Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier: OVMzLULNxEib/DeYsRute+nGGtsf6A4tsJYd3ptr5k4=
Subject key identifier: AC:9F:1D:F2:0D:B1:4B:B8:33:AC:7B:9F:3E:C4:AE:7B:7C:24:36:28
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial: 019A4DE1844EDD4E571D70267A26AC8ED377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number: 162A
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: N9N0fYLYuH1UA6PgL2MFQlOIdzv+OVYws5rnT69I8Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:84:4e:dd:4e:57:1d:70:26:7a:26:ac:8e:d3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=ac9f1df20db14bb833ac7b9f3ec4ae7b7c243628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:bf:d3:34:ce:4d:42:73:92:2d:d6:db:09:
b1:b0:3d:4a:03:aa:4b:8e:ee:b0:f7:a2:c4:8a:0c:
08:55:72:60:4b:16:60:36:46:1c:fb:68:87:bb:87:
fd:a0:61:da:ab:67:da:c2:3a:b1:4e:19:a9:91:50:
73:bb:60:78:63:fe:1d:63:6b:13:16:27:ca:a0:8c:
dc:60:25:b3:e0:cf:cc:51:ba:a3:cf:57:53:78:27:
bc:6d:26:4c:ef:d3:ee:b7:7d:d3:8c:3b:8f:e3:10:
81:c5:1b:46:63:5d:49:66:ef:23:d5:3f:c2:d2:7d:
aa:fc:f2:58:c5:4c:01:11:6a:49:fa:c1:4d:85:33:
57:c7:14:37:e7:f1:67:f7:26:be:a1:74:d2:93:b2:
dc:dd:b4:c1:27:76:bf:ce:d2:28:af:35:2e:ab:7e:
28:46:22:61:94:a4:30:9d:14:48:fc:a1:ca:c5:af:
b1:c3:1d:cf:66:2d:9d:06:33:b0:e8:2a:8e:2a:d0:
29:7d:83:30:55:64:c3:b7:da:be:8c:d3:b9:6a:61:
60:3c:5e:62:46:c9:71:4a:d9:bf:df:11:43:dc:c1:
e2:18:fe:c6:f6:c1:cf:23:27:e2:64:64:08:08:6a:
b4:a3:74:f6:1a:e3:7e:e7:0a:87:17:19:eb:3c:a3:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:1D:F2:0D:B1:4B:B8:33:AC:7B:9F:3E:C4:AE:7B:7C:24:36:28
X509v3 Authority Key Identifier:
keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d0:c3:79:dc:20:ee:b7:85:48:64:dd:e4:75:25:35:c5:60:
81:fb:68:61:85:6c:cb:91:99:bd:5d:48:18:c7:7f:3b:b7:92:
3f:e4:8e:81:63:7d:61:4c:fc:f5:b7:1d:39:de:06:f5:53:12:
19:e8:66:11:90:af:4e:f8:54:40:77:9b:84:49:fc:57:8c:eb:
b9:36:73:85:13:b5:79:6a:26:c3:04:75:0b:e8:e8:53:ed:70:
01:09:8e:79:57:35:8a:e6:6d:60:3d:f6:48:32:6e:87:e3:e8:
a0:f0:b3:0f:0a:ce:bd:44:09:30:a5:b0:76:4b:27:4b:1d:08:
5c:8a:88:23:6e:73:4e:8d:99:19:9a:67:e1:f0:ac:18:7e:2e:
98:1f:f9:93:bc:df:d5:52:88:b9:72:04:bb:20:e2:64:44:33:
3c:3d:6f:b3:a2:5c:7b:0f:c5:a8:1b:06:cf:86:74:fb:7b:1a:
8c:2a:1d:32:4a:6a:1c:32:d4:6f:f8:56:9c:d1:78:6b:1c:f3:
b4:e2:14:8b:1c:7a:4a:e0:9d:6a:32:d8:96:5f:ea:f6:a5:e2:
a7:4b:fa:85:7c:b7:26:20:6a:6a:c5:bd:43:7e:c9:d4:d9:70:
c1:30:f8:6c:83:aa:fc:9e:6f:2b:38:04:c7:db:11:88:14:f7:
ac:4b:fe:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4YRO3U5XHXAmeiasjtN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMGFmOTczOGM5Zjc5OWI1NmY0YjkwMTdiZjgyMWI0ZmNh
MTM1YjgwHhcNMjUxMTA0MDgwMDE2WhcNMjUxMTA1MDgwMDE2WjAzMTEwLwYDVQQD
EyhhYzlmMWRmMjBkYjE0YmI4MzNhYzdiOWYzZWM0YWU3YjdjMjQzNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iS/0zTOTUJzki3W2wmxsD1KA6pL
ju6w96LEigwIVXJgSxZgNkYc+2iHu4f9oGHaq2fawjqxThmpkVBzu2B4Y/4dY2sT
FifKoIzcYCWz4M/MUbqjz1dTeCe8bSZM79Put33TjDuP4xCBxRtGY11JZu8j1T/C
0n2q/PJYxUwBEWpJ+sFNhTNXxxQ35/Fn9ya+oXTSk7Lc3bTBJ3a/ztIorzUuq34o
RiJhlKQwnRRI/KHKxa+xwx3PZi2dBjOw6CqOKtApfYMwVWTDt9q+jNO5amFgPF5i
RslxStm/3xFD3MHiGP7G9sHPIyfiZGQICGq0o3T2GuN+5wqHFxnrPKPtowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyfHfINsUu4M6x7nz7Ernt8JDYoMB8GA1UdIwQY
MBaAFHsK+XOMn3mbVvS5AXv4IbT8oTW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MjFlNzAtZjQ0Mi00MjUyLWFlYTAt
Y2ExMmY1M2Q3YjM0LzEvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MjFlNzAtZjQ0Mi00MjUyLWFlYTAtY2ExMmY1M2Q3YjM0
LzEvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdDDedwg
7reFSGTd5HUlNcVggftoYYVsy5GZvV1IGMd/O7eSP+SOgWN9YUz89bcdOd4G9VMS
GehmEZCvTvhUQHebhEn8V4zruTZzhRO1eWomwwR1C+joU+1wAQmOeVc1iuZtYD32
SDJuh+PooPCzDwrOvUQJMKWwdksnSx0IXIqII25zTo2ZGZpn4fCsGH4umB/5k7zf
1VKIuXIEuyDiZEQzPD1vs6Jcew/FqBsGz4Z0+3sajCodMkpqHDLUb/hWnNF4axzz
tOIUixx6SuCdajLYll/q9qXip0v6hXy3JiBqasW9Q37J1NlwwTD4bIOq/J5vKzgE
x9sRiBT3rEv+6A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:58 2025 by rpki-client