Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: xHj5rh9ijABxbQGpzc/pZ9qF7gFSumsw0JXNzHWAEkY=
Subject key identifier: 95:D1:C0:ED:24:8B:6B:47:52:7A:39:4A:57:73:0A:EB:3E:9B:EF:6D
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019A52D19B77CC4E11B35B84E85BEC5C2CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:00:59 +0000
Manifest this update: Wed 05 Nov 2025 07:00:59 +0000
Manifest next update: Thu 06 Nov 2025 07:00:59 +0000
Files and hashes: 1: DWjeKEhsrCMQSkqXSu5F6-_lK2c.roa (hash: E/1JJ03/M4DXDyCYKLov4LZTD3sgsbYcGtynvXI+0ao=)
2: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: +qFQuEJPA4LQlmNL7rcusCP2sAyMcZbQ9U6gasEcjdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:9b:77:cc:4e:11:b3:5b:84:e8:5b:ec:5c:2c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Nov 5 07:00:59 2025 GMT
Not After : Nov 6 07:00:59 2025 GMT
Subject: CN=95d1c0ed248b6b47527a394a57730aeb3e9bef6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:42:60:35:cc:fd:50:d2:ee:32:98:b0:e1:
83:d1:e9:30:a9:01:75:47:52:cf:7c:08:63:46:0b:
fe:1a:f7:6f:ef:2a:01:6a:ee:9a:b0:54:21:7c:08:
11:3b:ce:cf:8f:7e:f8:81:76:6b:79:f8:a7:fd:6d:
54:a0:93:d1:15:3e:70:35:91:0a:07:f8:fa:c7:a0:
87:67:c1:0c:7d:99:ba:88:e1:dd:93:af:9a:b4:61:
04:a2:1b:80:2a:12:29:df:ac:9f:27:ca:0b:ba:ec:
09:22:9d:71:69:a2:1f:50:bf:c7:32:28:c8:8f:21:
a6:b0:c3:ce:51:d2:a7:8b:7a:83:20:e1:43:6f:a8:
21:36:dc:8d:1b:98:d0:fd:96:29:54:9c:3b:a2:4e:
d6:96:78:84:36:1c:11:f2:3a:97:15:a1:59:e6:83:
72:c1:55:77:5d:c6:8c:fc:e5:fd:4a:c9:65:ef:60:
8f:3f:46:37:df:c1:43:70:7f:92:9b:95:f4:d6:db:
2e:bf:40:26:2f:a1:dc:58:ef:56:86:6a:53:3a:c2:
3c:ac:aa:e6:8e:b6:68:65:c4:f0:6c:15:88:27:7a:
98:8e:5a:df:ff:09:74:a1:11:fc:96:26:fb:a3:31:
51:51:77:a9:ae:40:62:50:c1:3b:21:44:e5:60:9b:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:C0:ED:24:8B:6B:47:52:7A:39:4A:57:73:0A:EB:3E:9B:EF:6D
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:37:37:58:af:45:bd:58:58:b3:8d:da:c5:d5:d5:ad:b8:7c:
32:e2:b1:74:22:b6:d4:a8:ab:69:45:6c:d1:47:4b:d4:e0:d6:
8f:5d:18:2c:99:4e:24:d7:b0:b5:e5:4e:74:19:b3:3e:d8:fe:
4f:3e:33:96:a1:b6:bd:f9:00:ea:e0:9b:cc:69:84:59:c3:75:
4e:39:e7:86:e3:1c:d9:7d:2f:4d:d5:70:81:b5:ec:5c:b5:09:
3a:70:92:7d:c3:93:97:19:3f:b9:3c:cd:b0:2a:35:e4:99:b6:
26:75:2a:e9:c9:6c:40:6f:82:57:f9:c7:20:b1:8b:90:4a:26:
bd:b3:61:7c:48:d4:d7:33:86:6e:63:84:ce:5d:06:95:5f:aa:
ee:12:ab:17:e5:21:db:61:7b:3c:af:a7:1b:1b:d9:84:18:69:
c6:7d:98:92:90:59:c8:ea:7a:d7:52:22:a3:19:5a:74:66:c9:
35:c0:df:21:16:69:5f:24:eb:cb:3f:a1:bc:41:01:10:ef:dc:
87:84:16:7e:2f:30:c4:62:fb:a1:43:70:9f:ff:df:a6:50:c5:
21:46:71:e1:1a:0e:3f:4f:d4:d5:ed:c7:65:60:d6:32:77:f8:
5f:14:50:d4:ae:18:5e:e6:9b:8f:53:f1:55:73:18:06:51:42:
32:7c:35:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0Zt3zE4Rs1uE6FvsXCyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjI5ODE5Nzg4ODU2OTZjZTFjMmJiZjRhZjk5ZGFkYzJj
NjE4ZWIwHhcNMjUxMTA1MDcwMDU5WhcNMjUxMTA2MDcwMDU5WjAzMTEwLwYDVQQD
Eyg5NWQxYzBlZDI0OGI2YjQ3NTI3YTM5NGE1NzczMGFlYjNlOWJlZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+pCYDXM/VDS7jKYsOGD0ekwqQF1
R1LPfAhjRgv+Gvdv7yoBau6asFQhfAgRO87Pj374gXZrefin/W1UoJPRFT5wNZEK
B/j6x6CHZ8EMfZm6iOHdk6+atGEEohuAKhIp36yfJ8oLuuwJIp1xaaIfUL/HMijI
jyGmsMPOUdKni3qDIOFDb6ghNtyNG5jQ/ZYpVJw7ok7WlniENhwR8jqXFaFZ5oNy
wVV3XcaM/OX9Ssll72CPP0Y338FDcH+Sm5X01tsuv0AmL6HcWO9WhmpTOsI8rKrm
jrZoZcTwbBWIJ3qYjlrf/wl0oRH8lib7ozFRUXeprkBiUME7IUTlYJuqUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXRwO0ki2tHUno5SldzCus+m+9tMB8GA1UdIwQY
MBaAFJOymBl4iFaWzhwrv0r5na3CxhjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzkt
MzFjOTVlMmExZDZmLzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzktMzFjOTVlMmExZDZm
LzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDc3WK9F
vVhYs43axdXVrbh8MuKxdCK21KiraUVs0UdL1ODWj10YLJlOJNewteVOdBmzPtj+
Tz4zlqG2vfkA6uCbzGmEWcN1TjnnhuMc2X0vTdVwgbXsXLUJOnCSfcOTlxk/uTzN
sCo15Jm2JnUq6clsQG+CV/nHILGLkEomvbNhfEjU1zOGbmOEzl0GlV+q7hKrF+Uh
22F7PK+nGxvZhBhpxn2YkpBZyOp611IioxladGbJNcDfIRZpXyTryz+hvEEBEO/c
h4QWfi8wxGL7oUNwn//fplDFIUZx4RoOP0/U1e3HZWDWMnf4XxRQ1K4YXuabj1Px
VXMYBlFCMnw1fw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:53 2025 by rpki-client