Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier: BVC/98wCWuCWbSJ7O+JUeXFII1a7yRrL+tj8XMfvGJo=
Subject key identifier: B1:5F:22:5C:48:A7:A2:F6:C9:35:C5:E9:F6:8A:DD:FE:17:9F:6B:10
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial: 019A4DAAC20F55823C36A43F930A5F9053A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 07:00:27 +0000
Manifest this update: Tue 04 Nov 2025 07:00:27 +0000
Manifest next update: Wed 05 Nov 2025 07:00:27 +0000
Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: iPaAazhKXMqgX+p0tg/7EdjQb7RQb46+KicxOzExEWs=)
2: 90qeQZqwuh0oi-oH9Ho2Hr4JeqU.roa (hash: yAfSfLIB/wlDkdhF0bN4I000INgGh/D9HhTP3okCxDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c2:0f:55:82:3c:36:a4:3f:93:0a:5f:90:53:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Validity
Not Before: Nov 4 07:00:27 2025 GMT
Not After : Nov 5 07:00:27 2025 GMT
Subject: CN=b15f225c48a7a2f6c935c5e9f68addfe179f6b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:55:7e:12:fe:11:84:05:43:cb:08:67:8c:
fb:88:3c:07:1f:8e:25:05:8e:43:c0:c9:29:c9:9e:
a2:c9:30:ba:e8:3d:61:f2:03:00:2d:1b:8d:e6:d4:
bd:fd:44:35:b3:a1:71:99:b0:08:9a:0a:af:95:96:
51:10:d5:17:2e:ad:44:98:03:01:2d:45:43:6e:3d:
27:6f:76:2b:e8:1b:48:b4:fd:00:a0:99:6f:c8:a9:
75:df:f6:24:9d:f5:1c:ca:5a:9b:b0:bd:44:27:ea:
0e:ed:c0:35:5d:93:70:3a:17:f3:8f:b7:8d:5f:b6:
b8:23:1a:0e:6f:71:43:9f:6c:18:d1:3a:b8:b4:36:
ce:71:31:92:e6:ad:87:e9:1f:f8:94:32:b8:5b:58:
87:a7:45:bd:69:44:8c:fb:bf:6d:5b:3c:48:ea:87:
b8:ae:8b:26:d8:3e:4a:c6:2c:cb:96:45:59:de:1b:
41:bb:30:81:02:ca:db:15:14:8f:07:cd:02:53:86:
37:41:0c:98:8d:cb:43:ee:b5:e3:35:30:b7:46:69:
07:61:2d:d4:05:29:e6:62:a9:50:e5:d0:0d:bc:2f:
a2:67:ee:eb:59:e5:08:b1:08:f0:26:2d:b1:24:aa:
0c:9b:d7:e3:06:d6:af:ab:f0:01:0e:26:5e:a7:88:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:22:5C:48:A7:A2:F6:C9:35:C5:E9:F6:8A:DD:FE:17:9F:6B:10
X509v3 Authority Key Identifier:
keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c2:11:3c:02:f5:33:19:74:26:ef:3d:94:0c:33:b8:0d:a6:
1f:22:9c:6c:fc:78:4e:98:c1:5f:67:be:00:6a:04:5a:7e:77:
fc:a4:0e:31:ad:46:32:22:9d:ac:ef:94:cc:bb:15:6a:1f:8d:
6e:92:5c:ba:17:af:7d:ce:af:f8:9d:06:31:68:c0:1b:64:84:
42:cd:07:a0:ed:53:2b:52:7a:f4:b2:8e:13:84:e9:53:5d:49:
32:a9:a2:26:a6:75:2c:62:68:23:21:85:7f:1c:42:30:db:d5:
7e:a8:55:aa:41:df:8d:6c:51:a3:c2:7c:29:7d:29:5f:31:2c:
70:bc:3f:96:f0:b0:3a:52:74:e4:00:a4:82:95:c5:ba:db:dc:
f0:4a:2c:95:68:87:a5:60:93:66:fc:1b:97:7c:e1:6b:ba:9a:
79:83:9c:9d:19:ea:e5:69:85:ec:42:cb:3f:0b:84:6a:fc:62:
dc:7b:1e:ce:41:12:40:36:29:05:c0:00:87:17:1f:e2:d4:7b:
16:1c:62:1e:8b:68:a1:57:28:9c:8c:0a:8a:76:22:fa:60:b3:
ea:95:78:85:7f:a3:43:47:47:f8:e7:a2:7a:e8:f0:76:8d:a5:
36:b5:e5:e2:b2:29:f5:23:59:65:b9:51:ac:91:c1:5a:38:78:
5a:e7:b4:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqsIPVYI8NqQ/kwpfkFOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDgyMDcyOWEwZjlhYmZiNmNhYzNiNWY5NmMyNzE5OGQ3
NjM5MWIwHhcNMjUxMTA0MDcwMDI3WhcNMjUxMTA1MDcwMDI3WjAzMTEwLwYDVQQD
EyhiMTVmMjI1YzQ4YTdhMmY2YzkzNWM1ZTlmNjhhZGRmZTE3OWY2YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5JVfhL+EYQFQ8sIZ4z7iDwHH44l
BY5DwMkpyZ6iyTC66D1h8gMALRuN5tS9/UQ1s6FxmbAImgqvlZZRENUXLq1EmAMB
LUVDbj0nb3Yr6BtItP0AoJlvyKl13/YknfUcylqbsL1EJ+oO7cA1XZNwOhfzj7eN
X7a4IxoOb3FDn2wY0Tq4tDbOcTGS5q2H6R/4lDK4W1iHp0W9aUSM+79tWzxI6oe4
rosm2D5KxizLlkVZ3htBuzCBAsrbFRSPB80CU4Y3QQyYjctD7rXjNTC3RmkHYS3U
BSnmYqlQ5dANvC+iZ+7rWeUIsQjwJi2xJKoMm9fjBtavq/ABDiZep4g4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFfIlxIp6L2yTXF6faK3f4Xn2sQMB8GA1UdIwQY
MBaAFNRIIHKaD5q/tsrDtflsJxmNdjkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUt
NjE5NDkzNTZhOWEwLzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUtNjE5NDkzNTZhOWEw
LzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8IRPAL1
Mxl0Ju89lAwzuA2mHyKcbPx4TpjBX2e+AGoEWn53/KQOMa1GMiKdrO+UzLsVah+N
bpJcuhevfc6v+J0GMWjAG2SEQs0HoO1TK1J69LKOE4TpU11JMqmiJqZ1LGJoIyGF
fxxCMNvVfqhVqkHfjWxRo8J8KX0pXzEscLw/lvCwOlJ05ACkgpXFutvc8EoslWiH
pWCTZvwbl3zha7qaeYOcnRnq5WmF7ELLPwuEavxi3HsezkESQDYpBcAAhxcf4tR7
FhxiHotooVconIwKinYi+mCz6pV4hX+jQ0dH+Oeieujwdo2lNrXl4rIp9SNZZblR
rJHBWjh4Wue0fw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:34 2025 by rpki-client