Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File: fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier: 90qg3twka28JHcBwzV4Szrbs0jpGObxN4Uh7Y9TdzgE=
Subject key identifier: 76:D4:01:DA:8E:79:ED:12:D2:8E:C0:56:64:AC:9C:1E:3C:47:11:48
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer: /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial: 019A4E18AAA0C7244685BDBAF37A6F0DE59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number: 07B9
Signing time: Tue 04 Nov 2025 09:00:30 +0000
Manifest this update: Tue 04 Nov 2025 09:00:30 +0000
Manifest next update: Wed 05 Nov 2025 09:00:30 +0000
Files and hashes: 1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: Ex2eZPoXq6oPTBF0wMVl1L+Z1caa7/o3Ucbr4zyTyQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:aa:a0:c7:24:46:85:bd:ba:f3:7a:6f:0d:e5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Validity
Not Before: Nov 4 09:00:30 2025 GMT
Not After : Nov 5 09:00:30 2025 GMT
Subject: CN=76d401da8e79ed12d28ec05664ac9c1e3c471148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:32:7f:0d:e8:1a:62:a3:21:03:64:b5:9b:
a8:5e:6d:5f:ab:bd:02:14:6b:4d:80:8d:94:f5:78:
db:33:fe:1b:c0:97:e5:6a:c5:c7:f8:57:ee:0d:aa:
37:cd:11:88:2e:1f:68:8e:8a:93:38:33:66:9f:3c:
c1:62:f9:bd:f5:6a:60:ae:59:b7:f3:28:f1:c3:d7:
5c:ac:be:2a:cf:c6:cb:88:8d:ce:0b:41:f8:66:19:
8f:0d:a8:2c:12:5b:07:87:56:30:48:71:fb:f4:88:
76:8f:55:ea:71:66:ca:72:12:af:57:66:ca:8d:cd:
6a:30:3b:77:d0:a9:f8:52:56:53:67:3b:5e:a4:72:
7e:1a:54:2c:84:b9:fa:f9:f1:d2:04:d5:4a:93:dc:
04:45:86:fd:1f:2b:47:8f:aa:50:8f:ca:5a:f6:0e:
a4:e4:ed:3e:82:0b:8e:90:40:7d:96:dd:b2:b8:64:
53:8a:00:00:2c:bb:ba:e7:e1:4d:8b:83:77:49:d7:
b4:31:b8:03:d8:77:4f:c1:08:1e:2e:b2:8e:f1:31:
7d:6d:52:db:ba:68:9e:bf:05:03:39:ca:a2:22:ec:
f9:75:77:03:e1:02:09:c7:9c:f0:af:4c:fb:0d:75:
86:71:39:4c:b1:2f:c6:7a:14:f8:b8:e8:f1:ec:8e:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:01:DA:8E:79:ED:12:D2:8E:C0:56:64:AC:9C:1E:3C:47:11:48
X509v3 Authority Key Identifier:
keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:58:c0:eb:4f:4d:6b:53:cc:75:70:ad:47:0f:d2:ce:cd:c9:
59:db:ed:70:ef:12:b5:41:fa:0c:86:8c:70:5b:37:8f:bc:13:
aa:d8:89:36:1c:56:8a:d6:4a:a5:92:aa:c8:15:d9:d5:e8:d7:
c1:06:15:20:91:01:f6:61:8d:42:e7:92:4b:cc:68:1a:46:b1:
e9:01:f8:f4:3a:19:28:a1:8f:e3:31:c6:94:11:2d:03:8e:bf:
ec:cd:3f:54:d1:d4:d0:46:c8:56:34:94:90:a8:26:f1:52:00:
32:1b:12:b3:d5:fc:e2:27:06:99:c7:75:2b:cf:95:ab:a6:5d:
5c:40:d0:53:66:24:52:2f:a0:5d:a0:53:dc:7f:47:13:cf:94:
e9:79:1b:22:ac:50:26:55:c8:b3:0d:10:fe:7b:57:e0:56:d4:
a5:45:f6:75:bd:83:08:92:32:bd:ac:da:27:db:59:5a:70:5f:
87:df:8e:59:85:55:63:10:28:ff:75:d6:ea:ab:a0:ee:3a:b0:
da:8e:be:db:38:ac:6c:40:f7:84:f3:cc:dc:4d:9b:cc:e6:f6:
18:e3:ce:0c:db:6b:4a:0e:61:22:89:36:6d:d5:7c:23:09:2b:
cd:12:c9:39:29:78:c9:74:50:78:05:9e:e0:9d:5d:1b:dc:a3:
5d:1b:bf:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGKqgxyRGhb2683pvDeWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlN2EyMGI0ODY4MjFkNjI3YmQzNjA5NWU3YTA1YWY5ZmFh
MTUyOWMwHhcNMjUxMTA0MDkwMDMwWhcNMjUxMTA1MDkwMDMwWjAzMTEwLwYDVQQD
Eyg3NmQ0MDFkYThlNzllZDEyZDI4ZWMwNTY2NGFjOWMxZTNjNDcxMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQAyfw3oGmKjIQNktZuoXm1fq70C
FGtNgI2U9XjbM/4bwJflasXH+FfuDao3zRGILh9ojoqTODNmnzzBYvm99Wpgrlm3
8yjxw9dcrL4qz8bLiI3OC0H4ZhmPDagsElsHh1YwSHH79Ih2j1XqcWbKchKvV2bK
jc1qMDt30Kn4UlZTZztepHJ+GlQshLn6+fHSBNVKk9wERYb9HytHj6pQj8pa9g6k
5O0+gguOkEB9lt2yuGRTigAALLu65+FNi4N3Sde0MbgD2HdPwQgeLrKO8TF9bVLb
umievwUDOcqiIuz5dXcD4QIJx5zwr0z7DXWGcTlMsS/GehT4uOjx7I7HhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbUAdqOee0S0o7AVmSsnB48RxFIMB8GA1UdIwQY
MBaAFH56ILSGgh1ie9NgleegWvn6oVKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUt
YmE3NWY0NzVmYzNlLzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUtYmE3NWY0NzVmYzNl
LzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALljA609N
a1PMdXCtRw/Szs3JWdvtcO8StUH6DIaMcFs3j7wTqtiJNhxWitZKpZKqyBXZ1ejX
wQYVIJEB9mGNQueSS8xoGkax6QH49DoZKKGP4zHGlBEtA46/7M0/VNHU0EbIVjSU
kKgm8VIAMhsSs9X84icGmcd1K8+Vq6ZdXEDQU2YkUi+gXaBT3H9HE8+U6XkbIqxQ
JlXIsw0Q/ntX4FbUpUX2db2DCJIyvazaJ9tZWnBfh9+OWYVVYxAo/3XW6qug7jqw
2o6+2zisbED3hPPM3E2bzOb2GOPODNtrSg5hIok2bdV8IwkrzRLJOSl4yXRQeAWe
4J1dG9yjXRu/1g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:01 2025 by rpki-client