
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: cce4zYQCw2mFFUaMzK3UaCf/dcmwXCA77oCdcir6qz0=
Subject key identifier: 2A:E1:C7:05:85:28:29:E6:F0:C8:F2:D4:62:B4:81:BC:39:AF:C5:52
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 0199FB45C32DC06829904214C9EF233DE400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 0238
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: NYfVAYUTg8B2DQKDOWiorotAxuysYAvXjTeXRcjCo7c=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c3:2d:c0:68:29:90:42:14:c9:ef:23:3d:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=2ae1c705852829e6f0c8f2d462b481bc39afc552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:4e:cd:ee:98:a2:32:a5:ac:e5:b1:77:34:
4a:30:8a:75:53:ab:91:44:ce:61:72:be:2d:71:b8:
04:72:96:09:18:43:94:c9:1a:9d:74:c4:03:de:31:
e8:98:57:84:af:f1:3f:17:f1:6f:c4:3a:c6:68:d9:
54:f8:a2:3d:f3:a0:fd:53:04:f8:10:24:2a:40:16:
d8:a3:53:b8:8f:e5:70:fc:06:ef:30:6e:5d:1c:ad:
70:11:02:f2:af:b2:45:b6:6b:71:9b:c7:36:93:30:
cf:62:97:c6:32:8b:91:e7:f1:a5:02:0f:bb:8d:32:
18:24:6b:d4:59:b4:10:ee:dd:7b:b4:70:dc:53:71:
84:e8:7e:2a:d4:2c:84:f8:f9:9e:b1:24:12:fd:e4:
1c:8b:18:eb:e8:cb:25:b6:9f:41:bb:8b:18:0c:fb:
7d:8d:e4:81:b0:16:3b:bd:38:73:81:29:7c:f5:69:
ca:43:4f:fc:df:24:48:c9:99:2a:e6:db:23:0c:ba:
66:5f:bc:6d:c7:5e:c0:43:a9:e6:27:fc:f5:21:7c:
09:3b:c4:70:07:47:6b:71:76:ac:91:02:dd:e3:aa:
38:e7:74:b6:1d:11:61:a3:b8:58:53:2f:45:f8:44:
0b:7c:e6:8e:1c:70:2c:13:dc:8f:71:e0:d9:5e:c2:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:C7:05:85:28:29:E6:F0:C8:F2:D4:62:B4:81:BC:39:AF:C5:52
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:c3:eb:8c:a6:dc:8f:7d:31:2e:e3:37:e2:b2:db:c2:e5:
c1:50:d2:9b:47:17:9d:e6:87:c1:bd:36:17:e7:a9:20:20:c5:
90:e7:cd:81:43:c9:ea:9f:bc:f0:64:cf:a7:fd:00:99:e4:f6:
fd:8d:66:99:eb:b0:7d:66:8e:55:b9:1c:be:66:aa:8e:e5:04:
ae:6b:e2:d8:41:b1:b8:04:63:e2:98:c6:42:20:c2:78:05:09:
50:4b:ca:e3:df:3d:90:77:59:39:32:cd:92:0d:03:6e:bf:3e:
33:e0:44:58:0c:88:7f:6c:31:f7:dc:77:90:9d:e0:b3:0f:52:
0e:e9:ba:60:99:e3:37:f5:1d:e2:0b:f2:15:45:94:22:bd:8f:
0f:5c:76:cb:50:8f:b6:bf:c1:4a:28:5d:8a:a8:b6:db:36:34:
8d:9d:35:27:d0:2c:84:51:0d:06:56:5b:21:e8:74:dc:3f:46:
0f:db:ab:76:f1:aa:bd:b5:81:74:d4:ed:68:56:1d:9c:70:70:
a6:78:b8:6c:d8:00:50:17:48:19:88:eb:80:0c:8f:22:9b:98:
84:36:eb:60:7b:95:50:9d:44:4e:25:7f:ed:59:40:f6:aa:8f:
53:11:a9:72:c7:8b:6c:96:f9:17:2f:af:0c:dc:3b:02:2d:db:
17:e2:d7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RcMtwGgpkEIUye8jPeQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1
MjVmNGUwHhcNMjUxMDE5MDcwMTE3WhcNMjUxMDIwMDcwMTE3WjAzMTEwLwYDVQQD
EygyYWUxYzcwNTg1MjgyOWU2ZjBjOGYyZDQ2MmI0ODFiYzM5YWZjNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36tOze6YojKlrOWxdzRKMIp1U6uR
RM5hcr4tcbgEcpYJGEOUyRqddMQD3jHomFeEr/E/F/FvxDrGaNlU+KI986D9UwT4
ECQqQBbYo1O4j+Vw/AbvMG5dHK1wEQLyr7JFtmtxm8c2kzDPYpfGMouR5/GlAg+7
jTIYJGvUWbQQ7t17tHDcU3GE6H4q1CyE+PmesSQS/eQcixjr6Msltp9Bu4sYDPt9
jeSBsBY7vThzgSl89WnKQ0/83yRIyZkq5tsjDLpmX7xtx17AQ6nmJ/z1IXwJO8Rw
B0drcXaskQLd46o453S2HRFho7hYUy9F+EQLfOaOHHAsE9yPceDZXsJUeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrhxwWFKCnm8Mjy1GK0gbw5r8VSMB8GA1UdIwQY
MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt
OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl
LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYffD64ym
3I99MS7jN+Ky28LlwVDSm0cXneaHwb02F+epICDFkOfNgUPJ6p+88GTPp/0AmeT2
/Y1mmeuwfWaOVbkcvmaqjuUErmvi2EGxuARj4pjGQiDCeAUJUEvK4989kHdZOTLN
kg0Dbr8+M+BEWAyIf2wx99x3kJ3gsw9SDum6YJnjN/Ud4gvyFUWUIr2PD1x2y1CP
tr/BSihdiqi22zY0jZ01J9AshFENBlZbIeh03D9GD9urdvGqvbWBdNTtaFYdnHBw
pni4bNgAUBdIGYjrgAyPIpuYhDbrYHuVUJ1ETiV/7VlA9qqPUxGpcseLbJb5Fy+v
DNw7Ai3bF+LXvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:27 2025 by rpki-client