Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier: MILGXJmtz5tqwqXOWyGQKyYdet0n37zEyvUUVz80+kE=
Subject key identifier: 6B:8E:D4:CA:36:E1:B7:52:4F:DA:95:2E:DD:95:51:58:5A:6B:5A:81
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 019A533FA9FCC25CBEC48E655FA071F193BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number: 0469
Signing time: Wed 05 Nov 2025 09:01:12 +0000
Manifest this update: Wed 05 Nov 2025 09:01:12 +0000
Manifest next update: Thu 06 Nov 2025 09:01:12 +0000
Files and hashes: 1: 5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa (hash: rJBWopYkkYdyW3mSVPW+i2geLeI7RuDFMOG3B57hJQA=)
2: DkUOS-7Geo49d0Nh-2-IQuK04LY.roa (hash: U+IaFC9jrzPW5vZBo+Ho3GIYBe2Y+qIpZI+pYfAAT+8=)
3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: 4SJoPjMmRQ3tx/qWYG3ku8rrutOriz/fEgsy6SQ9+R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:a9:fc:c2:5c:be:c4:8e:65:5f:a0:71:f1:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Nov 5 09:01:12 2025 GMT
Not After : Nov 6 09:01:12 2025 GMT
Subject: CN=6b8ed4ca36e1b7524fda952edd9551585a6b5a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:3c:e6:39:52:98:1d:16:17:d5:24:09:21:
88:03:4c:54:fb:d2:49:22:4f:74:f4:8f:55:86:1f:
a2:3a:3a:00:86:ca:46:00:ae:d2:46:8d:da:a0:86:
a0:2b:a9:ca:29:a9:d2:93:f9:eb:cf:78:fd:fa:cf:
cf:0d:eb:ca:af:31:de:62:96:4c:17:35:9d:1e:91:
c5:d3:8c:09:50:13:75:8e:e2:82:76:d5:52:e2:d0:
a2:53:65:75:35:28:90:87:ce:e3:c9:3c:6e:d9:45:
bc:3d:c6:4d:65:09:2a:22:0d:00:af:bf:ca:c8:36:
69:42:41:47:f0:8c:c6:a0:69:fb:0a:a2:fe:6a:f7:
dc:94:9d:a0:01:fd:e5:f9:c2:07:51:84:67:9b:3d:
94:a7:85:97:fe:cb:7a:ca:de:df:2b:8a:f1:c1:ce:
14:87:11:07:f2:5d:5b:7f:2d:b4:b3:9e:7e:c3:a5:
cf:23:8a:af:37:75:31:0d:63:5e:37:e5:0e:a4:34:
02:63:5e:70:83:22:95:9d:6d:cc:97:55:61:d9:b8:
90:d6:88:7d:ab:5e:94:1e:77:d5:5a:8a:1e:5e:f8:
78:57:b3:f3:05:6c:f9:81:65:ab:ab:f2:96:69:3e:
a3:0b:31:4d:89:c8:63:fc:c2:d3:8b:84:c0:91:8e:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:D4:CA:36:E1:B7:52:4F:DA:95:2E:DD:95:51:58:5A:6B:5A:81
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8b:17:be:cb:1a:87:da:51:a2:29:58:b5:0c:f2:48:04:50:
0a:0b:d3:84:e8:91:6e:e6:c6:0b:8b:fc:d6:75:f1:5e:f3:6b:
7a:39:1a:58:00:b0:f7:19:96:0c:92:98:b0:b4:7a:95:8a:37:
5b:74:f6:95:43:6d:58:f5:78:32:22:e0:32:c0:99:ac:0e:ce:
d6:0b:65:13:33:ad:91:83:89:db:8c:c0:26:12:ed:07:88:58:
66:a1:2d:38:57:5e:1a:44:0d:63:1e:1b:dc:00:c9:82:06:05:
e2:8c:de:de:e7:ba:d2:fc:13:8b:21:4b:66:a0:4a:cd:06:94:
35:15:a0:c6:e7:00:8f:e5:74:e3:91:6f:3f:da:3a:bd:bd:2c:
74:a3:a6:e2:b5:e5:fd:fb:27:6d:0c:b7:ac:10:5b:55:7c:40:
b2:c2:a7:fa:f7:a1:8c:1c:19:0c:21:e1:3c:b2:bd:83:1e:54:
52:84:54:6a:b3:43:c5:44:5e:9e:c3:c5:96:d2:98:bd:4b:08:
16:b2:2a:d3:d4:cb:73:ea:94:40:de:5f:f4:39:9d:0a:e1:71:
f0:10:d7:4d:71:22:13:7d:ce:dd:92:8e:45:89:32:0c:92:5e:
1f:d7:18:01:13:94:c9:20:fb:e4:67:b6:7d:10:bd:70:be:6b:
1f:0a:0e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP6n8wly+xI5lX6Bx8ZO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNGQzMWFiMThlNDFmOGQ5NTlhMDlkNTU2NjBkZDMyYWE5
YzQ1ZjcwHhcNMjUxMTA1MDkwMTEyWhcNMjUxMTA2MDkwMTEyWjAzMTEwLwYDVQQD
Eyg2YjhlZDRjYTM2ZTFiNzUyNGZkYTk1MmVkZDk1NTE1ODVhNmI1YTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03885jlSmB0WF9UkCSGIA0xU+9JJ
Ik909I9Vhh+iOjoAhspGAK7SRo3aoIagK6nKKanSk/nrz3j9+s/PDevKrzHeYpZM
FzWdHpHF04wJUBN1juKCdtVS4tCiU2V1NSiQh87jyTxu2UW8PcZNZQkqIg0Ar7/K
yDZpQkFH8IzGoGn7CqL+avfclJ2gAf3l+cIHUYRnmz2Up4WX/st6yt7fK4rxwc4U
hxEH8l1bfy20s55+w6XPI4qvN3UxDWNeN+UOpDQCY15wgyKVnW3Ml1Vh2biQ1oh9
q16UHnfVWooeXvh4V7PzBWz5gWWrq/KWaT6jCzFNichj/MLTi4TAkY47rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuO1Mo24bdST9qVLt2VUVhaa1qBMB8GA1UdIwQY
MBaAFHtNMasY5B+NlZoJ1VZg3TKqnEX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAt
YmZmMDIzYjM0NGY3LzEvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAtYmZmMDIzYjM0NGY3
LzEvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4sXvssa
h9pRoilYtQzySARQCgvThOiRbubGC4v81nXxXvNrejkaWACw9xmWDJKYsLR6lYo3
W3T2lUNtWPV4MiLgMsCZrA7O1gtlEzOtkYOJ24zAJhLtB4hYZqEtOFdeGkQNYx4b
3ADJggYF4oze3ue60vwTiyFLZqBKzQaUNRWgxucAj+V045FvP9o6vb0sdKOm4rXl
/fsnbQy3rBBbVXxAssKn+vehjBwZDCHhPLK9gx5UUoRUarNDxURensPFltKYvUsI
FrIq09TLc+qUQN5f9DmdCuFx8BDXTXEiE33O3ZKORYkyDJJeH9cYAROUySD75Ge2
fRC9cL5rHwoOew==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:17:32 2025 by rpki-client