Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
File: eBZ92WA7n7evUBVZyzc31HotVDc.mft (raw, json)
Hash identifier: JcIn4xRfT8lRILPboLyM9jejXGk3SVqMrtwEFSgY0Uc=
Subject key identifier: C2:7A:EF:F7:27:F4:47:50:C1:71:9C:D9:5A:70:DD:DE:E1:15:F0:99
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Certificate issuer: /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial: 019A52D21D0FE30420D633AF078F88F1AA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
Manifest number: 0A1A
Signing time: Wed 05 Nov 2025 07:01:32 +0000
Manifest this update: Wed 05 Nov 2025 07:01:32 +0000
Manifest next update: Thu 06 Nov 2025 07:01:32 +0000
Files and hashes: 1: 2Gebd9LuUSgIFGazk2B8jeGpGzM.roa (hash: lhcVXwCnPTOWkOSNYveyHZ5XywyRvkxiUOosibMUqpo=)
2: QEFLrHX1ISkaBR80EcGxpYG0Nrk.roa (hash: MlEeKO+aT5xJrUYhNCyO3P9FwfyYyvqUFBwtXW7+oKM=)
3: eBZ92WA7n7evUBVZyzc31HotVDc.crl (hash: 1EksZ/BlPAcKhsn+/72hq/aP7ad71COUzuAyGRq2CrU=)
4: kfN7a1gaYfFJ6QDXRCAHsUFksqU.roa (hash: 98fchG6ajtruPmSu1iHEitLSbFn7hxKxul3DfeyFstg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:1d:0f:e3:04:20:d6:33:af:07:8f:88:f1:aa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Validity
Not Before: Nov 5 07:01:32 2025 GMT
Not After : Nov 6 07:01:32 2025 GMT
Subject: CN=c27aeff727f44750c1719cd95a70dddee115f099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:3d:ad:83:fa:8c:ff:75:2b:b0:7f:de:3e:
50:45:5b:78:a3:3c:c1:d7:81:02:7e:e9:25:ce:44:
38:8a:3a:dd:d6:a2:17:1e:72:6d:c7:2e:87:0f:b0:
66:5b:0f:6b:15:3f:77:5e:8d:95:ba:89:3f:d4:96:
bf:97:d2:ca:c6:77:19:43:b2:7c:b4:76:1d:7a:33:
e3:bb:56:2c:1d:a4:6a:23:4d:85:31:9c:d9:72:9a:
27:af:fe:3b:a5:9c:57:13:3d:ab:cd:8f:45:b7:87:
8f:59:5f:79:39:b0:af:11:be:b3:99:1f:54:4f:69:
c4:57:95:f1:36:d0:90:3e:f9:19:3b:04:e9:02:8e:
12:dd:69:91:6b:e6:25:68:04:47:c4:52:d4:2c:88:
8a:ce:d4:f4:f5:08:f1:1d:8c:41:81:ed:c7:60:23:
ef:75:13:da:f2:7c:0b:29:2e:fc:88:25:97:3c:b2:
3d:dc:54:aa:0b:40:79:85:77:75:8c:a6:7a:3d:97:
c8:bc:3f:71:c6:e1:29:59:dc:04:4b:51:b2:5d:0d:
ec:07:02:e8:6c:59:9a:f6:ed:8f:a4:61:d8:8a:25:
08:bf:d7:1b:3c:9f:8a:2d:66:04:8a:8e:f2:2f:55:
d5:07:35:f4:55:4a:91:1c:48:12:26:6c:f1:c5:b3:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:EF:F7:27:F4:47:50:C1:71:9C:D9:5A:70:DD:DE:E1:15:F0:99
X509v3 Authority Key Identifier:
keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:7a:fd:db:f3:3b:97:ca:47:17:c6:a1:41:a6:fe:6c:53:b7:
1a:e9:2a:f3:8d:40:32:96:34:f9:2a:7a:80:8d:1e:cc:95:30:
d8:4c:85:b6:9d:13:2c:14:8a:5a:94:d5:33:3c:8a:7f:82:5f:
c4:13:49:e3:34:49:24:39:f5:12:2e:d3:83:23:5f:5f:37:49:
9e:a9:00:92:53:6a:30:e1:15:aa:45:11:2f:d8:e5:90:8f:ce:
42:9e:86:59:7e:92:b2:6a:e6:80:89:23:67:3f:53:de:cd:5e:
76:8f:90:44:19:90:7b:96:d6:b7:ab:70:62:cd:98:9a:6b:9d:
09:e7:0b:77:9d:c3:bd:36:4e:ea:c8:60:be:e8:cc:14:fd:6e:
dc:ba:78:0f:18:ff:41:09:6c:a2:8d:58:8b:22:cb:42:3b:d8:
8c:dd:96:67:72:a1:10:4c:5b:5a:02:33:c4:d6:ef:6a:32:e4:
0e:4c:0e:28:3c:89:cc:4a:a6:c0:27:0b:1e:36:bb:56:62:80:
bb:b5:13:ec:b4:3c:70:6e:14:dc:e1:ca:16:1b:dc:6f:70:56:
12:c6:9c:c0:24:da:22:e4:76:ce:63:27:ef:40:94:aa:4d:36:
a6:fd:f7:88:97:0a:86:5e:10:c6:56:a0:f9:e7:f3:c0:3d:2b:
d4:59:ed:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0h0P4wQg1jOvB4+I8apvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTY3ZGQ5NjAzYjlmYjdhZjUwMTU1OWNiMzczN2Q0N2Ey
ZDU0MzcwHhcNMjUxMTA1MDcwMTMyWhcNMjUxMTA2MDcwMTMyWjAzMTEwLwYDVQQD
EyhjMjdhZWZmNzI3ZjQ0NzUwYzE3MTljZDk1YTcwZGRkZWUxMTVmMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR09rYP6jP91K7B/3j5QRVt4ozzB
14ECfuklzkQ4ijrd1qIXHnJtxy6HD7BmWw9rFT93Xo2Vuok/1Ja/l9LKxncZQ7J8
tHYdejPju1YsHaRqI02FMZzZcponr/47pZxXEz2rzY9Ft4ePWV95ObCvEb6zmR9U
T2nEV5XxNtCQPvkZOwTpAo4S3WmRa+YlaARHxFLULIiKztT09QjxHYxBge3HYCPv
dRPa8nwLKS78iCWXPLI93FSqC0B5hXd1jKZ6PZfIvD9xxuEpWdwES1GyXQ3sBwLo
bFma9u2PpGHYiiUIv9cbPJ+KLWYEio7yL1XVBzX0VUqRHEgSJmzxxbOoSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ67/cn9EdQwXGc2Vpw3d7hFfCZMB8GA1UdIwQY
MBaAFHgWfdlgO5+3r1AVWcs3N9R6LVQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGIt
ZmY4NjU4ZTEzNTZjLzEvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGItZmY4NjU4ZTEzNTZj
LzEvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Xr92/M7
l8pHF8ahQab+bFO3Gukq841AMpY0+Sp6gI0ezJUw2EyFtp0TLBSKWpTVMzyKf4Jf
xBNJ4zRJJDn1Ei7TgyNfXzdJnqkAklNqMOEVqkURL9jlkI/OQp6GWX6SsmrmgIkj
Zz9T3s1edo+QRBmQe5bWt6twYs2YmmudCecLd53DvTZO6shgvujMFP1u3Lp4Dxj/
QQlsoo1YiyLLQjvYjN2WZ3KhEExbWgIzxNbvajLkDkwOKDyJzEqmwCcLHja7VmKA
u7UT7LQ8cG4U3OHKFhvcb3BWEsacwCTaIuR2zmMn70CUqk02pv33iJcKhl4Qxlag
+efzwD0r1FntVg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:25 2025 by rpki-client