Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
File: eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json)
Hash identifier: CQUjfb8nqoqkZ135ZUAlDkdEWhBKsfvcg69JWJNHz9Q=
Subject key identifier: 31:6F:0F:B2:52:DF:29:5E:05:1C:3B:99:0A:C1:72:BF:2F:EC:8E:35
Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
Certificate issuer: /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Certificate serial: 0199FCFD3721F5EB94BAB51D7FA4A22A2462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
Manifest number: 03D8
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: W8sGLPfZJfk-AE8QSt5pW51bYBc.roa (hash: WTLS8/lHH8tSlHx/vjXHMnAP1canB1yYuL3OZnBm/0I=)
2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: vu+qSPTGkRjYR5dLdVXzfO7YlnnNYAICbztPvfY9VCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:37:21:f5:eb:94:ba:b5:1d:7f:a4:a2:2a:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=316f0fb252df295e051c3b990ac172bf2fec8e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:c8:ef:95:61:57:14:71:ad:8b:0b:a7:c4:
5a:70:b4:c0:07:ac:9e:8e:50:fb:29:26:b7:bf:82:
0b:06:ca:82:e1:ac:cd:a1:c5:1a:e6:c7:45:d7:1d:
2f:1c:a9:56:0d:49:af:49:72:78:ee:3a:2e:cb:f5:
60:8f:21:43:7b:e5:9d:ec:17:ea:2a:fa:20:56:81:
37:ea:8f:1a:83:f9:f6:eb:d0:72:40:db:4c:2a:75:
40:cb:24:61:f2:ec:82:ab:30:be:5f:97:52:d0:05:
75:3d:a9:11:51:03:c8:8a:66:2e:10:89:b7:c4:60:
34:b5:15:1e:fb:4f:44:8f:f8:da:47:a4:fb:c9:02:
8a:ba:11:13:11:e3:f4:e5:46:e3:9f:9a:5b:7b:ca:
5d:83:eb:8e:20:d3:01:c7:a7:96:0d:ae:c1:45:a6:
48:cf:ef:34:63:78:3e:cf:9a:6b:54:f5:7b:41:1c:
4b:c0:ce:b3:60:d1:92:48:30:8f:bd:28:7e:cb:85:
b6:07:90:94:90:7f:13:92:9c:b3:e4:d1:95:a4:15:
7c:b6:e4:32:aa:df:48:bc:0a:6a:fa:48:a0:7a:20:
f2:f5:cb:38:77:4c:e3:19:9d:97:f4:72:42:f6:37:
44:ee:7b:e7:13:d5:91:df:dc:be:a6:14:25:de:45:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:0F:B2:52:DF:29:5E:05:1C:3B:99:0A:C1:72:BF:2F:EC:8E:35
X509v3 Authority Key Identifier:
keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1a:25:aa:14:af:5e:7b:27:81:38:49:74:46:87:d8:17:2f:
5b:9f:73:f4:30:90:51:0f:68:5f:7e:08:b8:a6:f9:e5:ce:ac:
5b:43:a0:5a:91:3c:35:a3:d2:3a:99:c7:47:ef:ae:b0:6b:89:
00:3b:58:05:d9:28:ea:f0:a4:b5:38:8f:9f:fa:1a:71:a1:d3:
5e:3f:43:07:8a:39:f3:46:a3:b4:ab:6e:62:ef:91:20:ea:7d:
e3:3f:20:76:9d:da:83:51:c3:bc:3a:f1:89:bc:96:b0:c3:25:
43:07:71:6b:84:39:94:56:bf:ac:52:eb:4b:f2:73:11:3a:12:
52:00:ff:d5:16:9b:ff:a2:af:6c:36:5c:c8:56:1e:9f:26:e1:
14:24:b2:48:fa:91:54:8c:b4:3a:cb:67:59:03:dd:7a:5b:73:
6f:bd:c3:8a:34:db:92:09:66:5e:80:ba:10:ff:36:0c:a5:0f:
64:46:8c:9b:9b:ab:35:b9:79:3f:23:12:25:0a:21:d8:56:9c:
ab:7b:ed:72:51:ff:dd:28:29:54:2b:67:54:da:4d:37:75:9e:
57:06:54:5f:9c:27:bc:62:35:35:af:7c:03:ad:25:55:4f:ec:
1e:95:94:25:4e:30:8e:b1:31:0a:13:c6:19:c9:5e:bd:92:db:
19:83:4e:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Tch9euUurUdf6SiKiRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODhkMzBkMzUwMmQxZGZiYWU5MzBkNWVhOWNjOWQ3MjYz
ZTk1MDgwHhcNMjUxMDE5MTUwMTE3WhcNMjUxMDIwMTUwMTE3WjAzMTEwLwYDVQQD
EygzMTZmMGZiMjUyZGYyOTVlMDUxYzNiOTkwYWMxNzJiZjJmZWM4ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sjI75VhVxRxrYsLp8RacLTAB6ye
jlD7KSa3v4ILBsqC4azNocUa5sdF1x0vHKlWDUmvSXJ47jouy/VgjyFDe+Wd7Bfq
KvogVoE36o8ag/n269ByQNtMKnVAyyRh8uyCqzC+X5dS0AV1PakRUQPIimYuEIm3
xGA0tRUe+09Ej/jaR6T7yQKKuhETEeP05Ubjn5pbe8pdg+uOINMBx6eWDa7BRaZI
z+80Y3g+z5prVPV7QRxLwM6zYNGSSDCPvSh+y4W2B5CUkH8Tkpyz5NGVpBV8tuQy
qt9IvApq+kigeiDy9cs4d0zjGZ2X9HJC9jdE7nvnE9WR39y+phQl3kWRBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFvD7JS3yleBRw7mQrBcr8v7I41MB8GA1UdIwQY
MBaAFHqI0w01AtHfuukw1eqcydcmPpUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYt
MGExYzEzYTY4YmU0LzEvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYtMGExYzEzYTY4YmU0
LzEvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwholqhSv
XnsngThJdEaH2BcvW59z9DCQUQ9oX34IuKb55c6sW0OgWpE8NaPSOpnHR++usGuJ
ADtYBdko6vCktTiPn/oacaHTXj9DB4o580ajtKtuYu+RIOp94z8gdp3ag1HDvDrx
ibyWsMMlQwdxa4Q5lFa/rFLrS/JzEToSUgD/1Rab/6KvbDZcyFYenybhFCSySPqR
VIy0OstnWQPdeltzb73DijTbkglmXoC6EP82DKUPZEaMm5urNbl5PyMSJQoh2Fac
q3vtclH/3SgpVCtnVNpNN3WeVwZUX5wnvGI1Na98A60lVU/sHpWUJU4wjrExChPG
GclevZLbGYNOJA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:19 2025 by rpki-client