Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json)
Hash identifier: FVi7Cpon6GSBREgTr3bva7zNDLQA8Hx1/HTDUoAMFq8=
Subject key identifier: 5C:85:57:3C:C3:D3:F6:99:2C:79:72:1F:68:55:80:9E:4B:DA:6B:D3
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial: 019A4EBD3DAE6CA4FFE977194496C47F2D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: 2fMToXm5EQLSCD5mHlkqsrhtR0GzCLSokmw64EdIiCg=)
2: f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa (hash: wIswSAYWyn5DfKJXI+1/UX9k25/3bD/WegnGLFLzMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3d:ae:6c:a4:ff:e9:77:19:44:96:c4:7f:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=5c85573cc3d3f6992c79721f6855809e4bda6bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:3d:f7:c4:1f:78:8e:87:5d:c0:25:8a:fc:
4a:af:ba:75:79:74:9e:2d:e1:7b:27:63:cd:b9:5a:
eb:7c:d3:4f:d0:e7:40:cf:6a:69:fc:65:2a:8e:2e:
f5:3a:c0:0f:00:f9:8a:75:fd:19:ab:4a:f5:00:ba:
36:d4:b5:0e:11:50:5f:01:a2:86:5c:cc:03:be:c0:
cc:90:f8:5b:ac:d9:59:1e:54:f7:fd:33:d4:e9:1f:
df:34:58:42:9d:b5:da:93:87:33:71:b9:60:1c:c8:
c0:29:2d:74:bb:08:c7:f4:43:54:5b:36:40:eb:e0:
90:c5:ea:78:b3:97:0f:ed:00:85:d4:09:01:c3:5a:
b9:ae:f6:5a:8b:09:22:2b:f9:7f:95:dc:7e:e9:0c:
48:2b:1c:69:ee:19:94:5a:5b:1c:9e:f5:e9:04:01:
35:76:9e:70:57:33:35:ac:82:88:11:f8:3e:2b:35:
5b:a5:ef:e8:23:10:52:7f:3c:5e:37:c2:65:94:c6:
e5:37:07:73:3d:b3:d4:f3:0d:e7:de:67:fa:f4:0c:
47:39:68:50:f2:3c:1e:4f:b3:bb:70:b3:db:f4:64:
38:d1:50:be:e9:80:1f:4b:66:7a:21:5a:8a:05:7a:
c8:75:f1:1d:e7:2f:b6:1d:c4:06:a6:02:4d:bc:ea:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:57:3C:C3:D3:F6:99:2C:79:72:1F:68:55:80:9E:4B:DA:6B:D3
X509v3 Authority Key Identifier:
keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3e:80:a3:91:fb:e5:e0:42:a3:28:0d:76:3a:bf:40:85:31:
6e:f0:ef:d1:21:58:e5:45:29:35:f4:a9:3e:9e:b7:e6:0b:f8:
2e:41:b8:34:c0:bb:ab:95:11:71:79:55:06:8d:5a:2e:13:40:
b4:11:77:4a:51:49:30:3f:bf:57:58:d7:7d:ae:b8:83:4d:c6:
e6:1f:62:13:f9:b5:2c:2a:f6:54:f5:44:21:c6:f7:0d:72:d6:
60:65:d6:27:c7:66:a2:87:53:d1:41:55:74:5d:76:cb:ae:3c:
80:8f:1f:82:24:ef:64:35:fc:ce:82:6f:13:7e:2f:b1:38:13:
28:71:f2:30:c7:5f:f4:aa:eb:f2:0e:8c:9a:30:a2:0e:e4:0e:
ae:bb:73:7a:0d:ec:e5:40:9e:29:d7:a8:c3:d9:24:90:bf:d7:
68:36:00:82:88:14:9c:5f:c9:f1:6e:6b:dd:53:82:a7:e2:a0:
a9:85:e5:ad:6d:08:af:45:9e:f9:fa:29:12:62:cd:ac:1d:b6:
26:11:fb:1c:8d:11:5d:de:c7:f9:5d:f0:4c:6d:ec:2a:5a:de:
42:bd:11:2b:d7:76:b0:b6:4e:96:39:9c:ae:f6:05:94:60:00:
88:29:9a:31:f7:03:3c:19:8d:d8:2a:e4:78:80:3d:97:bc:fb:
7a:23:c4:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvT2ubKT/6XcZRJbEfy2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZThkMWM2YWFmNGE5M2ZmNDFiYmZhMWJkMWRhYzYxOTdk
NTk1NzUwHhcNMjUxMTA0MTIwMDE2WhcNMjUxMTA1MTIwMDE2WjAzMTEwLwYDVQQD
Eyg1Yzg1NTczY2MzZDNmNjk5MmM3OTcyMWY2ODU1ODA5ZTRiZGE2YmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuks998QfeI6HXcAlivxKr7p1eXSe
LeF7J2PNuVrrfNNP0OdAz2pp/GUqji71OsAPAPmKdf0Zq0r1ALo21LUOEVBfAaKG
XMwDvsDMkPhbrNlZHlT3/TPU6R/fNFhCnbXak4czcblgHMjAKS10uwjH9ENUWzZA
6+CQxep4s5cP7QCF1AkBw1q5rvZaiwkiK/l/ldx+6QxIKxxp7hmUWlscnvXpBAE1
dp5wVzM1rIKIEfg+KzVbpe/oIxBSfzxeN8JllMblNwdzPbPU8w3n3mf69AxHOWhQ
8jweT7O7cLPb9GQ40VC+6YAfS2Z6IVqKBXrIdfEd5y+2HcQGpgJNvOrzowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyFVzzD0/aZLHlyH2hVgJ5L2mvTMB8GA1UdIwQY
MBaAFP3o0caq9Kk/9Bu/ob0drGGX1ZV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUt
OTU0ZDE5NTQ5YjYxLzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUtOTU0ZDE5NTQ5YjYx
LzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz6Ao5H7
5eBCoygNdjq/QIUxbvDv0SFY5UUpNfSpPp635gv4LkG4NMC7q5URcXlVBo1aLhNA
tBF3SlFJMD+/V1jXfa64g03G5h9iE/m1LCr2VPVEIcb3DXLWYGXWJ8dmoodT0UFV
dF12y648gI8fgiTvZDX8zoJvE34vsTgTKHHyMMdf9Krr8g6MmjCiDuQOrrtzeg3s
5UCeKdeow9kkkL/XaDYAgogUnF/J8W5r3VOCp+KgqYXlrW0Ir0We+fopEmLNrB22
JhH7HI0RXd7H+V3wTG3sKlreQr0RK9d2sLZOljmcrvYFlGAAiCmaMfcDPBmN2Crk
eIA9l7z7eiPEDg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:11:55 2025 by rpki-client