Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
File: eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json)
Hash identifier: yW8jFDDc1RfPbgmNaNO0PrQcpYt4Sa/21gIPuVLUAzk=
Subject key identifier: 8A:F8:4D:79:6A:4F:93:92:5B:BC:89:E6:E4:8E:18:90:CB:28:A2:1E
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial: 019A51F57F58D2DF8AFDBF7FB1C5820BC136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 03:00:34 +0000
Manifest this update: Wed 05 Nov 2025 03:00:34 +0000
Manifest next update: Thu 06 Nov 2025 03:00:34 +0000
Files and hashes: 1: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: tthEG4vG57UD97pDVfBbpPP1sCv1NoB1R8UcGPJJsbY=)
2: rO3rBHeUdzO45KEgLURgvLQ06xY.roa (hash: eqYadC0MWylIdYu574Ax0sVtpnO5xgmNX3OGp/S+dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:7f:58:d2:df:8a:fd:bf:7f:b1:c5:82:0b:c1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Validity
Not Before: Nov 5 03:00:34 2025 GMT
Not After : Nov 6 03:00:34 2025 GMT
Subject: CN=8af84d796a4f93925bbc89e6e48e1890cb28a21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:a8:51:a4:68:0a:2c:5b:5c:9a:45:c7:9e:
f6:be:f4:26:06:b0:04:bc:d3:3d:f6:13:15:ce:5c:
b8:c6:45:27:77:99:22:49:cf:f8:c3:0a:15:eb:1c:
7f:15:b4:a8:e9:4e:f2:95:49:33:fc:b9:a3:08:8d:
b8:9f:bb:fa:9b:ab:db:c2:10:43:09:55:e9:53:47:
97:c2:20:42:17:49:0c:2f:34:95:9c:ec:24:d8:51:
41:9c:a2:b0:6e:da:4b:90:5b:cf:5f:06:cd:bc:2a:
17:b3:9c:f5:67:3c:ff:cf:ed:0e:83:e3:bf:a7:17:
a0:52:84:8c:04:99:c1:ef:84:c7:d5:83:40:a3:32:
60:8b:fe:88:97:df:27:0b:94:8d:b1:b7:a1:08:a4:
52:dc:3a:28:2f:e9:b3:c1:61:f0:df:de:1d:59:c0:
e6:d2:da:5c:64:a1:9d:ad:90:3d:2a:83:ca:ae:9a:
be:37:28:69:ae:53:90:c0:fa:7e:1e:cc:23:0b:fb:
ee:71:7e:7f:f5:2e:5f:60:35:3a:b6:a8:65:0e:8b:
a6:3e:21:98:2a:08:54:6b:8a:5a:24:3f:e8:35:f3:
ea:4d:91:be:51:24:25:56:50:5b:1e:c6:83:b9:29:
94:d3:82:99:c1:4c:28:43:1c:4e:1b:39:f3:81:e4:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F8:4D:79:6A:4F:93:92:5B:BC:89:E6:E4:8E:18:90:CB:28:A2:1E
X509v3 Authority Key Identifier:
keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:44:57:e0:cd:03:ca:07:fb:ec:8b:6a:a3:fc:84:8a:87:82:
e4:cf:e1:27:db:4e:6e:6d:c8:35:6f:1d:45:5e:e4:08:e7:9d:
a4:77:3b:a9:9f:b6:77:c7:1c:1f:da:d4:a3:d1:42:32:b2:f9:
67:4d:63:31:8c:c8:58:f1:62:58:91:d8:b8:27:e5:21:3d:c9:
b8:bf:50:bd:81:2e:0c:6f:ab:fe:81:cd:01:0f:4c:0d:9d:13:
bb:07:0c:d0:f3:48:ca:89:52:47:3f:92:9d:1c:d7:a1:31:d9:
0a:e0:51:a5:24:87:2e:ba:cc:5a:48:5f:00:06:ac:4f:e5:6f:
62:c4:e9:5b:fa:8d:3e:a3:e3:07:7f:a0:16:04:d2:b7:3c:2c:
30:5a:96:bb:43:06:53:be:a8:ec:2f:f6:60:40:1a:b3:33:20:
e1:9a:96:6c:4a:4f:11:dd:4b:ba:99:0e:06:9c:1b:5f:9b:2a:
c5:e2:77:13:40:bf:ae:53:18:47:5b:ee:62:87:88:71:fa:c7:
cd:41:93:f6:8e:73:4d:be:e0:97:a2:64:f3:bf:67:76:0a:fe:
18:60:38:30:b8:7b:73:3c:dd:d3:65:31:f4:65:2b:0b:9a:a4:
c7:0c:b7:48:f0:c8:54:ee:6b:46:ae:84:6b:10:25:3c:36:9a:
78:ee:06:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9X9Y0t+K/b9/scWCC8E2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGI4NWI1MWUzM2RmMGM2OTRkYmQ3N2JjOGMyYmEzZWFi
NGQ1MTkwHhcNMjUxMTA1MDMwMDM0WhcNMjUxMTA2MDMwMDM0WjAzMTEwLwYDVQQD
Eyg4YWY4NGQ3OTZhNGY5MzkyNWJiYzg5ZTZlNDhlMTg5MGNiMjhhMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R2oUaRoCixbXJpFx572vvQmBrAE
vNM99hMVzly4xkUnd5kiSc/4wwoV6xx/FbSo6U7ylUkz/LmjCI24n7v6m6vbwhBD
CVXpU0eXwiBCF0kMLzSVnOwk2FFBnKKwbtpLkFvPXwbNvCoXs5z1Zzz/z+0Og+O/
pxegUoSMBJnB74TH1YNAozJgi/6Il98nC5SNsbehCKRS3DooL+mzwWHw394dWcDm
0tpcZKGdrZA9KoPKrpq+NyhprlOQwPp+HswjC/vucX5/9S5fYDU6tqhlDoumPiGY
KghUa4paJD/oNfPqTZG+USQlVlBbHsaDuSmU04KZwUwoQxxOGznzgeQskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr4TXlqT5OSW7yJ5uSOGJDLKKIeMB8GA1UdIwQY
MBaAFHmLhbUeM98MaU29d7yMK6PqtNUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEt
OTQwZGZiOTYxNjMwLzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEtOTQwZGZiOTYxNjMw
LzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWERX4M0D
ygf77Itqo/yEioeC5M/hJ9tObm3INW8dRV7kCOedpHc7qZ+2d8ccH9rUo9FCMrL5
Z01jMYzIWPFiWJHYuCflIT3JuL9QvYEuDG+r/oHNAQ9MDZ0TuwcM0PNIyolSRz+S
nRzXoTHZCuBRpSSHLrrMWkhfAAasT+VvYsTpW/qNPqPjB3+gFgTStzwsMFqWu0MG
U76o7C/2YEAaszMg4ZqWbEpPEd1LupkOBpwbX5sqxeJ3E0C/rlMYR1vuYoeIcfrH
zUGT9o5zTb7gl6Jk879ndgr+GGA4MLh7czzd02Ux9GUrC5qkxwy3SPDIVO5rRq6E
axAlPDaaeO4GNQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:33 2025 by rpki-client