Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: NTjRvJOTauRkYysOrhUrWONMnm2SxeVakcaUN4nt7Ho=
Subject key identifier: 7F:E8:C9:0B:53:33:92:F4:F9:6C:20:2F:C8:5C:03:33:9E:D1:7C:26
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019A4F2B70DF8C55CDCB3D03B3A805FE76FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 15BB
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: G3Vh7IwwyW4eQWJxkaRGiLXLbq7pekeznqa2n47Ahyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:70:df:8c:55:cd:cb:3d:03:b3:a8:05:fe:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=7fe8c90b533392f4f96c202fc85c03339ed17c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:3a:a6:ae:30:b5:c0:c1:02:a7:0f:79:5c:
ff:74:18:c9:ab:0f:bc:25:4a:b2:9c:75:f8:c5:41:
8a:db:f7:42:d8:82:5a:5d:8f:a4:99:4e:7d:2d:97:
6e:4c:e2:14:de:97:c3:37:65:ce:5f:d3:3f:2c:09:
46:13:6b:35:63:f1:b8:20:a2:3e:44:fa:19:f4:dc:
2a:67:4c:e1:16:f3:30:df:5e:6c:12:d7:7e:70:c4:
c1:d0:a5:06:05:1e:24:1a:ef:3e:26:4a:3f:8a:b8:
ee:0f:1d:49:cc:59:45:db:b5:98:f7:8f:1f:aa:df:
2d:e8:03:27:4a:5d:58:5e:0e:15:84:0e:34:67:8d:
fd:ac:bf:27:9b:9c:33:3c:51:c4:c8:06:2d:68:f2:
a1:1f:d5:d8:ed:a8:30:8a:03:01:31:57:90:77:51:
67:3f:ca:b2:4d:f4:ff:01:b1:01:08:dc:b3:bc:7e:
d1:c4:a6:b6:23:62:e6:b8:16:45:0e:e9:33:34:e9:
b4:f4:aa:e1:f8:c9:4b:5a:e8:c6:b0:e7:a5:57:59:
8e:1a:83:e1:ec:53:78:f0:24:0e:b8:f0:95:0c:a5:
47:77:d8:c3:0e:65:e1:07:70:68:f6:5f:c1:a2:18:
a2:ff:9f:1d:c1:6f:0d:fa:b7:bc:dd:8c:1e:ba:8e:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:C9:0B:53:33:92:F4:F9:6C:20:2F:C8:5C:03:33:9E:D1:7C:26
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:d0:de:72:23:85:26:58:aa:a3:e1:48:a8:f6:f6:50:2e:
d5:34:b3:41:39:f0:57:bf:30:a2:cd:35:5d:03:07:0d:f8:80:
3f:04:9f:22:c9:d7:43:cb:85:64:06:c9:5a:60:db:e4:81:2a:
cf:ff:34:cd:5f:0f:f5:45:64:44:d9:15:b4:87:25:98:22:04:
3f:48:67:f6:23:85:62:7a:c3:78:11:6a:f4:a2:cb:d5:3b:4a:
b6:9d:0d:e1:8e:27:93:91:dd:08:dc:23:c1:34:29:1b:44:9d:
26:da:f1:85:0e:82:58:bd:92:1f:54:f8:fe:73:5c:c4:82:1d:
58:42:c0:91:22:35:5d:b5:3f:e3:6b:de:b2:9b:60:e3:46:90:
e6:cb:57:d6:df:11:67:ff:ac:d8:3e:f0:69:c0:81:8b:79:55:
6e:51:4e:4d:ef:09:14:3f:51:d3:44:e6:16:38:bb:d1:56:e2:
d4:b0:9c:ad:0a:a5:db:72:b4:62:50:4c:d6:8f:55:90:db:fd:
04:a2:dc:6c:69:06:55:67:e8:20:6b:4e:38:ef:4b:f7:6d:21:
65:a1:e1:7c:76:48:5b:fe:c3:ae:08:4f:f3:31:4b:33:e2:d2:
8e:60:c3:59:a8:b6:89:1d:4d:35:e8:3f:e5:1c:5d:70:8f:eb:
7c:c8:a9:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK3DfjFXNyz0Ds6gF/nb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGU1NjE3NzMwOGMyMGM0MmZiZjQyZjMxMGY0YzBlZjZi
Mjc4OTAwHhcNMjUxMTA0MTQwMDM4WhcNMjUxMTA1MTQwMDM4WjAzMTEwLwYDVQQD
Eyg3ZmU4YzkwYjUzMzM5MmY0Zjk2YzIwMmZjODVjMDMzMzllZDE3YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMw6pq4wtcDBAqcPeVz/dBjJqw+8
JUqynHX4xUGK2/dC2IJaXY+kmU59LZduTOIU3pfDN2XOX9M/LAlGE2s1Y/G4IKI+
RPoZ9NwqZ0zhFvMw315sEtd+cMTB0KUGBR4kGu8+Jko/irjuDx1JzFlF27WY948f
qt8t6AMnSl1YXg4VhA40Z439rL8nm5wzPFHEyAYtaPKhH9XY7agwigMBMVeQd1Fn
P8qyTfT/AbEBCNyzvH7RxKa2I2LmuBZFDukzNOm09Krh+MlLWujGsOelV1mOGoPh
7FN48CQOuPCVDKVHd9jDDmXhB3Bo9l/Bohii/58dwW8N+re83Yweuo5hVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/oyQtTM5L0+WwgL8hcAzOe0XwmMB8GA1UdIwQY
MBaAFBEOVhdzCMIMQvv0LzEPTA72sniQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYt
NmY0ZTY1ODViNTRiLzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYtNmY0ZTY1ODViNTRi
LzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPvQ3nIj
hSZYqqPhSKj29lAu1TSzQTnwV78wos01XQMHDfiAPwSfIsnXQ8uFZAbJWmDb5IEq
z/80zV8P9UVkRNkVtIclmCIEP0hn9iOFYnrDeBFq9KLL1TtKtp0N4Y4nk5HdCNwj
wTQpG0SdJtrxhQ6CWL2SH1T4/nNcxIIdWELAkSI1XbU/42vesptg40aQ5stX1t8R
Z/+s2D7wacCBi3lVblFOTe8JFD9R00TmFji70Vbi1LCcrQql23K0YlBM1o9VkNv9
BKLcbGkGVWfoIGtOOO9L920hZaHhfHZIW/7DrghP8zFLM+LSjmDDWai2iR1NNeg/
5RxdcI/rfMipuw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:51 2025 by rpki-client