Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File: EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier: zF5nK79xKvHc+mi7qc3Ez7mZJRvZtKfwXIuYuMkxUWQ=
Subject key identifier: 2E:8C:8E:BD:BB:B3:E5:AC:32:F8:9F:C0:B3:40:03:49:F3:CC:AF:D4
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial: 019A4F99862AF63842B55C486A7B8F80541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number: 0F6D
Signing time: Tue 04 Nov 2025 16:00:52 +0000
Manifest this update: Tue 04 Nov 2025 16:00:52 +0000
Manifest next update: Wed 05 Nov 2025 16:00:52 +0000
Files and hashes: 1: 04B5kFR_t_P2nEjasNBAT7tnJqs.roa (hash: CDtvY+ltwTJd4nat+qn/VGqFVOYiDg8maqZV5Y1Ghm0=)
2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: 6nI7VsgvijybvzcMAG8tHwz+0CPIpbNe7XZPnuvCHIc=)
3: JE63iOY_pn4KGRwRQJXw5cNaawc.roa (hash: MxiRl7UzaZKi+99heK7lH0mlebxDgUgaLV/Sp6mBG4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:86:2a:f6:38:42:b5:5c:48:6a:7b:8f:80:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Validity
Not Before: Nov 4 16:00:52 2025 GMT
Not After : Nov 5 16:00:52 2025 GMT
Subject: CN=2e8c8ebdbbb3e5ac32f89fc0b3400349f3ccafd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:e1:d6:06:99:28:ef:b8:46:42:7e:ab:74:
5f:80:a5:a9:d5:ab:98:1b:5d:26:cf:15:bb:a8:6b:
0b:d7:68:d1:4a:76:00:37:5e:cf:32:48:1b:c8:62:
e1:37:da:ab:1a:02:ac:5b:69:70:14:5e:84:76:fc:
06:79:99:bf:36:2c:de:11:ed:17:87:3a:68:90:62:
8f:5f:e4:dd:1c:fb:e0:8b:b5:ff:95:21:b6:ec:f2:
16:da:ed:c9:26:97:f6:5a:6e:4e:e7:c0:35:1c:fd:
4b:09:db:4d:17:47:0b:9c:45:1e:fc:5b:2f:18:55:
15:eb:da:88:8a:83:e5:83:75:c7:32:9e:f3:19:65:
45:e2:44:d0:98:fe:48:24:1b:9f:4b:f0:4e:7b:1b:
6c:1c:29:26:77:bc:e7:34:0f:9d:af:b5:13:51:e8:
84:e5:aa:58:22:f6:31:73:d3:a3:50:dc:ed:96:4a:
2c:2a:61:fc:7f:42:7d:6b:7f:df:b5:92:9d:db:19:
15:23:9e:1c:40:c0:72:49:0a:6c:d3:99:2a:1d:bb:
d9:b7:70:4d:8a:26:24:8c:03:9b:1a:29:9f:82:81:
1f:e1:8c:64:d6:d4:67:af:3e:c0:8b:a7:32:1b:6b:
dd:81:05:02:bc:19:04:71:35:d9:32:c0:19:b5:ed:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:8E:BD:BB:B3:E5:AC:32:F8:9F:C0:B3:40:03:49:F3:CC:AF:D4
X509v3 Authority Key Identifier:
keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:89:55:be:24:5d:97:99:56:b1:be:35:4c:51:41:46:a7:a7:
83:28:1e:00:8d:a8:a4:d3:45:02:0d:ff:a3:fc:bd:7e:e8:36:
10:44:e7:1b:36:de:e7:c0:45:80:8f:05:d9:fd:c7:d0:6d:46:
a7:3c:6d:dd:72:11:4f:6b:9f:ce:48:bb:8f:d7:93:09:ba:21:
49:a2:9f:d8:36:e5:8b:23:1c:70:ad:25:00:4c:3b:d1:0a:47:
30:06:1c:83:16:3f:09:45:12:72:7e:a7:a4:18:83:1d:74:88:
bd:4d:b8:1f:e1:77:c5:9e:a8:53:ab:6f:a2:7f:1e:cf:43:f8:
f1:ed:3d:9a:5e:bf:3b:78:73:9f:97:a8:50:01:2f:79:2f:c4:
8f:8d:2c:aa:28:e9:58:2f:e5:da:bf:fc:88:e2:b2:a0:e9:9e:
89:f5:8e:0a:80:ca:1a:ae:3f:4f:95:ac:08:09:5d:3b:af:d3:
72:3a:99:71:62:da:2e:cf:4f:ef:67:c8:e2:18:91:c5:95:66:
b3:e3:0e:b2:b5:6d:5e:fb:6a:31:3c:c5:f0:d6:51:73:0e:63:
03:50:29:52:c8:15:74:46:7a:d9:85:6f:e6:6d:eb:99:79:0e:
fb:d1:18:b8:46:ee:f8:25:19:8a:de:a0:fa:76:11:cc:74:81:
95:f6:99:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmYYq9jhCtVxIanuPgFQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2JhMzgwMmY5YzliZjY3NTZkYWFiZDMyNGU1MzI2ZWRl
NDE5YWEwHhcNMjUxMTA0MTYwMDUyWhcNMjUxMTA1MTYwMDUyWjAzMTEwLwYDVQQD
EygyZThjOGViZGJiYjNlNWFjMzJmODlmYzBiMzQwMDM0OWYzY2NhZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWrh1gaZKO+4RkJ+q3RfgKWp1auY
G10mzxW7qGsL12jRSnYAN17PMkgbyGLhN9qrGgKsW2lwFF6EdvwGeZm/NizeEe0X
hzpokGKPX+TdHPvgi7X/lSG27PIW2u3JJpf2Wm5O58A1HP1LCdtNF0cLnEUe/Fsv
GFUV69qIioPlg3XHMp7zGWVF4kTQmP5IJBufS/BOextsHCkmd7znNA+dr7UTUeiE
5apYIvYxc9OjUNztlkosKmH8f0J9a3/ftZKd2xkVI54cQMBySQps05kqHbvZt3BN
iiYkjAObGimfgoEf4Yxk1tRnrz7Ai6cyG2vdgQUCvBkEcTXZMsAZte1V+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6Mjr27s+WsMvifwLNAA0nzzK/UMB8GA1UdIwQY
MBaAFBI7o4AvnJv2dW2qvTJOUybt5BmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQt
ZTRkMDI0Y2RhZTBjLzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQtZTRkMDI0Y2RhZTBj
LzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGolVviRd
l5lWsb41TFFBRqengygeAI2opNNFAg3/o/y9fug2EETnGzbe58BFgI8F2f3H0G1G
pzxt3XIRT2ufzki7j9eTCbohSaKf2DbliyMccK0lAEw70QpHMAYcgxY/CUUScn6n
pBiDHXSIvU24H+F3xZ6oU6tvon8ez0P48e09ml6/O3hzn5eoUAEveS/Ej40sqijp
WC/l2r/8iOKyoOmeifWOCoDKGq4/T5WsCAldO6/TcjqZcWLaLs9P72fI4hiRxZVm
s+MOsrVtXvtqMTzF8NZRcw5jA1ApUsgVdEZ62YVv5m3rmXkO+9EYuEbu+CUZit6g
+nYRzHSBlfaZYw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:25:57 2025 by rpki-client