Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: 3A+XK0LIWyTR+9Yh34EaY4mG/N3X0OY3BzOw/Ntk/Qk=
Subject key identifier: 5D:DE:58:72:E1:67:64:CA:82:76:01:B5:77:78:2C:68:D7:BB:34:BC
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 019A5187CA699B3CB30A3D0E7576F902F27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 01:00:44 +0000
Manifest this update: Wed 05 Nov 2025 01:00:44 +0000
Manifest next update: Thu 06 Nov 2025 01:00:44 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: vsae8TBLPrXOXgpw0F1e7eZgWkg/tLFYiiIKjG4oP2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ca:69:9b:3c:b3:0a:3d:0e:75:76:f9:02:f2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: Nov 5 01:00:44 2025 GMT
Not After : Nov 6 01:00:44 2025 GMT
Subject: CN=5dde5872e16764ca827601b577782c68d7bb34bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:96:de:9e:aa:1b:76:f0:93:a2:9d:77:5d:
8b:26:35:c1:3f:d9:e2:08:30:27:93:ea:be:08:96:
61:65:30:6e:00:36:22:96:b4:af:15:73:5f:a2:6c:
2c:4a:33:a3:a9:d6:18:95:db:8c:6b:53:5a:b4:3a:
70:4b:17:0e:67:46:5e:e9:9b:c3:45:e5:77:3c:ff:
38:be:ac:f5:42:eb:81:f3:7e:33:42:2a:cc:b6:41:
66:82:61:05:9c:26:47:36:10:6c:ea:72:5b:8a:2b:
b5:6c:f8:ab:04:97:48:8d:4a:e2:44:94:6f:36:ff:
13:89:04:2b:c5:4a:aa:55:46:81:ae:fd:d6:31:c9:
20:fa:57:42:c2:fb:4d:10:d7:d8:55:78:ed:b2:ad:
71:45:da:8c:2f:95:a6:29:ec:00:3b:02:8f:ac:84:
99:02:8d:89:c8:1b:57:27:9a:a8:d7:88:c3:0f:20:
ff:1e:f7:67:6a:e4:41:68:f5:a9:27:3a:85:8e:b2:
93:81:16:32:5b:78:c6:6e:54:7c:4a:19:6a:22:c9:
b6:9e:b2:14:19:18:1e:36:f5:45:00:8f:08:da:cc:
6d:50:99:b5:c6:48:09:f3:69:fb:f1:f1:2f:25:52:
d0:56:7c:6d:ac:e2:da:ca:16:65:9f:b0:d3:f5:4f:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:58:72:E1:67:64:CA:82:76:01:B5:77:78:2C:68:D7:BB:34:BC
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3b:b5:1a:9f:2f:13:55:6d:57:38:cd:fb:66:f6:12:ea:68:
1a:d1:b8:16:ed:4c:94:52:c7:d6:3f:00:eb:40:43:6b:0c:fc:
78:c9:f3:99:e3:04:2e:7b:63:13:84:04:e6:c2:d4:2f:55:b7:
7c:00:01:d0:1b:a2:a5:be:ae:e2:af:9b:5e:3a:46:89:28:27:
74:c3:15:ac:ee:dc:07:50:39:56:92:9c:a4:d8:5d:bb:6a:cb:
ad:0a:59:de:45:83:d8:d7:4b:3f:d3:9d:02:84:77:ae:26:e0:
e6:03:4f:a1:89:3f:29:69:a6:9e:63:76:fb:fa:2d:64:79:74:
29:9b:14:dc:40:2e:7d:ac:7e:76:29:7d:fe:7a:12:42:15:17:
f6:8f:ab:02:1d:0e:e6:1e:cb:bd:5e:8b:d3:20:7c:88:f6:c1:
78:77:1a:25:5f:2f:87:35:30:2a:2c:79:ad:6a:0c:6c:8f:00:
f9:d6:35:5d:ba:7b:a4:05:65:56:f5:4f:68:b9:0b:a5:02:1c:
e7:9c:f0:7e:e5:72:e4:1e:00:79:17:9b:19:ac:38:f8:54:26:
66:24:51:99:00:4f:ff:96:3b:4c:e3:64:72:9b:90:8f:50:f3:
bd:a6:99:a6:81:03:06:18:ec:9d:e7:55:54:14:54:55:6e:89:
3b:5d:b1:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh8ppmzyzCj0OdXb5AvJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2QxMGYyMmU1ZmZhNGIyMGY3ZDViNzgyOGM1NWI5NTA5
YTk3NTkwHhcNMjUxMTA1MDEwMDQ0WhcNMjUxMTA2MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg1ZGRlNTg3MmUxNjc2NGNhODI3NjAxYjU3Nzc4MmM2OGQ3YmIzNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoGW3p6qG3bwk6Kdd12LJjXBP9ni
CDAnk+q+CJZhZTBuADYilrSvFXNfomwsSjOjqdYYlduMa1NatDpwSxcOZ0Ze6ZvD
ReV3PP84vqz1QuuB834zQirMtkFmgmEFnCZHNhBs6nJbiiu1bPirBJdIjUriRJRv
Nv8TiQQrxUqqVUaBrv3WMckg+ldCwvtNENfYVXjtsq1xRdqML5WmKewAOwKPrISZ
Ao2JyBtXJ5qo14jDDyD/HvdnauRBaPWpJzqFjrKTgRYyW3jGblR8ShlqIsm2nrIU
GRgeNvVFAI8I2sxtUJm1xkgJ82n78fEvJVLQVnxtrOLayhZln7DT9U/TuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3eWHLhZ2TKgnYBtXd4LGjXuzS8MB8GA1UdIwQY
MBaAFHh9EPIuX/pLIPfVt4KMVblQmpdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYjgwNTUtMzg5Yy00M2VkLWFiZGUt
YmYwZGUyYmIxYzNjLzEvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hYjgwNTUtMzg5Yy00M2VkLWFiZGUtYmYwZGUyYmIxYzNj
LzEvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTu1Gp8v
E1VtVzjN+2b2EupoGtG4Fu1MlFLH1j8A60BDawz8eMnzmeMELntjE4QE5sLUL1W3
fAAB0Buipb6u4q+bXjpGiSgndMMVrO7cB1A5VpKcpNhdu2rLrQpZ3kWD2NdLP9Od
AoR3ribg5gNPoYk/KWmmnmN2+/otZHl0KZsU3EAufax+dil9/noSQhUX9o+rAh0O
5h7LvV6L0yB8iPbBeHcaJV8vhzUwKix5rWoMbI8A+dY1Xbp7pAVlVvVPaLkLpQIc
55zwfuVy5B4AeRebGaw4+FQmZiRRmQBP/5Y7TONkcpuQj1DzvaaZpoEDBhjsnedV
VBRUVW6JO12xJQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:12:25 2025 by rpki-client