Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier: XTMmSpfLEoLCO8YPW8l4MwY+NFuZDMe/JTg6pXjmKxM=
Subject key identifier: 7D:E4:4B:E9:66:37:BE:D4:EC:ED:70:E6:59:FF:1F:84:2C:19:04:89
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 019A4EF53BA51515256E9198FF14FE310DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number: 0CB0
Signing time: Tue 04 Nov 2025 13:01:25 +0000
Manifest this update: Tue 04 Nov 2025 13:01:25 +0000
Manifest next update: Wed 05 Nov 2025 13:01:25 +0000
Files and hashes: 1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: MsAmuhhNlVVq6FFaIdYSzlMDA+/BpdQzaj3c0jEy0GY=)
2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=)
3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3b:a5:15:15:25:6e:91:98:ff:14:fe:31:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Nov 4 13:01:25 2025 GMT
Not After : Nov 5 13:01:25 2025 GMT
Subject: CN=7de44be96637bed4eced70e659ff1f842c190489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:45:43:b4:be:91:f0:e8:d4:e0:10:c3:31:ae:
50:9b:63:a8:2e:77:5c:16:b4:59:0a:2f:9c:7f:b7:
91:ee:61:60:2e:82:2b:7c:c3:c9:bd:d2:af:1c:9b:
10:68:12:3d:1c:93:dc:1f:e9:7e:82:d9:94:ac:c4:
7a:a6:41:3e:bf:99:25:78:04:88:73:c5:03:30:b1:
cc:9d:ea:c6:54:1c:93:f3:72:6b:c6:18:37:47:f6:
2e:ac:00:22:7c:49:0b:9f:3f:23:05:37:80:9c:cc:
55:e0:f0:28:d8:7b:e1:8a:69:af:5f:26:de:d4:98:
af:e1:49:d0:25:ab:dd:a4:43:75:aa:a4:6d:d8:18:
ff:6c:8e:48:51:4c:30:31:41:cc:5b:05:38:61:3a:
83:2d:09:c6:4e:95:c5:05:94:86:ea:2f:ab:9f:25:
f5:2d:a1:1f:b2:e0:21:73:8c:e8:bc:b3:33:0f:d7:
69:8c:1a:70:ac:8f:7d:01:b8:f6:52:e7:78:af:ab:
c7:81:9f:13:34:70:36:d6:46:5f:b3:81:8f:84:50:
5e:9c:b0:48:31:ab:bc:58:6e:f9:1d:a4:02:f2:03:
4b:8f:f2:7e:3f:c0:bf:d4:bb:ba:21:90:2f:14:03:
42:5f:c5:2f:39:f3:6d:5b:1b:1f:ad:9f:75:f7:d7:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:4B:E9:66:37:BE:D4:EC:ED:70:E6:59:FF:1F:84:2C:19:04:89
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:94:c7:bf:14:de:a4:c9:28:29:90:83:bf:e5:5e:bf:ba:7a:
7c:10:59:ca:82:64:69:1b:32:f6:25:35:04:68:c9:cd:98:9e:
0f:d9:00:4a:20:e2:cd:09:ab:a8:87:c6:5e:ad:f5:df:4f:58:
c5:cb:85:7f:fd:1a:6b:48:75:bb:77:3f:8c:c7:06:78:92:c1:
17:fe:13:2d:8a:a5:80:ce:84:3e:1c:11:d2:c5:7e:78:bc:65:
74:da:c5:83:a1:b4:a4:e4:5b:fd:c8:cf:be:85:99:15:2d:66:
3d:0b:78:99:8e:8f:22:04:42:3e:aa:49:25:69:a3:f3:56:64:
0d:f0:0d:8b:1c:33:8f:b4:fa:d5:c4:13:16:85:ed:ee:68:99:
ba:c9:a6:c5:13:06:f4:25:4f:34:b0:59:5a:59:5a:38:70:89:
6c:95:a9:7d:d2:78:c0:c6:92:36:db:8f:a2:4e:22:82:09:65:
23:e4:65:a9:29:12:91:78:8d:89:11:20:6a:01:ca:e2:77:e8:
c9:95:fc:68:9b:20:32:c8:da:23:f8:da:45:59:88:71:c5:f1:
9b:26:6e:22:6c:bd:4b:8a:3b:fe:d0:bc:82:97:87:b7:f0:0c:
4d:04:cd:66:32:a2:5d:3b:af:4d:61:51:c6:67:78:cd:47:16:
84:2d:ad:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9TulFRUlbpGY/xT+MQ36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzYyZDc4MzI4NDY1OWRjMDRlZWRhZjhiOGE2ZmU2ZTkz
MGJkMjcwHhcNMjUxMTA0MTMwMTI1WhcNMjUxMTA1MTMwMTI1WjAzMTEwLwYDVQQD
Eyg3ZGU0NGJlOTY2MzdiZWQ0ZWNlZDcwZTY1OWZmMWY4NDJjMTkwNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60VDtL6R8OjU4BDDMa5Qm2OoLndc
FrRZCi+cf7eR7mFgLoIrfMPJvdKvHJsQaBI9HJPcH+l+gtmUrMR6pkE+v5kleASI
c8UDMLHMnerGVByT83Jrxhg3R/YurAAifEkLnz8jBTeAnMxV4PAo2HvhimmvXybe
1Jiv4UnQJavdpEN1qqRt2Bj/bI5IUUwwMUHMWwU4YTqDLQnGTpXFBZSG6i+rnyX1
LaEfsuAhc4zovLMzD9dpjBpwrI99Abj2Uud4r6vHgZ8TNHA21kZfs4GPhFBenLBI
Mau8WG75HaQC8gNLj/J+P8C/1Lu6IZAvFANCX8UvOfNtWxsfrZ9199fATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3kS+lmN77U7O1w5ln/H4QsGQSJMB8GA1UdIwQY
MBaAFHo2LXgyhGWdwE7tr4uKb+bpML0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQt
ODY1MDMxZmEwYmY3LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQtODY1MDMxZmEwYmY3
LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJTHvxTe
pMkoKZCDv+Vev7p6fBBZyoJkaRsy9iU1BGjJzZieD9kASiDizQmrqIfGXq31309Y
xcuFf/0aa0h1u3c/jMcGeJLBF/4TLYqlgM6EPhwR0sV+eLxldNrFg6G0pORb/cjP
voWZFS1mPQt4mY6PIgRCPqpJJWmj81ZkDfANixwzj7T61cQTFoXt7miZusmmxRMG
9CVPNLBZWllaOHCJbJWpfdJ4wMaSNtuPok4iggllI+RlqSkSkXiNiREgagHK4nfo
yZX8aJsgMsjaI/jaRVmIccXxmyZuImy9S4o7/tC8gpeHt/AMTQTNZjKiXTuvTWFR
xmd4zUcWhC2tjw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:17 2025 by rpki-client