Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: dIy5fZOCpBOGr26aKMCOFoj85fuvIccLHDN+sADf3/8=
Subject key identifier: 42:56:55:4C:A3:A9:1C:B3:F2:B5:09:7F:8D:5A:40:57:38:1D:61:BB
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 019A4F98FFADA8B74427BE685108E16AB7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 13A7
Signing time: Tue 04 Nov 2025 16:00:18 +0000
Manifest this update: Tue 04 Nov 2025 16:00:18 +0000
Manifest next update: Wed 05 Nov 2025 16:00:18 +0000
Files and hashes: 1: O_Wh7DXILbeq2pJ7lbo670WPHcI.roa (hash: 9coM5+TGNwqDkXBfhIBTqYZ9wRzRhg/kPk42ppbDqL4=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: mxTDIqv5+u9gE9wjiHp2INNvQp1HNL7JmmMhiC4CSDo=)
3: wurW9HScl5J6v9_HgJ6iitJiiYY.roa (hash: M+hjHy8mpb8e2lyHR4XP7A/L1pzrBL572LaM0RnZ+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ff:ad:a8:b7:44:27:be:68:51:08:e1:6a:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Nov 4 16:00:18 2025 GMT
Not After : Nov 5 16:00:18 2025 GMT
Subject: CN=4256554ca3a91cb3f2b5097f8d5a4057381d61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:e5:01:aa:c7:0f:e8:65:a0:4d:12:45:07:
4a:80:c9:16:35:fb:28:b2:5d:50:99:a9:45:41:b5:
ec:99:68:93:53:4d:cf:18:94:42:d4:31:08:81:6e:
79:93:2d:09:f9:78:96:dd:f3:69:f6:5b:56:63:49:
79:14:68:ca:53:d9:5c:e9:89:0a:e1:c5:aa:14:0a:
ce:28:1f:0d:07:a9:11:e3:a2:f3:9e:46:44:17:2e:
c4:4c:a7:86:34:cb:a0:b8:79:ff:91:3d:df:0a:2b:
f3:8a:37:bc:c8:f1:ab:0b:1d:9e:72:93:83:54:9a:
e1:50:ac:22:d9:a9:4a:af:df:ca:87:c7:55:34:fd:
5f:92:41:2f:19:ed:82:21:9d:be:52:5e:d0:ef:01:
0e:70:6a:29:20:a9:44:50:70:cc:f9:db:7f:6a:54:
ae:a3:6c:56:52:b4:2c:b2:0a:83:7e:91:1c:79:a2:
73:3a:5b:ee:dc:f1:1c:87:04:c8:b6:37:21:44:77:
0b:ff:d7:f1:eb:1d:d6:bd:f3:8d:b2:24:f8:54:09:
c7:f0:b4:08:c3:68:ca:56:13:a6:8a:15:ce:3d:52:
42:17:e2:0f:38:56:c4:bf:a2:f4:e5:98:d5:5d:22:
97:b8:42:84:5a:e8:14:3b:f2:5d:b3:f1:af:9a:53:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:56:55:4C:A3:A9:1C:B3:F2:B5:09:7F:8D:5A:40:57:38:1D:61:BB
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bb:a6:cb:74:c8:2b:51:f3:e9:94:07:85:0a:c8:18:6b:86:
b2:dc:48:3e:19:a3:c5:b2:13:dc:3d:0f:04:9e:25:47:f8:e6:
c2:03:8e:b2:2a:6e:dd:aa:cd:32:b4:8a:6a:59:e1:1a:57:e4:
8d:42:77:af:88:2e:ae:49:a3:a5:83:ab:fc:1b:c1:1b:fb:e2:
a9:36:c8:d8:88:6f:de:53:c9:a7:8e:81:0c:2d:e4:fd:ad:ed:
fe:84:79:0a:28:82:49:08:11:53:92:63:eb:12:8f:78:a8:90:
9c:4f:e0:45:07:58:90:5d:70:73:ab:b3:ce:a6:ec:2b:8b:17:
63:51:b7:7b:c0:34:4a:8f:37:e2:8a:d2:11:eb:0a:f6:4f:28:
06:38:ef:08:e2:40:f9:aa:09:49:2c:02:6e:9f:3a:ac:a0:15:
ce:6f:47:0a:c2:7f:38:b1:2f:20:f0:c6:5d:cf:7b:23:40:18:
5f:6b:87:1c:4e:af:70:68:45:1c:52:28:51:3f:6d:f9:eb:dc:
d5:ef:6b:62:67:14:c7:75:87:90:86:56:4d:ff:03:96:f6:e9:
4e:5b:77:29:c5:4a:cf:12:9a:9f:29:c9:07:20:31:c3:0a:7e:
be:85:ce:38:4b:b1:e1:74:87:89:da:bd:47:20:ca:17:df:85:
b8:19:f3:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmP+tqLdEJ75oUQjharf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjUxMTA0MTYwMDE4WhcNMjUxMTA1MTYwMDE4WjAzMTEwLwYDVQQD
Eyg0MjU2NTU0Y2EzYTkxY2IzZjJiNTA5N2Y4ZDVhNDA1NzM4MWQ2MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCjlAarHD+hloE0SRQdKgMkWNfso
sl1QmalFQbXsmWiTU03PGJRC1DEIgW55ky0J+XiW3fNp9ltWY0l5FGjKU9lc6YkK
4cWqFArOKB8NB6kR46LznkZEFy7ETKeGNMuguHn/kT3fCivzije8yPGrCx2ecpOD
VJrhUKwi2alKr9/Kh8dVNP1fkkEvGe2CIZ2+Ul7Q7wEOcGopIKlEUHDM+dt/alSu
o2xWUrQssgqDfpEceaJzOlvu3PEchwTItjchRHcL/9fx6x3WvfONsiT4VAnH8LQI
w2jKVhOmihXOPVJCF+IPOFbEv6L05ZjVXSKXuEKEWugUO/Jds/GvmlN9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJWVUyjqRyz8rUJf41aQFc4HWG7MB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILumy3TI
K1Hz6ZQHhQrIGGuGstxIPhmjxbIT3D0PBJ4lR/jmwgOOsipu3arNMrSKalnhGlfk
jUJ3r4gurkmjpYOr/BvBG/viqTbI2Ihv3lPJp46BDC3k/a3t/oR5CiiCSQgRU5Jj
6xKPeKiQnE/gRQdYkF1wc6uzzqbsK4sXY1G3e8A0So834orSEesK9k8oBjjvCOJA
+aoJSSwCbp86rKAVzm9HCsJ/OLEvIPDGXc97I0AYX2uHHE6vcGhFHFIoUT9t+evc
1e9rYmcUx3WHkIZWTf8DlvbpTlt3KcVKzxKanynJByAxwwp+voXOOEux4XSHidq9
RyDKF9+FuBnzSA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:21 2025 by rpki-client