Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: pVO6jWcGQ+OdkNNp7gWoCER69mrIlcKVqK30g8RMorM=
Subject key identifier: D0:1B:62:F3:AE:B4:3F:73:1C:44:EA:03:6C:ED:31:71:5D:42:D4:99
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 019A4EBD4ED630B74817E4089BCDBF05492F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 04AC
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: IwGlf9W1r9YgkT0FmhLBcMKQuD+MSkBwXGYKHteu8IU=)
2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4e:d6:30:b7:48:17:e4:08:9b:cd:bf:05:49:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=d01b62f3aeb43f731c44ea036ced31715d42d499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:22:5d:84:8a:bd:72:6d:4e:3c:d3:6d:45:
e4:1f:9e:08:4a:c4:e9:88:fb:31:18:5f:19:00:1b:
b1:6b:c4:30:43:b5:46:aa:4a:2d:b3:c0:91:6c:13:
a3:60:a1:47:c5:67:f4:d9:4a:bf:4f:8a:61:21:65:
11:10:9f:3e:5f:3c:a2:45:c5:aa:85:38:64:5d:a9:
40:4c:da:da:d6:95:94:b9:28:4e:b4:91:16:d4:ba:
26:11:59:9f:cb:fd:e4:f2:44:1f:5d:70:3e:a2:68:
9f:7a:ee:99:9f:f8:54:66:c9:7e:55:51:9f:c5:e4:
7f:a3:6b:19:9c:12:f9:81:01:d4:a4:60:f9:dd:01:
cb:0e:48:ae:c8:5e:5f:ed:25:ce:de:4d:78:e2:c6:
17:2e:ab:e3:81:b7:af:7e:d5:38:90:ae:65:cd:82:
68:93:67:71:6b:cd:00:2d:ec:8e:c2:df:c8:93:48:
a8:30:c9:59:88:cd:bd:1a:2a:47:28:d0:fe:9b:c0:
53:13:4c:43:74:7a:c8:b7:eb:4d:24:84:e6:46:14:
ac:64:97:fb:58:90:d4:8b:29:c4:e8:ac:b0:af:7a:
1a:1d:c9:23:ca:b4:d5:9b:3f:db:18:f0:aa:3a:5c:
c2:c6:95:26:c3:22:96:5a:a3:35:27:d6:99:29:d4:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1B:62:F3:AE:B4:3F:73:1C:44:EA:03:6C:ED:31:71:5D:42:D4:99
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9c:76:3f:65:59:a0:e9:da:df:92:56:6f:3e:58:36:38:6f:
7c:81:22:bc:dd:7c:1c:3c:42:4c:16:d9:18:b3:31:6e:09:c8:
44:c3:5a:ac:8c:cc:0d:72:6b:cd:e9:f7:94:0e:89:55:a2:70:
93:36:d3:d5:f9:0a:48:60:05:ef:c5:d4:0f:28:21:bb:00:5a:
14:70:fd:de:5f:31:01:12:fb:11:27:89:07:17:93:29:5a:75:
b8:b6:79:54:7a:77:d1:b7:56:c1:02:32:44:a2:7a:41:e2:66:
7d:e9:89:db:d2:62:81:70:38:76:8d:bd:77:d5:bb:77:3f:ef:
d1:b6:81:11:24:d2:11:4b:f0:5e:21:73:4a:78:c0:cf:ad:9c:
ac:89:ae:e3:7c:c2:60:c3:dc:b4:22:cb:df:70:0c:5e:9b:24:
8e:98:91:6a:ed:09:07:04:6b:5a:e6:b8:7d:31:21:f0:cb:91:
fa:d9:cc:f3:20:be:23:35:1e:33:74:cf:15:99:77:1a:87:6d:
ff:18:6f:7b:95:3d:16:cb:4c:01:1c:27:41:3a:5c:72:e8:7e:
2d:ea:32:be:c9:df:17:ab:57:ad:16:c6:06:b2:ef:a2:54:17:
10:0f:af:7c:ce:52:4a:18:af:39:3f:0c:cd:9b:78:a3:6c:79:
6e:33:5e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvU7WMLdIF+QIm82/BUkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1
MzY5ZjYwHhcNMjUxMTA0MTIwMDIwWhcNMjUxMTA1MTIwMDIwWjAzMTEwLwYDVQQD
EyhkMDFiNjJmM2FlYjQzZjczMWM0NGVhMDM2Y2VkMzE3MTVkNDJkNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnswiXYSKvXJtTjzTbUXkH54ISsTp
iPsxGF8ZABuxa8QwQ7VGqkots8CRbBOjYKFHxWf02Uq/T4phIWUREJ8+XzyiRcWq
hThkXalATNra1pWUuShOtJEW1LomEVmfy/3k8kQfXXA+omifeu6Zn/hUZsl+VVGf
xeR/o2sZnBL5gQHUpGD53QHLDkiuyF5f7SXO3k144sYXLqvjgbevftU4kK5lzYJo
k2dxa80ALeyOwt/Ik0ioMMlZiM29GipHKND+m8BTE0xDdHrIt+tNJITmRhSsZJf7
WJDUiynE6Kywr3oaHckjyrTVmz/bGPCqOlzCxpUmwyKWWqM1J9aZKdRW1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAbYvOutD9zHETqA2ztMXFdQtSZMB8GA1UdIwQY
MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt
MmY5MDU5YzRmM2E1LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1
LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5x2P2VZ
oOna35JWbz5YNjhvfIEivN18HDxCTBbZGLMxbgnIRMNarIzMDXJrzen3lA6JVaJw
kzbT1fkKSGAF78XUDyghuwBaFHD93l8xARL7ESeJBxeTKVp1uLZ5VHp30bdWwQIy
RKJ6QeJmfemJ29JigXA4do29d9W7dz/v0baBESTSEUvwXiFzSnjAz62crImu43zC
YMPctCLL33AMXpskjpiRau0JBwRrWua4fTEh8MuR+tnM8yC+IzUeM3TPFZl3Godt
/xhve5U9FstMARwnQTpccuh+LeoyvsnfF6tXrRbGBrLvolQXEA+vfM5SShivOT8M
zZt4o2x5bjNefg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:43 2025 by rpki-client