Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json)
Hash identifier: 5yrjSSTyNwRJZaDobu0tv0NNBtWsU0otgcYHFj0u+Zc=
Subject key identifier: 0C:85:D6:E6:E7:A3:28:C5:2C:A9:CB:4B:72:51:7C:60:C1:8C:EB:31
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 019A4E869B174B3D9B1F476A1FFF010A4986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
Manifest number: 0D3B
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=)
2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: U5jKtuZX61jAZsci57agicoZ6MqowjF3vgMRkDilAa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9b:17:4b:3d:9b:1f:47:6a:1f:ff:01:0a:49:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=0c85d6e6e7a328c52ca9cb4b72517c60c18ceb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:f8:c1:63:51:7c:f5:65:fe:10:4d:b8:7a:
aa:df:1f:da:06:b1:20:0e:60:6f:2d:8f:e7:b1:73:
10:32:92:2a:f9:e6:9d:a3:86:39:97:1e:df:5d:0d:
ba:f4:fe:d1:15:5e:d5:d5:2c:06:da:2e:ea:17:55:
bd:29:9c:97:ea:d0:ac:92:63:27:0e:2a:40:97:f9:
04:57:e3:82:da:9b:09:50:6c:ea:e6:0c:f4:79:25:
00:7f:88:ca:0a:0f:a2:85:3c:67:f5:d1:13:32:fd:
44:7e:a2:34:14:20:2d:c5:be:c1:1a:44:f2:bb:6f:
70:13:af:7f:f8:79:ec:6b:59:3e:8f:e3:2a:70:cb:
72:14:a0:1e:8e:21:1c:f3:61:bb:78:88:89:c3:ad:
cb:5c:ff:ca:b7:3e:0c:9e:23:5b:93:17:e8:48:d0:
49:86:f9:4e:f1:af:bc:c6:b1:1a:27:26:4d:8c:89:
fa:28:30:30:46:34:94:b3:4d:dd:de:9c:2a:9a:49:
76:61:a5:36:2b:56:db:7c:64:8a:0f:64:9c:7b:f1:
91:b6:a7:0a:d6:c2:a2:72:99:b7:6f:da:04:26:f6:
07:94:cb:f4:36:94:a8:86:24:e8:04:73:b8:de:c6:
20:e6:ae:3c:87:37:72:81:82:34:89:42:73:c1:a7:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:D6:E6:E7:A3:28:C5:2C:A9:CB:4B:72:51:7C:60:C1:8C:EB:31
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e9:b4:8c:18:71:ef:71:e5:ec:e8:5a:48:e2:17:98:f5:4e:
61:76:5a:21:80:b7:f1:50:cc:2a:46:e0:18:da:8d:c9:a9:e7:
7a:b2:67:47:6b:5e:cf:13:04:a5:58:7e:6c:a1:35:33:b6:50:
e3:f8:92:18:67:16:5d:9f:c0:34:08:1e:a9:d1:ca:54:2c:1a:
69:44:ce:4d:cd:3f:86:0f:a9:c8:26:9d:88:1c:82:a9:17:47:
55:27:28:bc:1f:83:b2:79:40:b8:02:f1:f4:39:c3:ab:52:c9:
f3:09:50:e7:3c:09:df:f7:81:a3:ad:e6:d1:50:68:2f:fc:62:
55:c7:f4:76:c8:18:dd:b4:99:f4:9a:73:ce:64:fc:90:f1:bb:
a6:51:c3:5a:88:0f:6d:62:08:47:77:97:30:93:4a:4f:6d:e7:
8d:47:ec:2b:e1:e3:7e:60:6f:b6:dd:1c:91:85:ad:d0:87:0a:
31:62:d5:8a:19:08:00:12:f7:6c:0a:fe:9b:9a:0d:91:3a:5f:
d6:e1:43:82:da:ce:cf:05:b6:34:81:1e:5f:8c:4f:84:49:14:
c6:a7:a2:91:01:48:74:b1:24:9d:b1:68:01:68:99:15:1c:f1:
31:81:2f:91:06:71:40:43:0d:11:39:24:90:16:ce:2b:82:d8:
2e:1f:6f:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhpsXSz2bH0dqH/8BCkmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NjVjZDE1MDMwNDgzZDExNGIwMDQxOWMyNWI5OTM0MDA1
OGQ1MjAwHhcNMjUxMTA0MTEwMDM1WhcNMjUxMTA1MTEwMDM1WjAzMTEwLwYDVQQD
EygwYzg1ZDZlNmU3YTMyOGM1MmNhOWNiNGI3MjUxN2M2MGMxOGNlYjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym34wWNRfPVl/hBNuHqq3x/aBrEg
DmBvLY/nsXMQMpIq+eado4Y5lx7fXQ269P7RFV7V1SwG2i7qF1W9KZyX6tCskmMn
DipAl/kEV+OC2psJUGzq5gz0eSUAf4jKCg+ihTxn9dETMv1EfqI0FCAtxb7BGkTy
u29wE69/+Hnsa1k+j+MqcMtyFKAejiEc82G7eIiJw63LXP/Ktz4MniNbkxfoSNBJ
hvlO8a+8xrEaJyZNjIn6KDAwRjSUs03d3pwqmkl2YaU2K1bbfGSKD2Sce/GRtqcK
1sKicpm3b9oEJvYHlMv0NpSohiToBHO43sYg5q48hzdygYI0iUJzwaeMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyF1ubnoyjFLKnLS3JRfGDBjOsxMB8GA1UdIwQY
MBaAFHllzRUDBIPRFLAEGcJbmTQAWNUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85YzFmMzQtYzUyYS00NjJlLWI0N2Ut
ZjlhMGY0OGMyNzVhLzEvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85YzFmMzQtYzUyYS00NjJlLWI0N2UtZjlhMGY0OGMyNzVh
LzEvZVdYTkZRTUVnOUVVc0FRWndsdVpOQUJZMVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+m0jBhx
73Hl7OhaSOIXmPVOYXZaIYC38VDMKkbgGNqNyannerJnR2tezxMEpVh+bKE1M7ZQ
4/iSGGcWXZ/ANAgeqdHKVCwaaUTOTc0/hg+pyCadiByCqRdHVScovB+DsnlAuALx
9DnDq1LJ8wlQ5zwJ3/eBo63m0VBoL/xiVcf0dsgY3bSZ9JpzzmT8kPG7plHDWogP
bWIIR3eXMJNKT23njUfsK+HjfmBvtt0ckYWt0IcKMWLVihkIABL3bAr+m5oNkTpf
1uFDgtrOzwW2NIEeX4xPhEkUxqeikQFIdLEknbFoAWiZFRzxMYEvkQZxQEMNETkk
kBbOK4LYLh9vwA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:02 2025 by rpki-client