Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File: eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier: xONnm3rIVagZstQp1wedOBMhm/sTTKjLHqI5aXV5RGk=
Subject key identifier: FE:A7:C1:D3:C2:00:57:C8:CF:7F:D0:C2:CA:5C:43:81:16:61:AC:BA
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 019A4DAAE4D1EE1050C1AD7E0B52F7FF250B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 07:00:36 +0000
Manifest this update: Tue 04 Nov 2025 07:00:36 +0000
Manifest next update: Wed 05 Nov 2025 07:00:36 +0000
Files and hashes: 1: b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa (hash: j3QKWf4Na6ufdvRpfqdxKfUCQ/5sW3MTiaiymKVZLKk=)
2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: w3CB0nly7CzFgEUxqySEOKGmTq7CzqzGSkBkWyPNgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e4:d1:ee:10:50:c1:ad:7e:0b:52:f7:ff:25:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Nov 4 07:00:36 2025 GMT
Not After : Nov 5 07:00:36 2025 GMT
Subject: CN=fea7c1d3c20057c8cf7fd0c2ca5c43811661acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:f5:8c:d9:3c:f1:d6:d0:a6:f6:0c:48:82:
c0:1c:2e:4c:a6:80:45:cb:29:f3:05:54:37:8d:90:
ca:e0:22:86:93:9a:a3:96:58:6a:35:f6:ac:2a:5d:
fa:bb:04:05:84:09:6c:93:6d:ca:1f:17:ac:00:16:
47:e6:2a:73:7a:62:f6:33:52:9a:fe:85:87:08:2c:
db:0f:6a:96:ba:63:56:87:a0:bf:52:a2:fd:11:19:
35:70:9c:01:74:d7:36:0c:d3:35:41:36:38:f7:cc:
be:cf:c7:12:55:bb:eb:97:97:1c:9a:f8:f6:36:b7:
03:88:af:50:05:c1:5c:ed:59:15:b1:e9:8c:41:3d:
d7:d6:06:f3:82:26:5f:fe:84:cb:4f:1c:dc:3c:c3:
79:72:0e:71:ad:93:5d:31:81:9f:22:c6:11:87:ff:
c8:36:9e:d4:26:1d:2c:bd:95:97:ff:66:54:00:7e:
e9:d8:5a:cd:9f:3a:50:db:a1:5d:f9:48:73:a4:45:
e2:ca:fd:34:7c:d0:10:e5:27:86:0e:97:e1:10:af:
26:f3:9d:8f:ea:b6:41:c4:d8:1e:51:78:2b:77:a7:
50:11:6d:b4:5a:2c:8f:70:3a:2c:53:47:a1:a8:c4:
40:35:49:b1:3f:d2:e0:d0:d6:62:ce:ce:47:de:11:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:C1:D3:C2:00:57:C8:CF:7F:D0:C2:CA:5C:43:81:16:61:AC:BA
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ec:81:93:67:12:24:19:27:35:0c:64:1d:bb:55:63:d7:05:
25:cd:9f:74:be:1e:18:a1:e2:d0:64:2b:cb:e5:60:f3:c5:5e:
a0:59:11:bc:21:b4:f8:b8:d7:a2:0a:94:85:09:2b:79:67:e8:
03:72:ba:17:2f:78:d3:d9:d8:1d:d5:25:3e:bf:13:4c:b2:b5:
64:53:7d:14:6e:a2:cd:e1:fb:f9:6e:94:d3:b1:dc:1d:1d:70:
42:14:93:0c:ce:ed:52:6c:42:ff:ea:ee:1a:20:c9:cc:6e:d0:
2a:ef:6a:1a:89:cc:49:a6:de:d8:fe:04:fd:67:d4:a6:3a:a7:
d2:82:c8:1d:f2:73:ea:17:57:f2:22:2c:ee:41:f0:d6:f8:b4:
e8:36:cf:b4:45:af:2e:6f:0b:38:e8:df:4b:a1:cd:0b:09:05:
5e:3b:8d:9a:aa:22:40:95:00:c3:b6:c3:00:be:d0:ce:49:6a:
1a:ea:61:d6:02:e4:c1:21:c1:d4:4d:99:b9:60:61:cd:e1:1d:
9d:33:11:a3:6a:7f:94:c6:7b:69:08:6a:08:07:fe:6e:ec:f5:
40:b1:b3:6d:1a:3c:8f:bf:02:32:a6:36:0b:be:ba:f5:25:b7:
bb:f3:09:8a:15:c8:39:6e:d3:20:2b:45:6c:45:13:c3:2f:31:
75:cf:34:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNquTR7hBQwa1+C1L3/yULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTM1OTY0ZGExNzAzOGUyM2QzYTQ4OTA5YTEzYTI1ZmIw
ZTU4ZWIwHhcNMjUxMTA0MDcwMDM2WhcNMjUxMTA1MDcwMDM2WjAzMTEwLwYDVQQD
EyhmZWE3YzFkM2MyMDA1N2M4Y2Y3ZmQwYzJjYTVjNDM4MTE2NjFhY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn871jNk88dbQpvYMSILAHC5MpoBF
yynzBVQ3jZDK4CKGk5qjllhqNfasKl36uwQFhAlsk23KHxesABZH5ipzemL2M1Ka
/oWHCCzbD2qWumNWh6C/UqL9ERk1cJwBdNc2DNM1QTY498y+z8cSVbvrl5ccmvj2
NrcDiK9QBcFc7VkVsemMQT3X1gbzgiZf/oTLTxzcPMN5cg5xrZNdMYGfIsYRh//I
Np7UJh0svZWX/2ZUAH7p2FrNnzpQ26Fd+UhzpEXiyv00fNAQ5SeGDpfhEK8m852P
6rZBxNgeUXgrd6dQEW20WiyPcDosU0ehqMRANUmxP9Lg0NZizs5H3hHR3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6nwdPCAFfIz3/QwspcQ4EWYay6MB8GA1UdIwQY
MBaAFHmTWWTaFwOOI9OkiQmhOiX7DljrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEt
OWZlNDljYzRkZjJhLzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEtOWZlNDljYzRkZjJh
LzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0uyBk2cS
JBknNQxkHbtVY9cFJc2fdL4eGKHi0GQry+Vg88VeoFkRvCG0+LjXogqUhQkreWfo
A3K6Fy9409nYHdUlPr8TTLK1ZFN9FG6izeH7+W6U07HcHR1wQhSTDM7tUmxC/+ru
GiDJzG7QKu9qGonMSabe2P4E/WfUpjqn0oLIHfJz6hdX8iIs7kHw1vi06DbPtEWv
Lm8LOOjfS6HNCwkFXjuNmqoiQJUAw7bDAL7QzklqGuph1gLkwSHB1E2ZuWBhzeEd
nTMRo2p/lMZ7aQhqCAf+buz1QLGzbRo8j78CMqY2C7669SW3u/MJihXIOW7TICtF
bEUTwy8xdc80OA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:16 2025 by rpki-client