Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: sqAdNuPR0kokxaMUoYRhMoBRGtNg4rnt4dLC5iA+WG8=
Subject key identifier: E7:1B:66:1D:41:58:F3:91:B5:1C:6D:2E:D3:4A:FB:14:E2:7F:78:DB
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 019A5007618A24D1648CB141FD7B350CF45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 18:00:52 +0000
Manifest this update: Tue 04 Nov 2025 18:00:52 +0000
Manifest next update: Wed 05 Nov 2025 18:00:52 +0000
Files and hashes: 1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: vc0b3n3xU3cf+RilQnKqTDKi0RSuS1ui0hFaDRpvmow=)
2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:61:8a:24:d1:64:8c:b1:41:fd:7b:35:0c:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Nov 4 18:00:52 2025 GMT
Not After : Nov 5 18:00:52 2025 GMT
Subject: CN=e71b661d4158f391b51c6d2ed34afb14e27f78db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:21:e3:9a:32:4e:e9:1c:09:bf:6f:30:77:
be:b9:c1:7b:39:6c:fd:c3:40:eb:60:4e:b7:b0:63:
d2:2e:dc:35:40:f5:df:20:38:19:ab:85:73:59:44:
9e:07:82:56:82:9a:3b:25:db:13:45:30:74:60:64:
88:f6:0f:8b:1d:a3:89:3a:31:a5:e3:9a:21:46:8b:
5f:45:09:e2:f8:74:66:b8:b9:50:50:d1:22:7b:c3:
9b:d3:16:95:25:98:a5:2b:4c:3d:55:be:64:c9:2a:
0d:65:7a:5c:e5:61:40:2e:94:c5:68:c7:3c:b0:e1:
93:a5:97:e5:15:ef:e2:5d:ba:fe:30:0f:2a:ca:55:
12:08:c5:d8:fb:b5:fc:04:c6:a6:df:37:62:f3:66:
65:29:80:8f:0c:06:a5:60:e4:05:03:ee:0e:42:34:
5b:36:2c:1f:5b:b4:97:d6:6b:1f:dd:05:55:53:73:
a3:b4:fe:33:98:28:ad:2a:16:c1:44:0d:40:63:5e:
4d:77:7c:4d:13:f5:55:d7:33:4a:ec:85:b1:b8:93:
3b:14:5b:82:43:d3:ef:56:c4:0d:a7:28:4e:e1:c9:
fe:d6:e2:28:3e:7d:f2:d8:36:ef:79:39:27:c2:f4:
4c:eb:9d:c6:fd:dd:2d:48:f3:3c:90:c7:48:4a:33:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1B:66:1D:41:58:F3:91:B5:1C:6D:2E:D3:4A:FB:14:E2:7F:78:DB
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:72:30:82:4d:9e:54:5a:ef:3e:18:28:2e:c8:e0:0e:c8:b4:
85:53:6a:81:dc:c1:94:02:87:54:71:ae:74:da:52:49:79:72:
45:d3:c6:fc:79:7c:e2:90:b9:8d:1c:b0:b8:1e:72:e1:19:10:
b7:b9:f4:bc:ae:50:a0:28:d0:06:d0:24:92:b1:7a:88:ea:63:
8d:76:9f:5e:1d:da:80:03:72:8e:40:c2:c6:d1:c5:6b:1e:d9:
16:49:fc:fd:f7:04:82:4d:3d:5a:17:1a:af:ab:e5:75:88:74:
f3:ab:a8:b0:04:a4:ec:e4:96:5b:3e:cb:9b:fb:8e:3b:9b:db:
aa:fe:e5:44:e0:a7:a0:00:c0:d9:ba:a4:64:b7:3b:43:69:6f:
7c:fe:e8:05:22:3b:4e:4e:20:b1:7e:a5:c6:ec:58:09:c2:20:
e0:35:c0:c0:fa:b0:30:70:73:2c:e7:1e:f8:bd:ea:46:86:09:
df:28:cb:fa:dd:35:38:34:f9:5e:e7:b9:72:c0:75:1c:6d:7e:
ee:4d:7a:2d:1a:d2:38:97:9a:97:ef:9a:37:d7:a7:99:cc:5f:
12:d3:2b:4f:b1:b1:01:b9:cb:15:b9:d0:8e:c6:61:93:70:fe:
71:62:12:c8:2e:5b:00:77:81:59:85:4c:61:2f:63:31:c0:3d:
5c:39:5f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB2GKJNFkjLFB/Xs1DPRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwN2E1YWYxOTZiOGEwZWE5NjBjMjhmNmIzZTc1MjkxYzdl
ODYxY2QwHhcNMjUxMTA0MTgwMDUyWhcNMjUxMTA1MTgwMDUyWjAzMTEwLwYDVQQD
EyhlNzFiNjYxZDQxNThmMzkxYjUxYzZkMmVkMzRhZmIxNGUyN2Y3OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKUh45oyTukcCb9vMHe+ucF7OWz9
w0DrYE63sGPSLtw1QPXfIDgZq4VzWUSeB4JWgpo7JdsTRTB0YGSI9g+LHaOJOjGl
45ohRotfRQni+HRmuLlQUNEie8Ob0xaVJZilK0w9Vb5kySoNZXpc5WFALpTFaMc8
sOGTpZflFe/iXbr+MA8qylUSCMXY+7X8BMam3zdi82ZlKYCPDAalYOQFA+4OQjRb
NiwfW7SX1msf3QVVU3OjtP4zmCitKhbBRA1AY15Nd3xNE/VV1zNK7IWxuJM7FFuC
Q9PvVsQNpyhO4cn+1uIoPn3y2DbveTknwvRM653G/d0tSPM8kMdISjMWNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcbZh1BWPORtRxtLtNK+xTif3jbMB8GA1UdIwQY
MBaAFBB6WvGWuKDqlgwo9rPnUpHH6GHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjIt
ZjkyOWUyNTUxNjI3LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjItZjkyOWUyNTUxNjI3
LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3Iwgk2e
VFrvPhgoLsjgDsi0hVNqgdzBlAKHVHGudNpSSXlyRdPG/Hl84pC5jRywuB5y4RkQ
t7n0vK5QoCjQBtAkkrF6iOpjjXafXh3agANyjkDCxtHFax7ZFkn8/fcEgk09Whca
r6vldYh086uosASk7OSWWz7Lm/uOO5vbqv7lROCnoADA2bqkZLc7Q2lvfP7oBSI7
Tk4gsX6lxuxYCcIg4DXAwPqwMHBzLOce+L3qRoYJ3yjL+t01ODT5Xue5csB1HG1+
7k16LRrSOJeal++aN9enmcxfEtMrT7GxAbnLFbnQjsZhk3D+cWISyC5bAHeBWYVM
YS9jMcA9XDlfZw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:47 2025 by rpki-client