Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: t8APtmlRq8DV5IBokjjIrqLvc9nAKiHTeUKyJ5hS+eM=
Subject key identifier: 83:CF:E9:D6:77:83:F5:4C:DA:D6:A6:BB:29:05:11:1F:A7:2B:D9:55
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 019A4E50042F492E6EA1F7C23BD09F0EF0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0BE2
Signing time: Tue 04 Nov 2025 10:00:58 +0000
Manifest this update: Tue 04 Nov 2025 10:00:58 +0000
Manifest next update: Wed 05 Nov 2025 10:00:58 +0000
Files and hashes: 1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: K9Uj6uQfoB2dGbvfshdSPgekeSaKyN2AfubH9U+0rvg=)
2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:04:2f:49:2e:6e:a1:f7:c2:3b:d0:9f:0e:f0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Nov 4 10:00:58 2025 GMT
Not After : Nov 5 10:00:58 2025 GMT
Subject: CN=83cfe9d67783f54cdad6a6bb2905111fa72bd955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:21:8a:0c:90:00:8c:85:f7:6e:71:88:7e:
6d:60:e6:41:42:24:18:cf:eb:c5:12:a1:da:bb:c2:
1f:2d:01:ec:f2:c8:7e:15:c3:69:45:9c:11:93:b5:
62:09:3e:a8:ba:30:be:d3:14:9c:bc:70:95:5a:eb:
1c:67:a4:2c:35:a2:ae:71:2f:21:62:b9:20:af:05:
ea:f6:3a:f8:3f:59:a3:ae:41:69:0c:6f:cf:df:5f:
6b:91:23:19:2a:4e:cb:69:28:33:f7:91:06:4f:db:
c9:e3:6e:49:4a:64:86:c4:fa:49:6f:24:36:23:51:
3d:de:2e:f4:a4:3c:77:4b:ed:d5:bd:4f:b2:fc:d3:
17:ca:dd:f5:0e:f9:c6:ba:d8:0e:2d:9d:db:df:dd:
0c:74:c7:73:7a:13:a1:95:6a:94:a4:3c:21:9a:a0:
4d:e9:f0:5a:16:c9:59:2c:51:45:23:e6:2a:0f:e0:
f1:94:2e:85:8a:a4:29:e7:1b:c5:db:5c:3e:2d:c3:
0e:db:3a:5e:47:3b:62:c8:2c:1b:6f:52:eb:c3:38:
86:bf:5e:a0:e5:5d:65:ea:ec:82:67:f5:d2:fb:85:
20:d0:64:4b:9b:85:39:ab:92:a1:80:4b:95:2d:bf:
54:86:6c:dc:22:03:c6:c5:19:46:b9:99:71:7f:b7:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:E9:D6:77:83:F5:4C:DA:D6:A6:BB:29:05:11:1F:A7:2B:D9:55
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dc:61:c0:cf:1b:41:d2:f1:a0:92:3c:a4:49:57:39:9b:38:
12:f7:4f:c0:ee:8a:24:f2:bf:2f:25:9c:14:1a:32:e9:19:9d:
7d:53:bf:62:08:16:82:1d:c8:2a:3b:d9:fa:2b:54:6e:86:1f:
b5:8a:02:ee:ab:f6:04:bd:87:82:18:eb:7c:31:10:0b:10:03:
46:72:31:7c:9c:f5:f4:89:b1:e0:7e:e0:14:0c:ca:a2:b2:fd:
a2:6d:88:ce:cb:37:b9:94:4a:b8:46:33:58:27:b9:23:de:c5:
36:70:9e:71:ad:e7:9d:c4:76:b4:72:4e:5d:a9:4d:20:2c:42:
0b:35:3c:b0:56:69:c5:b0:66:5b:17:d0:49:c8:e5:99:14:a2:
3f:54:ac:26:2c:41:f0:5f:0f:c7:dd:d3:47:2d:27:e7:f4:94:
68:41:cc:38:29:68:10:f5:e7:3a:5e:46:d3:6f:c1:87:20:c6:
13:93:9a:e2:1e:52:d7:14:48:ee:e6:de:3b:1f:a0:b1:eb:b0:
07:36:84:87:da:76:f9:53:c0:80:a9:b3:c3:53:37:95:b0:e0:
b7:b6:fe:f9:25:cf:db:b0:6f:52:d8:fd:d2:af:4c:71:f5:8d:
77:0e:64:e6:eb:f1:b2:9a:20:ea:e0:73:b6:b5:95:8b:f7:1c:
4e:df:e3:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOUAQvSS5uoffCO9CfDvD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0
NmY1NWMwHhcNMjUxMTA0MTAwMDU4WhcNMjUxMTA1MTAwMDU4WjAzMTEwLwYDVQQD
Eyg4M2NmZTlkNjc3ODNmNTRjZGFkNmE2YmIyOTA1MTExZmE3MmJkOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYUhigyQAIyF925xiH5tYOZBQiQY
z+vFEqHau8IfLQHs8sh+FcNpRZwRk7ViCT6oujC+0xScvHCVWuscZ6QsNaKucS8h
YrkgrwXq9jr4P1mjrkFpDG/P319rkSMZKk7LaSgz95EGT9vJ425JSmSGxPpJbyQ2
I1E93i70pDx3S+3VvU+y/NMXyt31DvnGutgOLZ3b390MdMdzehOhlWqUpDwhmqBN
6fBaFslZLFFFI+YqD+DxlC6FiqQp5xvF21w+LcMO2zpeRztiyCwbb1LrwziGv16g
5V1l6uyCZ/XS+4Ug0GRLm4U5q5KhgEuVLb9UhmzcIgPGxRlGuZlxf7cmiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPP6dZ3g/VM2tamuykFER+nK9lVMB8GA1UdIwQY
MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt
YWQyOGZhOTY2YjUxLzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx
LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINxhwM8b
QdLxoJI8pElXOZs4EvdPwO6KJPK/LyWcFBoy6RmdfVO/YggWgh3IKjvZ+itUboYf
tYoC7qv2BL2HghjrfDEQCxADRnIxfJz19Imx4H7gFAzKorL9om2Izss3uZRKuEYz
WCe5I97FNnCeca3nncR2tHJOXalNICxCCzU8sFZpxbBmWxfQScjlmRSiP1SsJixB
8F8Px93TRy0n5/SUaEHMOCloEPXnOl5G02/BhyDGE5Oa4h5S1xRI7ubeOx+gseuw
BzaEh9p2+VPAgKmzw1M3lbDgt7b++SXP27BvUtj90q9McfWNdw5k5uvxspog6uBz
trWVi/ccTt/jUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:13 2025 by rpki-client