Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: ZO4ohSRT0Lqb2t/zCgBl2+BozKaSAg+V/eru58+lzfk=
Subject key identifier: 63:B9:E2:73:0C:87:44:34:52:9A:22:01:81:0F:EC:8A:9F:46:30:23
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 019A4E4F89CE971D1349BF9E4461FE6662D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 14C0
Signing time: Tue 04 Nov 2025 10:00:26 +0000
Manifest this update: Tue 04 Nov 2025 10:00:26 +0000
Manifest next update: Wed 05 Nov 2025 10:00:26 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: Tt6SZSnQGx3NPeP2yU/F/6HN41JuVDdiMof/OgDnD+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:89:ce:97:1d:13:49:bf:9e:44:61:fe:66:62:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Nov 4 10:00:26 2025 GMT
Not After : Nov 5 10:00:26 2025 GMT
Subject: CN=63b9e2730c874434529a2201810fec8a9f463023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:0e:88:5d:d5:3c:e6:a1:ad:b5:85:78:59:
77:a1:08:50:80:be:53:f8:57:97:0e:40:79:90:1a:
1c:95:ae:69:ba:af:8a:ab:a7:fe:7a:7f:92:57:65:
68:ae:55:d2:7e:70:e9:0d:33:ee:94:d7:cf:25:be:
cc:bc:ff:f7:72:a2:67:99:5e:18:16:49:58:77:42:
05:48:89:6a:fc:25:90:f4:a9:06:13:4c:94:95:ae:
53:0e:ba:25:f2:11:15:52:6e:1c:dd:da:8c:c6:95:
2c:ec:c9:c1:8c:3a:b9:77:14:f8:54:50:70:89:ad:
5a:a2:a8:3a:8c:b5:d7:20:91:ff:e9:19:ed:8d:be:
71:28:e8:ae:c0:86:51:33:44:05:4c:f1:4b:7e:92:
fb:3b:89:41:9e:d9:e1:2e:38:fe:be:22:84:99:07:
97:81:7c:67:09:12:2e:10:12:d1:26:a8:65:53:2d:
3d:7b:58:a1:46:e0:bb:38:ce:fc:4a:6d:0d:33:56:
d7:6d:ad:66:1b:f4:75:93:6f:0c:23:4e:08:d1:d5:
bf:23:de:9a:c8:28:47:4e:b7:5a:2d:b4:28:a7:50:
ea:13:90:bd:b4:eb:1f:98:af:e1:0c:f8:b0:4a:0c:
ca:f6:f2:c2:e5:ec:7a:ce:09:d8:62:09:ef:b8:ab:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B9:E2:73:0C:87:44:34:52:9A:22:01:81:0F:EC:8A:9F:46:30:23
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:61:d2:ec:57:5b:fd:0c:59:52:57:50:17:ec:eb:92:5f:
54:3c:04:22:70:3d:8d:af:b6:84:54:57:d5:ac:44:cb:5e:a4:
ee:50:f4:53:f2:4d:d1:bc:bd:8e:2b:9b:94:90:8c:a0:d6:c1:
1d:16:90:02:6c:3f:86:6a:f0:4b:56:b9:e6:c4:e3:14:df:ad:
57:ef:bb:68:b6:8a:17:b4:54:4f:f7:3d:75:93:a4:d3:81:95:
c3:54:50:dc:29:cb:a6:ce:dd:db:7e:6d:d0:6c:e0:59:c2:97:
91:d3:76:26:69:8b:48:73:b3:3a:90:52:16:c3:7d:eb:bc:8c:
63:c3:af:89:7d:6b:32:82:cb:40:f7:ab:ba:8e:0a:c6:e3:89:
b2:66:cc:ff:a9:2f:4d:3f:a4:9d:8a:ab:d7:5b:8b:1b:50:63:
fa:30:7a:62:43:69:1c:90:c1:6c:63:dd:97:44:8f:1c:e6:2b:
ec:40:0a:96:9b:31:91:ee:4d:20:95:e6:c9:23:33:cc:6b:df:
4a:a7:40:80:e2:e3:01:13:26:84:3f:de:29:ba:f6:15:b2:40:
21:61:1b:57:70:f9:a0:08:ff:97:04:03:68:08:75:4c:96:13:
89:0b:e9:fc:dd:f0:ac:ce:67:62:4b:5f:5e:d5:26:9d:3c:e2:
95:5f:6f:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT4nOlx0TSb+eRGH+ZmLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk
M2M4YTYwHhcNMjUxMTA0MTAwMDI2WhcNMjUxMTA1MTAwMDI2WjAzMTEwLwYDVQQD
Eyg2M2I5ZTI3MzBjODc0NDM0NTI5YTIyMDE4MTBmZWM4YTlmNDYzMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzcOiF3VPOahrbWFeFl3oQhQgL5T
+FeXDkB5kBocla5puq+Kq6f+en+SV2VorlXSfnDpDTPulNfPJb7MvP/3cqJnmV4Y
FklYd0IFSIlq/CWQ9KkGE0yUla5TDrol8hEVUm4c3dqMxpUs7MnBjDq5dxT4VFBw
ia1aoqg6jLXXIJH/6Rntjb5xKOiuwIZRM0QFTPFLfpL7O4lBntnhLjj+viKEmQeX
gXxnCRIuEBLRJqhlUy09e1ihRuC7OM78Sm0NM1bXba1mG/R1k28MI04I0dW/I96a
yChHTrdaLbQop1DqE5C9tOsfmK/hDPiwSgzK9vLC5ex6zgnYYgnvuKtquQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGO54nMMh0Q0UpoiAYEP7IqfRjAjMB8GA1UdIwQY
MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt
MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh
LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdVh0uxX
W/0MWVJXUBfs65JfVDwEInA9ja+2hFRX1axEy16k7lD0U/JN0by9jiublJCMoNbB
HRaQAmw/hmrwS1a55sTjFN+tV++7aLaKF7RUT/c9dZOk04GVw1RQ3CnLps7d235t
0GzgWcKXkdN2JmmLSHOzOpBSFsN967yMY8OviX1rMoLLQPeruo4KxuOJsmbM/6kv
TT+knYqr11uLG1Bj+jB6YkNpHJDBbGPdl0SPHOYr7EAKlpsxke5NIJXmySMzzGvf
SqdAgOLjARMmhD/eKbr2FbJAIWEbV3D5oAj/lwQDaAh1TJYTiQvp/N3wrM5nYktf
XtUmnTzilV9vFg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:23 2025 by rpki-client