Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: wfWhU9qV94WarDjfjuxWH6jTQA+YG/MBSI+2t2dhNk0=
Subject key identifier: DD:5A:63:83:BD:36:55:A7:7A:C6:D6:E7:8B:FC:7B:B4:D3:F1:44:61
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019A4D7483778B05E2EFB899DE308213C56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0B65
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (hash: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=)
2: GFp4I3LPH9Bw9YNNwWHq6X0Ax-w.roa (hash: h4/2+JBtszFNERDw2wk+3LUP56k2mKHWWkwlM0aD/BM=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: ed62QaZgADP4nCMJugGDIsBH7w7S84Ur/d8VQN49vIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:83:77:8b:05:e2:ef:b8:99:de:30:82:13:c5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=dd5a6383bd3655a77ac6d6e78bfc7bb4d3f14461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:98:71:fb:22:cb:d5:aa:de:50:4f:f1:44:
09:a4:76:2a:72:ec:c7:63:dd:f5:4d:d7:b2:2c:1b:
ad:03:22:8d:83:d1:0a:a7:4b:47:27:fe:29:a0:77:
fc:a1:c6:7d:0e:2b:ba:20:c5:8f:8d:e5:57:c7:61:
7b:3c:64:0b:a7:2e:ad:3b:21:81:ae:b7:28:51:2e:
09:3b:b9:64:1e:3f:f5:53:1f:8f:38:0d:44:32:b0:
6c:0f:62:0d:2d:ee:00:ab:34:14:60:59:7b:4c:37:
36:f1:5d:ab:e8:eb:d1:4b:80:6e:ff:d2:3c:5d:07:
02:98:bc:fb:f8:2f:9e:2f:ae:96:7e:64:62:2f:27:
4a:93:4e:47:e7:ba:77:f1:ff:fe:d8:1e:9f:06:67:
6b:ac:27:36:a9:c6:b4:2e:9d:6b:ea:76:02:6e:68:
21:21:3c:1b:ab:3f:b4:fa:17:ce:7f:58:ec:40:bf:
85:9e:b7:0d:b3:31:9a:e6:85:41:b1:ee:fa:42:15:
5d:37:65:6d:4f:ca:6c:dd:ba:2a:a1:0c:64:74:e0:
67:11:b5:70:9d:7f:9f:cf:50:b4:f5:e9:c3:52:af:
e8:ea:a0:2b:32:98:0b:5b:4b:3b:be:8d:06:b3:07:
30:ad:c1:97:3f:98:51:35:9e:b6:55:c0:06:d5:e9:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:63:83:BD:36:55:A7:7A:C6:D6:E7:8B:FC:7B:B4:D3:F1:44:61
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:88:2c:d9:c6:b3:c8:83:c3:c1:24:0a:3a:68:28:ca:ad:
f0:30:5a:d1:3c:b3:2b:e6:7c:fa:82:b3:b6:53:f6:a5:ce:84:
01:a6:49:20:f3:5b:e9:b5:d8:e0:07:62:f6:07:cb:91:3d:86:
d9:2c:92:b4:82:57:5e:e2:7a:90:6c:38:d4:10:b5:ea:10:d5:
d0:a2:56:3d:08:54:9d:3a:26:95:b1:ec:c1:d1:b3:93:ca:ea:
1d:b5:70:00:4f:eb:12:a2:c3:d1:92:6d:23:be:be:f3:29:e1:
63:66:df:88:27:99:59:e7:f8:08:9e:70:12:6e:40:ed:7d:15:
32:76:f8:6e:71:bf:f6:38:08:97:f3:4d:1b:0a:dc:1e:2c:10:
62:e2:16:18:e7:f3:ae:e9:06:ec:a7:18:c0:a9:49:0b:30:c8:
53:a5:0e:e3:57:39:99:35:b6:0e:82:a4:3c:ec:60:a7:03:c5:
b0:bd:6a:b3:37:ed:74:8a:9b:e7:12:03:f9:17:db:72:d7:3c:
dc:23:33:73:44:21:91:11:13:03:6b:ce:94:dd:e1:c8:74:ec:
e6:40:ec:ad:14:33:a0:26:56:79:b7:12:03:37:28:b1:82:05:
b5:a0:77:a5:70:42:00:10:56:88:57:12:2a:f8:df:25:8d:54:
bc:27:cd:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdIN3iwXi77iZ3jCCE8VtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YWMzMTYzNWQwOTFiZTYxNTU3NDMzMTFmZTFkYjdjN2Fm
MzQ3N2IwHhcNMjUxMTA0MDYwMTEyWhcNMjUxMTA1MDYwMTEyWjAzMTEwLwYDVQQD
EyhkZDVhNjM4M2JkMzY1NWE3N2FjNmQ2ZTc4YmZjN2JiNGQzZjE0NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qKYcfsiy9Wq3lBP8UQJpHYqcuzH
Y931TdeyLButAyKNg9EKp0tHJ/4poHf8ocZ9Diu6IMWPjeVXx2F7PGQLpy6tOyGB
rrcoUS4JO7lkHj/1Ux+POA1EMrBsD2INLe4AqzQUYFl7TDc28V2r6OvRS4Bu/9I8
XQcCmLz7+C+eL66WfmRiLydKk05H57p38f/+2B6fBmdrrCc2qca0Lp1r6nYCbmgh
ITwbqz+0+hfOf1jsQL+FnrcNszGa5oVBse76QhVdN2VtT8ps3boqoQxkdOBnEbVw
nX+fz1C09enDUq/o6qArMpgLW0s7vo0GswcwrcGXP5hRNZ62VcAG1emhuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1aY4O9NlWnesbW54v8e7TT8URhMB8GA1UdIwQY
MBaAFHisMWNdCRvmFVdDMR/h23x680d7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQt
ZjZlOGJiZGJkMzNiLzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQtZjZlOGJiZGJkMzNi
LzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyOILNnG
s8iDw8EkCjpoKMqt8DBa0TyzK+Z8+oKztlP2pc6EAaZJIPNb6bXY4Adi9gfLkT2G
2SyStIJXXuJ6kGw41BC16hDV0KJWPQhUnTomlbHswdGzk8rqHbVwAE/rEqLD0ZJt
I76+8ynhY2bfiCeZWef4CJ5wEm5A7X0VMnb4bnG/9jgIl/NNGwrcHiwQYuIWGOfz
rukG7KcYwKlJCzDIU6UO41c5mTW2DoKkPOxgpwPFsL1qszftdIqb5xID+Rfbctc8
3CMzc0QhkRETA2vOlN3hyHTs5kDsrRQzoCZWebcSAzcosYIFtaB3pXBCABBWiFcS
KvjfJY1UvCfNNw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:08 2025 by rpki-client