Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
File: _h7q315_VCD2dKjrh7tLE3fNvWQ.mft (raw, json)
Hash identifier: SPmFqIFmkfqHIfTmHgqMNoMgtOhaQrrXS+hI0ePs/u8=
Subject key identifier: 87:83:AA:60:16:D5:86:18:7A:77:00:87:CF:20:B1:1E:20:7F:1C:67
Authority key identifier: FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64
Certificate issuer: /CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
Certificate serial: 019A4D737EBA41DD43B1A3187D884475E42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
Manifest number: 0370
Signing time: Tue 04 Nov 2025 06:00:05 +0000
Manifest this update: Tue 04 Nov 2025 06:00:05 +0000
Manifest next update: Wed 05 Nov 2025 06:00:05 +0000
Files and hashes: 1: _h7q315_VCD2dKjrh7tLE3fNvWQ.crl (hash: pxqpJEJ/oOPyez+i0W5/ul9bsATPQkJzLaRZJEwb628=)
2: doL4Cn2ma0kPf9AhJrRKrVG3Az0.roa (hash: SUzYz5u/F8jt5TpzuvWgvwZ7xHoIJE9Sk3avrITgKS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:7e:ba:41:dd:43:b1:a3:18:7d:88:44:75:e4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
Validity
Not Before: Nov 4 06:00:05 2025 GMT
Not After : Nov 5 06:00:05 2025 GMT
Subject: CN=8783aa6016d586187a770087cf20b11e207f1c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:f4:e2:eb:32:57:63:9b:8d:16:ca:1e:67:
98:99:bd:71:a7:ba:d8:75:e1:ac:bd:78:42:5f:b5:
54:aa:c3:e4:df:03:e3:df:e6:11:04:b9:b7:94:85:
41:c1:e4:49:f4:29:1e:42:f7:15:50:5e:66:77:f6:
b1:63:21:d2:b2:de:f4:39:48:f0:9f:70:f2:5e:25:
31:23:cb:e4:e7:12:fa:f4:73:bb:5a:3b:97:86:99:
06:e8:84:13:1e:e4:bd:b0:02:b7:6b:38:6e:7d:9f:
27:55:67:80:a5:57:3d:3e:b4:73:20:3a:d0:7e:33:
56:12:78:cc:11:d4:52:28:b1:db:2c:fc:e9:c8:b2:
0e:c2:3c:9d:8c:b5:9b:23:52:91:3b:8d:e8:92:75:
f8:88:a0:72:07:7f:d7:0b:41:ea:7a:2b:cd:fc:86:
1d:5b:17:38:d0:8c:19:88:98:7f:9f:ef:4f:f7:01:
c1:4a:47:21:6a:a1:98:16:a8:f0:a4:82:bb:2f:87:
02:d3:ad:83:ea:53:4a:de:8b:a6:06:26:18:44:45:
c5:bc:dd:5e:82:45:ef:58:16:a5:4d:3b:e1:c2:a0:
8e:96:a4:e1:17:a4:fe:5e:86:ab:00:69:9c:d6:a8:
0c:fa:b6:e4:05:83:0b:08:2e:c3:84:db:d0:91:06:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:AA:60:16:D5:86:18:7A:77:00:87:CF:20:B1:1E:20:7F:1C:67
X509v3 Authority Key Identifier:
keyid:FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b1:90:36:5d:ea:5b:6a:00:d4:2b:df:36:40:75:91:6e:b5:
f1:d5:01:2a:91:55:8b:7a:d0:a8:d9:3f:6e:64:5b:92:a6:83:
9a:57:90:55:c9:1d:78:61:53:9f:51:de:3f:46:2d:10:7c:81:
52:73:a0:86:db:35:65:d5:12:f8:05:10:62:4f:68:d7:46:e8:
ba:f0:dc:a8:eb:fa:99:c7:48:fa:bc:8c:7f:c7:85:1e:7e:8f:
2c:a5:69:e6:94:e7:a9:b5:ba:8c:d5:f4:ee:0c:1d:7f:69:8d:
f3:59:aa:26:15:4f:aa:a8:21:24:81:44:70:68:6d:4b:cc:33:
f8:32:04:65:61:cd:ae:2c:e5:ec:bd:72:94:b0:41:ca:79:03:
6c:71:fb:1f:f7:d3:95:cd:4c:34:29:30:f1:4f:9c:45:f0:4c:
28:e9:6b:65:1d:fe:80:1c:a6:23:99:c0:4e:b8:8d:ca:74:8c:
c4:2d:d0:2b:bc:47:a7:7b:66:87:9c:65:67:9a:71:3a:de:03:
96:b7:b0:0b:40:5f:e4:02:8f:d9:84:71:f4:78:4c:6b:bc:24:
d2:a3:67:f8:05:b7:3f:3b:dd:d2:06:1f:40:21:c7:86:f0:cb:
a5:bf:9c:3a:71:56:c3:98:4e:10:01:b9:d8:3d:6e:09:e0:9f:
53:41:fe:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc366Qd1DsaMYfYhEdeQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMWVlYWRmNWU3ZjU0MjBmNjc0YThlYjg3YmI0YjEzNzdj
ZGJkNjQwHhcNMjUxMTA0MDYwMDA1WhcNMjUxMTA1MDYwMDA1WjAzMTEwLwYDVQQD
Eyg4NzgzYWE2MDE2ZDU4NjE4N2E3NzAwODdjZjIwYjExZTIwN2YxYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAD04usyV2ObjRbKHmeYmb1xp7rY
deGsvXhCX7VUqsPk3wPj3+YRBLm3lIVBweRJ9CkeQvcVUF5md/axYyHSst70OUjw
n3DyXiUxI8vk5xL69HO7WjuXhpkG6IQTHuS9sAK3azhufZ8nVWeApVc9PrRzIDrQ
fjNWEnjMEdRSKLHbLPzpyLIOwjydjLWbI1KRO43oknX4iKByB3/XC0HqeivN/IYd
Wxc40IwZiJh/n+9P9wHBSkchaqGYFqjwpIK7L4cC062D6lNK3oumBiYYREXFvN1e
gkXvWBalTTvhwqCOlqThF6T+XoarAGmc1qgM+rbkBYMLCC7DhNvQkQaYjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeDqmAW1YYYencAh88gsR4gfxxnMB8GA1UdIwQY
MBaAFP4e6t9ef1Qg9nSo64e7SxN3zb1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83OWJkZDAtYzNjOS00YzQyLWI5YzUt
MzUwN2RmZmExZWYyLzEvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83OWJkZDAtYzNjOS00YzQyLWI5YzUtMzUwN2RmZmExZWYy
LzEvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLGQNl3q
W2oA1CvfNkB1kW618dUBKpFVi3rQqNk/bmRbkqaDmleQVckdeGFTn1HeP0YtEHyB
UnOghts1ZdUS+AUQYk9o10bouvDcqOv6mcdI+ryMf8eFHn6PLKVp5pTnqbW6jNX0
7gwdf2mN81mqJhVPqqghJIFEcGhtS8wz+DIEZWHNrizl7L1ylLBBynkDbHH7H/fT
lc1MNCkw8U+cRfBMKOlrZR3+gBymI5nATriNynSMxC3QK7xHp3tmh5xlZ5pxOt4D
lrewC0Bf5AKP2YRx9HhMa7wk0qNn+AW3Pzvd0gYfQCHHhvDLpb+cOnFWw5hOEAG5
2D1uCeCfU0H+2w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:32 2025 by rpki-client