa8O
Kc60t6IxZJpisxZFmgDCo4gV8dR0PxP3x+RWU70g6ixUENaoqOF00dQFjvEsw4wl
k38ecMTIR8pCHJZAGM+inlh7xfA+Vpo9N37hWtu5tFWasTd00T0nlNYRnnDQ6lcP
r7JqKaysAMReXxe/W1I0bIqmbmXGdAqkekUxKbfr/rAQa7vtbfhuOqS0FbQOx795
Agj4DpzdS0d7i5tIapYRxxTRr6aKzDhnCgtYTv1bKUvDmngj3VNMt3y9lmxYwtvz
13ftZcQgI9gtB6MtIBr023USKudHU3LoYpdajc7nLJPgoofV935OYx7stwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFeAaH6XzX1haP3OPdmHn/YIa0/MB8GA1UdIwQY
MBaAFHlPVR6XoTJULjsFbpBd6PPbokycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMt
NDM2ODU4ODc0MzZjLzEvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMtNDM2ODU4ODc0MzZj
LzEvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjh13Pmg
sa1GFbVIqe9xkM/iCXbOQVviV2W1Bi5wah0tLEFLHSY/3/c3kcDbklHLVClMS4Gd
PJoEaZGcp6dllLB7KKwTpOOyaD/CnGAV8xqk1pejG35/37s3kt5qHTMIggdxZuY8
5vDiPRE1f99nHK41V7lYrlT22InFALA47uPI2xvYwIXKuj8gsSH9MlqrTzIvPtum
BYh6ZZVevhRLro6NV3AOEWH7VI1Mk59+hhNkTQUAhoauEaDmSSaEsWwjI88/VtQd
SGfs7VSVkr7APzCKaObEgIjd1McDkdODaGMaEDGUUBHyFjFcupQCCnHBuErYMdha
qnx/vo50sBO18Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:28 2025 by rpki-client