Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: 0CH+dL5k9iJVqE8/y7P+VuIT9lAXC3jUPVgZieNBW74=
Subject key identifier: 77:C9:1F:C6:32:71:D8:19:26:E2:A2:D9:3B:6D:0C:B6:AD:64:45:CC
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 019A522C9992A45F4BBD97C05BD59E0C9640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 1074
Signing time: Wed 05 Nov 2025 04:00:45 +0000
Manifest this update: Wed 05 Nov 2025 04:00:45 +0000
Manifest next update: Thu 06 Nov 2025 04:00:45 +0000
Files and hashes: 1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: IcTNEUdhnlod7FpwV/H59yNAX3DyPpxSLXeml15iWU8=)
2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:99:92:a4:5f:4b:bd:97:c0:5b:d5:9e:0c:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Nov 5 04:00:45 2025 GMT
Not After : Nov 6 04:00:45 2025 GMT
Subject: CN=77c91fc63271d81926e2a2d93b6d0cb6ad6445cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:2b:b5:4b:3e:f4:80:5d:a3:5d:0f:21:56:
41:55:a1:97:04:e4:dd:fe:f6:03:e1:e5:eb:c0:be:
cf:95:f7:ba:1b:ed:8f:6c:ae:30:d5:d8:f7:71:bb:
03:3b:c1:26:05:ac:08:cd:30:34:91:87:f9:05:ef:
fc:dc:da:e5:2e:01:ac:1e:6d:60:35:4f:9f:c8:cf:
3f:e6:7e:24:ff:c2:9b:f3:2d:da:66:ee:10:90:f6:
54:c0:8f:2a:0b:01:ea:e4:30:12:6b:6c:e1:65:64:
0c:d0:01:e6:18:63:52:34:0a:23:7b:95:9f:a6:4b:
f3:d4:a0:df:0b:10:cf:bb:61:69:ca:84:17:b8:42:
40:b8:16:50:d4:fe:5a:e4:04:9c:ee:76:e3:ae:6d:
d0:35:47:2f:6c:6c:ed:57:47:62:72:28:be:4e:76:
87:c6:bf:0c:94:2d:80:7d:fb:9e:64:0d:dc:ff:4a:
f2:94:4e:ca:62:ab:9c:18:19:2e:b0:72:a5:1b:51:
b6:2c:d8:4c:51:7c:76:63:bb:ea:d4:fa:c9:18:3b:
ef:fd:5f:de:a4:f8:42:2d:1f:bd:e7:14:36:52:c4:
53:ad:01:ad:f7:99:1f:08:0a:c3:ca:9e:f6:2b:4f:
6b:44:43:b8:df:ca:f6:f4:51:3e:ab:51:e3:3d:18:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C9:1F:C6:32:71:D8:19:26:E2:A2:D9:3B:6D:0C:B6:AD:64:45:CC
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7c:f4:ea:f8:72:75:32:83:e6:70:65:8e:a3:d9:ad:43:e5:
53:f8:31:39:34:88:07:b4:bf:6c:bd:23:56:99:9f:0c:3d:0b:
f1:10:a0:73:0c:2d:50:3f:2a:d7:f2:9a:90:78:b7:0e:dd:eb:
db:ea:2e:e5:12:1c:02:11:9f:56:a8:dd:cc:46:03:ae:e3:ee:
fe:98:80:85:21:12:7b:9e:77:b3:75:80:d4:dd:fb:4b:fa:a0:
9e:92:02:89:bf:82:66:76:0b:12:64:0b:0f:b1:25:cb:2c:64:
e1:d5:f0:83:2a:37:09:77:b6:34:d6:8e:d7:f9:3f:d8:cd:bd:
78:b1:c1:44:8d:b3:dc:68:66:09:6e:98:e0:5d:79:9b:65:87:
78:31:14:bd:d8:20:58:ff:98:33:e0:1c:61:59:ce:06:a1:5d:
7d:b9:2b:4d:4a:c9:60:90:06:0d:aa:22:b2:fa:3b:e8:7a:f1:
6d:5a:a4:c0:df:d6:26:f2:96:b5:f5:2f:51:7e:ba:8f:da:2f:
37:05:bc:27:c6:16:b4:21:09:bb:9c:89:14:02:4a:57:ba:af:
8a:a9:d0:c3:ad:7c:e7:6d:2f:b2:98:01:ae:f2:c6:42:ac:ae:
6d:70:de:dd:d1:39:8a:6d:e7:7d:7c:33:d8:a7:53:6b:97:a8:
99:da:69:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLJmSpF9LvZfAW9WeDJZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwOTE5MmMwNzM4NjJlNjIyMGM1ZjkxMDZkN2M1NWUzZmM2
YzVkNGIwHhcNMjUxMTA1MDQwMDQ1WhcNMjUxMTA2MDQwMDQ1WjAzMTEwLwYDVQQD
Eyg3N2M5MWZjNjMyNzFkODE5MjZlMmEyZDkzYjZkMGNiNmFkNjQ0NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF4rtUs+9IBdo10PIVZBVaGXBOTd
/vYD4eXrwL7Plfe6G+2PbK4w1dj3cbsDO8EmBawIzTA0kYf5Be/83NrlLgGsHm1g
NU+fyM8/5n4k/8Kb8y3aZu4QkPZUwI8qCwHq5DASa2zhZWQM0AHmGGNSNAoje5Wf
pkvz1KDfCxDPu2FpyoQXuEJAuBZQ1P5a5ASc7nbjrm3QNUcvbGztV0dicii+TnaH
xr8MlC2AffueZA3c/0rylE7KYqucGBkusHKlG1G2LNhMUXx2Y7vq1PrJGDvv/V/e
pPhCLR+95xQ2UsRTrQGt95kfCArDyp72K09rREO438r29FE+q1HjPRi3YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfJH8YycdgZJuKi2TttDLatZEXMMB8GA1UdIwQY
MBaAFBCRksBzhi5iIMX5EG18VeP8bF1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81M2MwNTEtNTU3Mi00ZjgzLWE3ZDYt
ZTZmZTY5MWQ5NDg5LzEvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81M2MwNTEtNTU3Mi00ZjgzLWE3ZDYtZTZmZTY5MWQ5NDg5
LzEvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHz06vhy
dTKD5nBljqPZrUPlU/gxOTSIB7S/bL0jVpmfDD0L8RCgcwwtUD8q1/KakHi3Dt3r
2+ou5RIcAhGfVqjdzEYDruPu/piAhSESe553s3WA1N37S/qgnpICib+CZnYLEmQL
D7Elyyxk4dXwgyo3CXe2NNaO1/k/2M29eLHBRI2z3GhmCW6Y4F15m2WHeDEUvdgg
WP+YM+AcYVnOBqFdfbkrTUrJYJAGDaoisvo76HrxbVqkwN/WJvKWtfUvUX66j9ov
NwW8J8YWtCEJu5yJFAJKV7qviqnQw618520vspgBrvLGQqyubXDe3dE5im3nfXwz
2KdTa5eomdppQQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:47 2025 by rpki-client