Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: pHqB8XeE2e8CysNyEeTW34CrfaeEBBWeYlZdnUk1SX0=
Subject key identifier: 98:A9:B9:32:56:21:CE:4D:AB:69:28:4B:2B:F0:3B:CA:3E:65:98:1F
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 019A4DAB0CC8EB2BEA2EBFE9DAAD03D04260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 117D
Signing time: Tue 04 Nov 2025 07:00:46 +0000
Manifest this update: Tue 04 Nov 2025 07:00:46 +0000
Manifest next update: Wed 05 Nov 2025 07:00:46 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: gFRcxuLFSS2Oc0B+IA83H6fTVidxCpCF5JfJ7bv47OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0c:c8:eb:2b:ea:2e:bf:e9:da:ad:03:d0:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Nov 4 07:00:46 2025 GMT
Not After : Nov 5 07:00:46 2025 GMT
Subject: CN=98a9b9325621ce4dab69284b2bf03bca3e65981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:46:57:78:d5:54:2a:be:07:64:ca:84:19:
7e:72:23:72:31:c5:eb:34:ce:bc:4d:c6:6a:d7:cf:
90:6d:58:ae:99:64:0a:29:73:bd:33:83:1d:e2:60:
3f:a4:f5:75:1e:44:57:9b:e5:e5:7e:04:bc:f3:0c:
17:56:16:e3:bf:56:7b:03:f8:c4:d7:a7:f4:00:f9:
b6:29:2f:aa:2f:94:3f:10:fe:6d:dd:49:c8:5a:7b:
f2:41:9c:4e:7b:8f:0c:ec:35:50:c9:97:43:6e:b1:
70:13:5e:96:e2:30:f7:d6:68:10:89:9b:31:76:05:
64:24:2a:59:07:44:38:42:f0:7c:a3:a1:09:7b:9e:
ec:fa:10:54:6d:33:67:0c:1a:2e:65:fc:1a:d8:33:
da:05:f8:08:89:5c:83:5e:2b:c2:f1:7b:f5:01:14:
6c:e5:b2:08:77:59:51:fd:1f:b7:e1:e7:3b:f0:df:
86:0f:5f:ed:11:94:1c:43:ca:29:58:19:38:1b:48:
a8:29:5b:43:3f:97:0c:44:5e:0a:fc:f3:d0:54:4a:
23:03:63:b7:94:c6:69:6a:ea:bf:14:10:0d:7f:46:
5a:8e:93:26:dc:6c:3f:e8:25:86:ea:66:01:c8:1e:
d4:c4:ef:ef:c9:f7:fa:c0:54:81:bb:de:89:5f:74:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:B9:32:56:21:CE:4D:AB:69:28:4B:2B:F0:3B:CA:3E:65:98:1F
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:12:aa:b1:8d:8d:46:b7:1b:81:92:e4:90:e7:27:c4:f6:18:
70:cd:fa:30:94:61:66:db:30:96:85:2e:18:1c:de:a8:f3:e2:
41:8c:eb:1f:cd:55:88:e4:33:a7:57:c3:6e:c1:48:7e:9c:e2:
b9:ce:b9:65:e2:1c:33:2e:01:25:2e:8c:05:18:9f:b2:01:22:
e2:f2:b4:12:8b:bc:a4:b2:97:30:8e:83:0b:61:58:be:6d:2b:
d5:d7:31:43:0a:c4:a8:ef:0c:6f:15:b7:64:bb:f0:68:a7:83:
16:7f:78:83:aa:e5:75:c2:48:13:51:e3:65:96:3d:6b:47:19:
b3:aa:33:02:f7:20:44:20:f9:00:2c:c0:59:87:e5:9c:24:6d:
7c:05:b9:cc:ca:58:d3:c2:a1:ae:ce:98:bc:d0:e9:5f:0c:a8:
de:19:10:fe:3c:9c:2d:17:9d:ba:7c:04:01:f3:77:4d:99:40:
2f:a0:c7:91:6f:d3:70:cd:b6:88:38:3a:bd:94:6f:c6:df:71:
cb:35:cd:8d:14:66:ad:d0:62:e2:ac:61:b7:65:3c:15:90:1c:
20:e8:11:3a:c8:b5:be:93:b8:3e:23:d3:11:52:27:b7:ce:df:
08:a9:e4:6f:df:fd:e5:dd:48:07:97:64:1f:d7:6f:6d:f5:e2:
58:4c:fe:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqwzI6yvqLr/p2q0D0EJgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjM5ZGI1MDEyOGRiMzUwYWViYzg0MzgwODQ5OTE4YmIw
NWU3MDUwHhcNMjUxMTA0MDcwMDQ2WhcNMjUxMTA1MDcwMDQ2WjAzMTEwLwYDVQQD
Eyg5OGE5YjkzMjU2MjFjZTRkYWI2OTI4NGIyYmYwM2JjYTNlNjU5ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFxGV3jVVCq+B2TKhBl+ciNyMcXr
NM68TcZq18+QbViumWQKKXO9M4Md4mA/pPV1HkRXm+XlfgS88wwXVhbjv1Z7A/jE
16f0APm2KS+qL5Q/EP5t3UnIWnvyQZxOe48M7DVQyZdDbrFwE16W4jD31mgQiZsx
dgVkJCpZB0Q4QvB8o6EJe57s+hBUbTNnDBouZfwa2DPaBfgIiVyDXivC8Xv1ARRs
5bIId1lR/R+34ec78N+GD1/tEZQcQ8opWBk4G0ioKVtDP5cMRF4K/PPQVEojA2O3
lMZpauq/FBANf0ZajpMm3Gw/6CWG6mYByB7UxO/vyff6wFSBu96JX3QPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJipuTJWIc5Nq2koSyvwO8o+ZZgfMB8GA1UdIwQY
MBaAFJuznbUBKNs1CuvIQ4CEmRi7BecFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lMWY5YzctNTkwMy00MmM4LTk4MzMt
ZTI4ZmEzOWI0YjE3LzEvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lMWY5YzctNTkwMy00MmM4LTk4MzMtZTI4ZmEzOWI0YjE3
LzEvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxKqsY2N
RrcbgZLkkOcnxPYYcM36MJRhZtswloUuGBzeqPPiQYzrH81ViOQzp1fDbsFIfpzi
uc65ZeIcMy4BJS6MBRifsgEi4vK0Eou8pLKXMI6DC2FYvm0r1dcxQwrEqO8MbxW3
ZLvwaKeDFn94g6rldcJIE1HjZZY9a0cZs6ozAvcgRCD5ACzAWYflnCRtfAW5zMpY
08Khrs6YvNDpXwyo3hkQ/jycLRedunwEAfN3TZlAL6DHkW/TcM22iDg6vZRvxt9x
yzXNjRRmrdBi4qxht2U8FZAcIOgROsi1vpO4PiPTEVInt87fCKnkb9/95d1IB5dk
H9dvbfXiWEz+/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:11 2025 by rpki-client