Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier: DaCQmPTPU5K/vadO3wsPvr1AIKWSU+jKF9yI0buCSXg=
Subject key identifier: 1E:BA:34:CD:EB:62:13:F7:97:C3:E4:9C:06:27:45:42:1D:F8:C5:70
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer: /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial: 019A4D3D50EC02FBEA329856CE63E71DE6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 05:00:55 +0000
Manifest this update: Tue 04 Nov 2025 05:00:55 +0000
Manifest next update: Wed 05 Nov 2025 05:00:55 +0000
Files and hashes: 1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: /5LfPyfO8q1Akm3lEKhmPo+uS85oGYOClEPS6mWcxQo=)
2: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (hash: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:50:ec:02:fb:ea:32:98:56:ce:63:e7:1d:e6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Validity
Not Before: Nov 4 05:00:55 2025 GMT
Not After : Nov 5 05:00:55 2025 GMT
Subject: CN=1eba34cdeb6213f797c3e49c062745421df8c570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:3d:20:37:76:6d:7a:02:58:66:ed:5d:9b:
eb:0c:32:ab:1b:f1:84:72:6d:0f:9c:0d:84:74:e9:
54:29:bc:4b:12:b7:26:0c:a6:64:06:8b:af:9f:90:
b6:9a:e9:a1:b8:28:7b:2a:c7:e2:5d:d0:9e:dd:6b:
1a:cd:77:9c:d1:45:48:ef:41:b7:77:50:d6:18:5b:
76:a9:99:a7:e5:94:b2:bb:c2:b8:cb:bc:16:41:d9:
e0:c5:f4:bb:9c:02:72:87:ac:68:cb:03:8d:50:34:
80:dc:e9:53:03:74:65:7b:51:1b:5f:b5:72:5a:dd:
2d:34:a2:fc:64:ca:42:6e:11:60:87:73:85:dc:b4:
16:c5:70:9b:00:34:00:b6:48:39:54:6a:22:be:82:
68:3b:0b:7f:1f:28:4c:8f:7d:bc:7f:54:8e:4f:48:
27:de:ae:a0:82:80:fc:21:31:3c:a4:10:47:9a:60:
b0:ae:af:ca:16:4b:3a:da:78:f5:03:61:ea:99:b7:
4f:e0:1d:57:82:09:75:c6:35:b6:5b:b0:91:0e:f9:
aa:f2:f4:ed:3b:ba:c3:d1:e0:59:d0:ca:4f:1b:3c:
9f:aa:5c:4c:5f:22:5b:d1:67:2c:c0:44:96:9a:7a:
36:01:c5:6b:a1:62:67:5e:21:1f:fa:b5:f4:a2:40:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BA:34:CD:EB:62:13:F7:97:C3:E4:9C:06:27:45:42:1D:F8:C5:70
X509v3 Authority Key Identifier:
keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:1f:b3:b2:81:2f:ff:4e:65:08:fe:ef:02:7d:b1:85:ff:
14:6a:8c:cd:bb:ff:77:7a:0e:40:66:fe:3c:2f:5b:31:d8:50:
9e:bb:e5:2d:5b:56:37:1a:db:94:c7:6c:84:0f:0f:8d:e9:b4:
51:5b:1c:33:1e:b7:fb:51:f6:06:bb:b5:c7:ba:52:09:7a:5d:
5d:8c:84:43:f5:85:37:cf:c7:31:4d:a7:5b:a4:60:6b:11:12:
5a:81:b2:0a:c8:30:c8:78:a6:60:9c:78:9c:0e:e8:d5:d8:50:
05:96:23:36:5c:16:73:9b:72:13:8f:2f:37:2d:f2:5e:ae:08:
67:dd:07:c7:16:be:42:c8:71:ec:82:dd:83:9b:b6:71:20:bf:
da:7c:f7:53:3a:d9:4c:d3:9f:ba:29:65:50:11:d9:74:66:8f:
38:8f:d5:b4:7b:69:86:53:53:cc:69:ef:66:43:98:68:98:b8:
90:10:38:09:c9:97:5d:f1:f6:95:e1:31:1a:6f:eb:cd:55:08:
61:ce:7d:16:f8:cf:64:75:26:93:10:13:2b:16:67:11:f0:d2:
4a:bf:fd:0e:3c:b8:97:28:bb:4d:72:b9:95:c6:e7:b7:dd:81:
5b:a9:d3:20:21:f8:40:1a:cc:b1:65:06:5f:4e:4f:b4:61:b7:
f5:fb:8f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPVDsAvvqMphWzmPnHebQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNTE1NWNlYmY5ZGUwY2I3M2U0MGEwZmEwYTFhYjRkY2Yx
ZDA5Y2EwHhcNMjUxMTA0MDUwMDU1WhcNMjUxMTA1MDUwMDU1WjAzMTEwLwYDVQQD
EygxZWJhMzRjZGViNjIxM2Y3OTdjM2U0OWMwNjI3NDU0MjFkZjhjNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lA9IDd2bXoCWGbtXZvrDDKrG/GE
cm0PnA2EdOlUKbxLErcmDKZkBouvn5C2mumhuCh7KsfiXdCe3WsazXec0UVI70G3
d1DWGFt2qZmn5ZSyu8K4y7wWQdngxfS7nAJyh6xoywONUDSA3OlTA3Rle1EbX7Vy
Wt0tNKL8ZMpCbhFgh3OF3LQWxXCbADQAtkg5VGoivoJoOwt/HyhMj328f1SOT0gn
3q6ggoD8ITE8pBBHmmCwrq/KFks62nj1A2HqmbdP4B1Xggl1xjW2W7CRDvmq8vTt
O7rD0eBZ0MpPGzyfqlxMXyJb0WcswESWmno2AcVroWJnXiEf+rX0okDviQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB66NM3rYhP3l8PknAYnRUId+MVwMB8GA1UdIwQY
MBaAFBNRVc6/neDLc+QKD6Chq03PHQnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgt
MzhmNWQ5NjMyMjJjLzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgtMzhmNWQ5NjMyMjJj
LzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzUfs7KB
L/9OZQj+7wJ9sYX/FGqMzbv/d3oOQGb+PC9bMdhQnrvlLVtWNxrblMdshA8Pjem0
UVscMx63+1H2Bru1x7pSCXpdXYyEQ/WFN8/HMU2nW6RgaxESWoGyCsgwyHimYJx4
nA7o1dhQBZYjNlwWc5tyE48vNy3yXq4IZ90Hxxa+Qshx7ILdg5u2cSC/2nz3UzrZ
TNOfuillUBHZdGaPOI/VtHtphlNTzGnvZkOYaJi4kBA4CcmXXfH2leExGm/rzVUI
Yc59FvjPZHUmkxATKxZnEfDSSr/9Djy4lyi7TXK5lcbnt92BW6nTICH4QBrMsWUG
X05PtGG39fuPKg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:16 2025 by rpki-client