Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File: Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier: tnBz2A1atjFjxnzHrcDS56OFr/wgx8qgWGfdyCF2aMI=
Subject key identifier: 84:4F:B2:E8:52:E2:27:5F:F8:71:C0:20:2E:5A:63:9A:41:02:2C:E0
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 019A4F999027113D763760FB605B1A5D20AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number: 0EC9
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: 7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa (hash: +YzcMttJR4cOnsIWs0CBLy1v8W7l7gh7eA5Qk1ZfF+0=)
2: E-owwaRkGBOgTW0gbT6t0z8jYpA.roa (hash: MzJgxXYLXxOfkRd2uBOOGYCYN+rSmPW8si+rCfGvcKY=)
3: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: m1Wr3ynir2GbWJjY0UIsHY8K923mE4PIPq8FcvIM2L8=)
4: JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa (hash: Hw2s88epzhilOmADkh2atAnnbAnZEDzpVgH8yNCsz2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:90:27:11:3d:76:37:60:fb:60:5b:1a:5d:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=844fb2e852e2275ff871c0202e5a639a41022ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:9c:9d:e9:64:86:9e:44:cc:4b:b6:62:3d:
1b:55:a9:9d:d3:5d:c7:41:aa:77:cd:d8:a3:d8:fe:
32:92:f7:56:7d:65:48:72:80:92:c7:85:88:e7:ea:
2b:bc:aa:ae:3f:56:7d:d4:c6:7f:21:dc:02:25:af:
7c:35:53:34:04:90:56:aa:32:c1:91:d8:fe:9c:73:
96:76:a8:3b:9c:66:e8:b0:0b:1c:99:a9:87:84:a8:
86:7f:36:21:6e:1c:a8:5d:5e:48:df:18:c8:86:e0:
0a:1f:5a:4b:77:69:3c:fc:c0:bf:79:c1:e7:7a:43:
40:f5:af:a2:22:11:ea:62:c1:54:9d:5a:6c:d7:bc:
d4:88:a7:e0:24:fc:d0:94:1c:2c:0d:61:ef:e2:56:
d5:cc:b7:1b:b3:25:d8:95:d1:64:e8:c1:33:ee:71:
62:c9:8e:fa:9f:af:74:06:77:7c:18:45:d4:85:48:
6c:c7:a0:9c:10:1f:f7:6d:82:e6:c6:51:12:b6:9e:
81:a7:da:44:54:37:0a:cf:f5:db:c7:71:b3:d2:79:
5b:3e:27:53:f6:65:42:83:b6:5b:1a:63:94:40:0c:
88:85:ca:bf:9f:73:da:d7:b2:3a:9a:ad:cc:5c:7b:
8f:81:d2:28:13:32:d5:46:d4:51:7a:bc:21:83:c4:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4F:B2:E8:52:E2:27:5F:F8:71:C0:20:2E:5A:63:9A:41:02:2C:E0
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:7f:ce:df:ad:b3:33:fd:51:96:10:02:95:f8:e8:62:2d:
2e:02:bb:ec:97:06:c8:58:0c:3f:13:f8:0a:ae:f9:3e:bb:ca:
88:5c:1f:01:ee:4d:1c:81:82:d1:cc:06:0b:71:41:44:4f:70:
83:cf:cb:b4:9b:d5:b4:d1:d1:6a:7c:eb:3a:0d:47:cd:ed:3a:
4a:f1:b9:20:8e:df:c3:4f:2e:78:92:6f:ba:ad:c0:e8:2b:47:
b7:24:ab:30:44:09:6c:c3:f9:eb:b4:6d:cd:8d:67:d1:2d:93:
62:35:d1:68:25:5b:a0:f7:5b:df:cd:41:b6:53:dc:b9:b5:32:
c6:60:c9:6f:a2:df:68:fc:bb:b6:e9:32:cd:3c:44:8a:88:07:
89:2d:e8:a3:9d:a0:61:74:b0:ad:5d:ee:63:a3:40:3c:df:28:
45:40:11:a6:6d:f0:b9:3a:01:1b:2d:11:80:1e:57:8b:ff:3b:
d4:5c:a0:cc:0d:ef:ea:6e:96:f6:c3:92:6c:15:ee:97:8a:21:
0b:72:7e:61:2c:32:36:33:00:41:02:cb:8a:58:17:fe:bc:01:
32:29:fa:69:01:97:1e:77:c6:a2:17:22:bd:99:05:a2:b2:68:
80:d2:8b:d3:c2:de:82:ee:ea:dd:35:3c:7b:db:10:ee:06:23:
f8:21:e0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmZAnET12N2D7YFsaXSCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWEzNzI4MmRkOTkyZDg4NjU4MTYwNTU5ZTA0ODM5Mjc5
OGM4NGIwHhcNMjUxMTA0MTYwMDU1WhcNMjUxMTA1MTYwMDU1WjAzMTEwLwYDVQQD
Eyg4NDRmYjJlODUyZTIyNzVmZjg3MWMwMjAyZTVhNjM5YTQxMDIyY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVacnelkhp5EzEu2Yj0bVamd013H
Qap3zdij2P4ykvdWfWVIcoCSx4WI5+orvKquP1Z91MZ/IdwCJa98NVM0BJBWqjLB
kdj+nHOWdqg7nGbosAscmamHhKiGfzYhbhyoXV5I3xjIhuAKH1pLd2k8/MC/ecHn
ekNA9a+iIhHqYsFUnVps17zUiKfgJPzQlBwsDWHv4lbVzLcbsyXYldFk6MEz7nFi
yY76n690Bnd8GEXUhUhsx6CcEB/3bYLmxlEStp6Bp9pEVDcKz/Xbx3Gz0nlbPidT
9mVCg7ZbGmOUQAyIhcq/n3Pa17I6mq3MXHuPgdIoEzLVRtRRerwhg8SBSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRPsuhS4idf+HHAIC5aY5pBAizgMB8GA1UdIwQY
MBaAFBIaNygt2ZLYhlgWBVngSDknmMhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMt
MDgyYjFmN2YwZGIyLzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMtMDgyYjFmN2YwZGIy
LzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlJ/zt+t
szP9UZYQApX46GItLgK77JcGyFgMPxP4Cq75PrvKiFwfAe5NHIGC0cwGC3FBRE9w
g8/LtJvVtNHRanzrOg1Hze06SvG5II7fw08ueJJvuq3A6CtHtySrMEQJbMP567Rt
zY1n0S2TYjXRaCVboPdb381BtlPcubUyxmDJb6LfaPy7tukyzTxEiogHiS3oo52g
YXSwrV3uY6NAPN8oRUARpm3wuToBGy0RgB5Xi/871FygzA3v6m6W9sOSbBXul4oh
C3J+YSwyNjMAQQLLilgX/rwBMin6aQGXHnfGohcivZkForJogNKL08Legu7q3TU8
e9sQ7gYj+CHg9A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:37 2025 by rpki-client