Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: BMLTX4pMpZ01zEs85JPUNtOHDArTbeVTm/TsILX/D1s=
Subject key identifier: 64:6C:5E:3C:D6:47:3C:0D:E0:A4:49:26:3B:CF:CE:F1:22:DB:91:A5
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 019A50750D9F945D3A8455BC7A82D3C66772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:39 +0000
Manifest this update: Tue 04 Nov 2025 20:00:39 +0000
Manifest next update: Wed 05 Nov 2025 20:00:39 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: GxbLJtMbC+IEW5nS1adXrGN511byGZ0Oyapen/L2YRQ=)
2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:0d:9f:94:5d:3a:84:55:bc:7a:82:d3:c6:67:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Nov 4 20:00:39 2025 GMT
Not After : Nov 5 20:00:39 2025 GMT
Subject: CN=646c5e3cd6473c0de0a449263bcfcef122db91a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:40:2e:84:95:f6:a8:ac:16:2f:12:05:f4:
73:15:64:4e:9f:b2:11:12:b6:64:8c:ce:ea:cd:e5:
3d:ae:d1:c3:fd:e5:d0:8e:43:ab:ac:bb:e8:a4:2d:
70:53:3b:19:88:8d:2f:29:3b:86:1b:f8:ef:a8:c5:
7a:79:97:98:c4:97:5d:91:d5:2b:ec:e2:18:d6:8b:
d5:44:07:96:c2:b1:ef:40:93:af:59:1c:55:35:53:
9f:83:ce:62:5a:65:95:a2:ae:e6:9b:1f:10:70:24:
92:13:9d:c3:05:b9:00:f2:7b:59:cc:10:a4:df:5d:
a4:26:0f:7b:47:58:a3:ff:2c:49:d7:49:25:9b:eb:
a8:ef:a4:2b:94:0d:d6:c1:4a:c9:93:32:3c:e4:55:
38:d3:3c:64:ca:9a:bf:86:35:db:3f:b1:54:36:ac:
b7:c1:a8:9c:0c:da:e6:78:2f:70:34:6a:3f:c4:63:
5d:ca:2e:9d:b1:48:7f:c7:2b:f4:dd:7c:83:a2:b4:
52:33:ce:ee:50:28:23:ee:91:c4:41:59:5b:ac:a3:
95:a1:c5:2a:8d:1e:4b:23:56:c8:f9:4a:b3:6f:f0:
d0:1f:e9:46:d2:76:9e:e1:01:e9:a1:ef:e3:68:40:
ff:c2:e2:b7:30:75:04:2c:e8:10:17:0a:38:ff:e4:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:5E:3C:D6:47:3C:0D:E0:A4:49:26:3B:CF:CE:F1:22:DB:91:A5
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ec:b1:f8:66:9f:c2:5f:02:8f:8f:61:25:83:b6:11:53:3f:
ff:c3:bb:42:a2:50:20:94:08:98:3f:16:b1:2d:73:87:c7:c9:
7c:27:30:e7:bb:4d:2a:86:88:a7:ea:d4:11:41:49:29:ad:e4:
df:f2:89:bb:59:a7:ea:f0:8d:72:c5:86:ba:3a:60:52:53:2b:
f5:be:c9:cf:53:c5:1a:4a:88:57:f2:fa:48:58:0d:77:53:8a:
fe:6d:65:ba:6e:83:0d:bc:13:65:a8:91:8b:36:eb:65:c1:bc:
44:6b:7c:26:54:8d:aa:82:f5:47:f2:64:e8:0a:34:eb:f4:f9:
85:dc:d6:25:30:fa:cc:f1:47:48:fd:9c:16:8b:a7:12:2a:9f:
09:71:11:80:8d:21:0c:7f:e8:9d:c7:9d:89:8d:aa:91:42:a3:
25:c7:93:4a:d1:8e:81:14:22:79:37:75:15:bd:21:6c:b6:a7:
dd:66:17:14:cc:4a:d0:4f:e6:6b:11:80:94:64:25:f1:d6:a1:
39:4e:0f:6d:18:a0:23:19:95:b0:0e:69:8c:02:d1:91:ab:9a:
07:99:8e:f1:78:52:a1:d6:42:29:74:57:17:92:24:fe:9e:5b:
2d:3c:5a:89:2d:30:f6:53:a2:d4:30:db:98:b8:5a:50:b8:27:
b7:69:26:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdQ2flF06hFW8eoLTxmdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzM5ODhhODRmOWZiYjQxODVlYTRhYzViNzIxODQ1Y2Ey
ODAzN2UwHhcNMjUxMTA0MjAwMDM5WhcNMjUxMTA1MjAwMDM5WjAzMTEwLwYDVQQD
Eyg2NDZjNWUzY2Q2NDczYzBkZTBhNDQ5MjYzYmNmY2VmMTIyZGI5MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qpALoSV9qisFi8SBfRzFWROn7IR
ErZkjM7qzeU9rtHD/eXQjkOrrLvopC1wUzsZiI0vKTuGG/jvqMV6eZeYxJddkdUr
7OIY1ovVRAeWwrHvQJOvWRxVNVOfg85iWmWVoq7mmx8QcCSSE53DBbkA8ntZzBCk
312kJg97R1ij/yxJ10klm+uo76QrlA3WwUrJkzI85FU40zxkypq/hjXbP7FUNqy3
waicDNrmeC9wNGo/xGNdyi6dsUh/xyv03XyDorRSM87uUCgj7pHEQVlbrKOVocUq
jR5LI1bI+Uqzb/DQH+lG0nae4QHpoe/jaED/wuK3MHUELOgQFwo4/+QPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRsXjzWRzwN4KRJJjvPzvEi25GlMB8GA1UdIwQY
MBaAFO3DmIqE+fu0GF6krFtyGEXKKAN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEt
MTBmY2VkNWZkNGVlLzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEtMTBmY2VkNWZkNGVl
LzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOyx+Gaf
wl8Cj49hJYO2EVM//8O7QqJQIJQImD8WsS1zh8fJfCcw57tNKoaIp+rUEUFJKa3k
3/KJu1mn6vCNcsWGujpgUlMr9b7Jz1PFGkqIV/L6SFgNd1OK/m1lum6DDbwTZaiR
izbrZcG8RGt8JlSNqoL1R/Jk6Ao06/T5hdzWJTD6zPFHSP2cFounEiqfCXERgI0h
DH/oncediY2qkUKjJceTStGOgRQieTd1Fb0hbLan3WYXFMxK0E/maxGAlGQl8dah
OU4PbRigIxmVsA5pjALRkauaB5mO8XhSodZCKXRXF5Ik/p5bLTxaiS0w9lOi1DDb
mLhaULgnt2kmag==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:20 2025 by rpki-client