Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier: gvjMykjVX4GgCCQVOjI0fcXFk7cXgq6962SKZo0/Ukg=
Subject key identifier: 28:0C:20:D6:37:60:BC:46:04:03:29:66:FA:B2:D0:39:65:5B:7C:AE
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 019A503E0614A0A7A0F31D7D04B3ECC85D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number: 0ADD
Signing time: Tue 04 Nov 2025 19:00:33 +0000
Manifest this update: Tue 04 Nov 2025 19:00:33 +0000
Manifest next update: Wed 05 Nov 2025 19:00:33 +0000
Files and hashes: 1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=)
2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=)
3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: a0MX6BRGatnVhkzElpZ/pwd6qfudKj0+zV/SqYrBzL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:06:14:a0:a7:a0:f3:1d:7d:04:b3:ec:c8:5d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Nov 4 19:00:33 2025 GMT
Not After : Nov 5 19:00:33 2025 GMT
Subject: CN=280c20d63760bc4604032966fab2d039655b7cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:6d:78:77:8d:77:1e:2e:16:25:7a:c6:39:
04:0a:e0:a4:aa:cc:c5:be:ac:1d:e5:9a:37:b1:d2:
f8:c1:f8:c5:ee:59:6d:7b:b8:b5:af:f8:2b:55:42:
69:7b:95:b3:de:2a:58:97:36:5b:4d:50:50:12:04:
9f:2a:58:1b:a6:22:59:8e:ec:09:40:5f:59:72:0c:
48:e1:9d:1f:6f:44:fc:17:c2:f0:e5:aa:6e:ff:c3:
71:e1:b4:ef:f6:3d:6c:24:d9:e0:7d:a4:93:a6:da:
d3:b5:84:ae:aa:db:06:2b:4d:c2:f2:a5:a4:34:ed:
1a:5d:31:be:ce:86:65:55:ec:ac:e6:17:5e:6d:8e:
9b:89:ca:ea:3b:aa:35:6b:0e:4b:88:18:b0:eb:70:
14:4b:ad:a6:ae:34:e1:28:f2:51:9f:a4:6b:31:30:
ed:36:d9:be:59:28:9e:2d:de:5a:66:1e:48:3f:d7:
69:cd:aa:6a:d9:23:62:58:bc:35:b1:17:8a:4f:12:
c5:6e:26:a2:e3:56:d9:61:41:67:77:45:75:f9:88:
36:ad:d2:50:75:1f:f1:50:ca:a9:0b:d4:ec:44:61:
e7:09:49:7e:fd:e1:64:ef:ad:21:7e:18:6a:88:17:
76:b4:42:92:5f:d7:e6:22:79:56:05:ec:90:a6:45:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:20:D6:37:60:BC:46:04:03:29:66:FA:B2:D0:39:65:5B:7C:AE
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0f:97:27:f2:be:66:fb:cf:00:d1:3d:7d:cb:bb:65:9d:ec:
66:a7:43:b9:1e:59:f1:48:e7:8e:cf:52:fa:26:75:09:44:4b:
83:08:49:59:88:35:27:c4:12:ef:c9:a8:85:54:e7:3f:f5:de:
0f:77:78:5a:77:68:8f:bd:5b:5c:c7:36:97:4d:b2:18:b6:82:
35:b5:f0:e3:d1:47:a2:4b:86:08:57:1d:e1:3f:41:8a:ca:e4:
87:d6:40:3a:db:94:ee:fe:5c:20:a5:ec:f5:5c:07:d6:e9:a0:
aa:40:d3:fe:09:8b:6b:31:3a:80:c6:1d:ba:5b:58:a4:8c:70:
9c:d2:3c:2b:5b:f0:83:14:ea:c1:c9:75:09:fd:68:3c:87:c3:
be:75:d1:34:1a:70:19:40:41:62:10:f1:fd:a5:6c:f3:fb:d8:
4c:6f:cb:74:f5:54:34:74:19:f2:aa:20:7d:9a:19:21:1f:dd:
22:e7:ec:af:58:b8:94:87:02:03:bf:37:b4:5a:b9:69:06:a2:
3a:0b:4e:98:e1:02:21:0d:b6:8f:13:cc:07:aa:01:63:56:ac:
b6:cf:87:a7:0f:13:16:80:cf:ff:66:a5:43:62:ba:b4:46:58:
f2:e9:ce:e7:83:30:44:63:d7:21:b7:bb:6a:c2:71:3e:69:57:
f6:62:b9:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPgYUoKeg8x19BLPsyF1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDU5OTdlZDA3NWMyMjk4YjQ2MTIyNWUxMDYwZjU3N2Ix
ZDdkNGQwHhcNMjUxMTA0MTkwMDMzWhcNMjUxMTA1MTkwMDMzWjAzMTEwLwYDVQQD
EygyODBjMjBkNjM3NjBiYzQ2MDQwMzI5NjZmYWIyZDAzOTY1NWI3Y2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroRteHeNdx4uFiV6xjkECuCkqszF
vqwd5Zo3sdL4wfjF7llte7i1r/grVUJpe5Wz3ipYlzZbTVBQEgSfKlgbpiJZjuwJ
QF9ZcgxI4Z0fb0T8F8Lw5apu/8Nx4bTv9j1sJNngfaSTptrTtYSuqtsGK03C8qWk
NO0aXTG+zoZlVeys5hdebY6bicrqO6o1aw5LiBiw63AUS62mrjThKPJRn6RrMTDt
Ntm+WSieLd5aZh5IP9dpzapq2SNiWLw1sReKTxLFbiai41bZYUFnd0V1+Yg2rdJQ
dR/xUMqpC9TsRGHnCUl+/eFk760hfhhqiBd2tEKSX9fmInlWBeyQpkUEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgMINY3YLxGBAMpZvqy0DllW3yuMB8GA1UdIwQY
MBaAFHvVmX7QdcIpi0YSJeEGD1d7HX1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUt
NWFjN2YwNjYyMzBiLzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUtNWFjN2YwNjYyMzBi
LzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw+XJ/K+
ZvvPANE9fcu7ZZ3sZqdDuR5Z8Ujnjs9S+iZ1CURLgwhJWYg1J8QS78mohVTnP/Xe
D3d4Wndoj71bXMc2l02yGLaCNbXw49FHokuGCFcd4T9Bisrkh9ZAOtuU7v5cIKXs
9VwH1umgqkDT/gmLazE6gMYdultYpIxwnNI8K1vwgxTqwcl1Cf1oPIfDvnXRNBpw
GUBBYhDx/aVs8/vYTG/LdPVUNHQZ8qogfZoZIR/dIufsr1i4lIcCA783tFq5aQai
OgtOmOECIQ22jxPMB6oBY1asts+Hpw8TFoDP/2alQ2K6tEZY8unO54MwRGPXIbe7
asJxPmlX9mK52g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:44 2025 by rpki-client