Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
File: EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json)
Hash identifier: r5JNtCjMxqHjyvZYC6Pzr6d8AZ637IZFN5heZt002QE=
Subject key identifier: 8E:1A:38:36:67:77:1A:2A:99:A4:95:BD:BE:20:6E:AD:60:D8:05:3C
Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Certificate issuer: /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Certificate serial: 019A5451A0A29FAA8DB8C7D98A1EE0B23EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
Manifest number: 74
Signing time: Wed 05 Nov 2025 14:00:26 +0000
Manifest this update: Wed 05 Nov 2025 14:00:26 +0000
Manifest next update: Thu 06 Nov 2025 14:00:26 +0000
Files and hashes: 1: 9rnL1t5Ldor0JB3KN3KrYlnILFc.roa (hash: 00esWyqmIW6yBsmGpeX9QfYrAUi9bLeAI/5cffpcKB8=)
2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: 2AsN/l4d7sr5+vsdB5i3vdYBybIUNL3ecKzWNrLykwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:a0:a2:9f:aa:8d:b8:c7:d9:8a:1e:e0:b2:3e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Validity
Not Before: Nov 5 14:00:26 2025 GMT
Not After : Nov 6 14:00:26 2025 GMT
Subject: CN=8e1a383667771a2a99a495bdbe206ead60d8053c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:57:19:32:44:29:f4:1d:eb:e1:df:2c:68:
ab:13:cf:5f:7a:e2:6e:33:18:dc:82:f6:5f:6a:f2:
47:8f:06:ee:29:ba:9e:c2:e8:81:ea:f1:14:32:57:
0c:2b:10:e1:29:bd:94:24:c1:e0:a3:71:d1:b9:28:
90:8b:cb:da:f7:10:b4:f2:e8:a2:42:0f:50:b3:71:
c4:e4:32:d1:a0:6a:46:65:96:85:14:63:a7:08:16:
f0:e7:25:35:a3:a7:10:aa:0d:5f:39:d5:d8:a7:4c:
6f:fc:5c:e3:ad:be:85:8d:62:65:c1:4c:3d:41:74:
95:fa:77:5c:22:9f:4c:11:49:c9:cf:4c:7e:ec:d2:
3d:cb:bd:86:69:7f:8a:59:96:ce:df:33:8a:bb:d0:
54:14:74:e7:fc:6a:d9:3a:b6:c8:1d:78:44:fd:34:
cc:c1:a6:a9:b6:c2:e4:f5:8e:ec:3a:5c:18:0d:99:
86:0c:85:dd:29:80:cd:a9:b5:e6:a4:fe:c9:48:e8:
c0:4a:53:be:c2:2b:8b:e3:8a:78:10:22:1d:d4:a5:
27:4c:cb:b0:9d:f2:64:6b:13:e4:3c:6c:23:d8:60:
e8:f6:59:0b:cc:2f:ce:88:8d:cd:aa:39:0c:13:b3:
ed:ba:ad:c5:d6:24:cc:35:b2:2a:44:68:23:5e:93:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:38:36:67:77:1A:2A:99:A4:95:BD:BE:20:6E:AD:60:D8:05:3C
X509v3 Authority Key Identifier:
keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:20:fd:4f:cd:34:05:d0:06:43:75:f1:1b:d4:db:d2:03:
ad:2b:80:43:d0:a7:9e:8e:34:2a:d8:4e:fc:71:d2:64:1a:4d:
00:ee:09:3c:02:eb:f4:ce:4f:94:b3:26:34:fd:1b:66:e8:f3:
19:c1:04:02:ab:1c:a2:66:d9:32:d4:16:4f:d8:ff:e9:98:5a:
05:d0:7a:2b:73:3f:21:c5:b6:77:5a:1a:2e:25:cf:59:bd:be:
ee:9b:2b:38:05:ed:32:59:08:de:e9:3a:03:29:0d:b0:bc:d1:
47:20:ed:61:13:5b:dd:08:06:10:5f:40:8b:60:49:b4:ce:f2:
3c:60:e0:45:19:b6:8c:95:1b:2e:22:6e:95:90:4e:63:16:16:
ce:e0:a6:a9:c9:4d:40:d3:fa:1a:f2:c8:c2:0f:24:7e:b3:77:
86:9b:6a:07:35:16:00:3e:6c:b1:e4:8c:ae:61:15:78:01:1e:
d6:52:5a:63:bb:d7:09:c2:f5:26:59:80:5e:f9:03:fc:48:8d:
1e:33:5c:f0:b0:53:ee:da:4f:21:81:03:0e:a2:04:c1:b4:d8:
4b:5a:3b:c2:31:5e:06:db:08:98:7a:75:2c:bc:7b:ee:c4:fd:
e5:85:25:a9:da:12:20:b7:76:54:c7:15:86:4b:aa:ef:bc:50:
90:b2:69:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUaCin6qNuMfZih7gsj6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZTA1ZGFiYmNmMTRkNTMwMTVhYjhmZjFlNGJkNzI5N2Fj
YjBlNzcwHhcNMjUxMTA1MTQwMDI2WhcNMjUxMTA2MTQwMDI2WjAzMTEwLwYDVQQD
Eyg4ZTFhMzgzNjY3NzcxYTJhOTlhNDk1YmRiZTIwNmVhZDYwZDgwNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDtXGTJEKfQd6+HfLGirE89feuJu
MxjcgvZfavJHjwbuKbqewuiB6vEUMlcMKxDhKb2UJMHgo3HRuSiQi8va9xC08uii
Qg9Qs3HE5DLRoGpGZZaFFGOnCBbw5yU1o6cQqg1fOdXYp0xv/Fzjrb6FjWJlwUw9
QXSV+ndcIp9MEUnJz0x+7NI9y72GaX+KWZbO3zOKu9BUFHTn/GrZOrbIHXhE/TTM
waaptsLk9Y7sOlwYDZmGDIXdKYDNqbXmpP7JSOjASlO+wiuL44p4ECId1KUnTMuw
nfJkaxPkPGwj2GDo9lkLzC/OiI3NqjkME7Ptuq3F1iTMNbIqRGgjXpPOnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4aODZndxoqmaSVvb4gbq1g2AU8MB8GA1UdIwQY
MBaAFBDgXau88U1TAVq4/x5L1yl6yw53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEt
ZTYyM2Q1M2Y4YmIxLzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEtZTYyM2Q1M2Y4YmIx
LzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcswg/U/N
NAXQBkN18RvU29IDrSuAQ9Cnno40KthO/HHSZBpNAO4JPALr9M5PlLMmNP0bZujz
GcEEAqscombZMtQWT9j/6ZhaBdB6K3M/IcW2d1oaLiXPWb2+7psrOAXtMlkI3uk6
AykNsLzRRyDtYRNb3QgGEF9Ai2BJtM7yPGDgRRm2jJUbLiJulZBOYxYWzuCmqclN
QNP6GvLIwg8kfrN3hptqBzUWAD5sseSMrmEVeAEe1lJaY7vXCcL1JlmAXvkD/EiN
HjNc8LBT7tpPIYEDDqIEwbTYS1o7wjFeBtsImHp1LLx77sT95YUlqdoSILd2VMcV
hkuq77xQkLJpTw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:23:02 2025 by rpki-client