Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: EnIE2pOIqsueIcpmCXlFFucGtMrntXuovv7B+6Ku+r8=
Subject key identifier: 80:2E:D6:4B:DF:2E:38:32:3B:ED:94:99:0C:A3:38:1F:E6:1C:ED:60
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 019A533E9F7978C133E6350F3704B83B8768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 0E33
Signing time: Wed 05 Nov 2025 09:00:04 +0000
Manifest this update: Wed 05 Nov 2025 09:00:04 +0000
Manifest next update: Thu 06 Nov 2025 09:00:04 +0000
Files and hashes: 1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: XdKSEQwWZk2IS1RsHTZSosrYnERKXovB//uDzY8HBmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:9f:79:78:c1:33:e6:35:0f:37:04:b8:3b:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Nov 5 09:00:04 2025 GMT
Not After : Nov 6 09:00:04 2025 GMT
Subject: CN=802ed64bdf2e38323bed94990ca3381fe61ced60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:6c:e8:ef:65:1b:cb:f0:7a:2e:5c:64:d4:
e9:f2:71:ab:1b:79:d1:2c:0e:24:82:58:0a:4c:e4:
38:15:7e:cc:e4:c7:96:cd:05:43:68:e8:a8:ab:fd:
75:c5:81:02:9d:d9:1a:59:5d:6c:0c:78:fd:9b:af:
0b:01:5b:b1:03:e1:07:d8:b3:e7:28:a6:06:19:73:
e2:54:27:64:54:ee:83:b2:b0:55:3c:c3:fe:c9:ca:
50:26:84:9b:32:60:1e:c7:e8:23:ee:b8:c7:44:b9:
dd:67:df:5a:97:b1:ef:e4:e8:1f:cc:3b:cc:2a:22:
9a:a9:7b:b0:da:a8:cf:75:20:a8:fa:69:05:60:68:
9b:28:05:78:68:ba:62:1a:80:5e:3f:fc:fe:51:7f:
5b:0c:20:c3:c1:0e:82:7e:61:6b:71:cd:54:0b:04:
c4:2c:b6:e0:56:95:85:32:1e:dd:88:4b:1f:dd:cb:
72:49:b2:cd:3e:4c:ef:71:ff:cc:eb:ad:27:85:59:
73:ab:d4:44:df:48:49:7c:5d:60:6d:26:ab:d3:46:
61:e3:97:56:44:46:b0:16:ac:79:d8:9d:6e:9e:d3:
8a:75:e5:7e:f7:c3:66:81:c2:d5:31:de:20:c2:6c:
37:f0:80:84:a5:09:29:52:77:7c:a3:8d:07:eb:11:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2E:D6:4B:DF:2E:38:32:3B:ED:94:99:0C:A3:38:1F:E6:1C:ED:60
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ac:0e:dc:da:ae:4f:76:b6:07:aa:7f:66:8c:b5:57:0c:e5:
f7:c0:3b:f5:ae:8a:94:df:ba:08:18:c1:bf:91:2f:a7:96:84:
85:cd:75:73:73:35:9e:a9:d9:c8:75:1f:6f:ac:f3:c6:e9:07:
60:bb:b1:e7:67:51:ff:0b:4d:20:34:d7:1e:61:e9:4c:d0:7d:
94:c9:40:89:cf:40:72:1a:b2:47:2e:1e:50:de:0e:d2:b6:25:
2a:31:c6:cb:c5:66:d0:74:e8:13:14:03:e9:d7:e7:ef:f6:ae:
af:3e:27:34:88:8b:65:0b:45:4c:2e:9a:54:9e:ff:e2:6a:b4:
1e:a8:16:8b:1d:80:96:05:55:01:60:c2:c8:4a:63:29:9f:f5:
db:96:c8:81:fa:fa:31:50:5a:55:a0:ff:54:93:62:79:d2:46:
51:73:7f:6b:8d:e0:23:e0:8c:5e:0a:af:d3:b9:2d:8f:e3:b0:
61:4d:48:d8:c7:a3:bb:ca:0a:f3:fb:ed:8c:76:6f:f5:bf:1e:
be:7e:3b:64:cc:59:f1:f0:16:e4:68:db:11:44:cb:c3:04:5f:
9c:fe:17:e9:f4:0c:be:19:f7:20:2b:82:f6:a7:10:8e:f0:77:
93:a1:68:2d:2c:08:9a:5a:2c:40:83:c9:cb:14:fe:73:2d:c0:
9d:c6:05:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPp95eMEz5jUPNwS4O4doMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1
Mjg1ZDEwHhcNMjUxMTA1MDkwMDA0WhcNMjUxMTA2MDkwMDA0WjAzMTEwLwYDVQQD
Eyg4MDJlZDY0YmRmMmUzODMyM2JlZDk0OTkwY2EzMzgxZmU2MWNlZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyNs6O9lG8vwei5cZNTp8nGrG3nR
LA4kglgKTOQ4FX7M5MeWzQVDaOioq/11xYECndkaWV1sDHj9m68LAVuxA+EH2LPn
KKYGGXPiVCdkVO6DsrBVPMP+ycpQJoSbMmAex+gj7rjHRLndZ99al7Hv5OgfzDvM
KiKaqXuw2qjPdSCo+mkFYGibKAV4aLpiGoBeP/z+UX9bDCDDwQ6CfmFrcc1UCwTE
LLbgVpWFMh7diEsf3ctySbLNPkzvcf/M660nhVlzq9RE30hJfF1gbSar00Zh45dW
REawFqx52J1untOKdeV+98NmgcLVMd4gwmw38ICEpQkpUnd8o40H6xGMLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAu1kvfLjgyO+2UmQyjOB/mHO1gMB8GA1UdIwQY
MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt
ZjJiYjY5ZTc1ZTc0LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0
LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6wO3Nqu
T3a2B6p/Zoy1Vwzl98A79a6KlN+6CBjBv5Evp5aEhc11c3M1nqnZyHUfb6zzxukH
YLux52dR/wtNIDTXHmHpTNB9lMlAic9AchqyRy4eUN4O0rYlKjHGy8Vm0HToExQD
6dfn7/aurz4nNIiLZQtFTC6aVJ7/4mq0HqgWix2AlgVVAWDCyEpjKZ/125bIgfr6
MVBaVaD/VJNiedJGUXN/a43gI+CMXgqv07ktj+OwYU1I2Meju8oK8/vtjHZv9b8e
vn47ZMxZ8fAW5GjbEUTLwwRfnP4X6fQMvhn3ICuC9qcQjvB3k6FoLSwImlosQIPJ
yxT+cy3AncYF0A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:48:25 2025 by rpki-client