Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: Ol7AXWtmEffEZn+uktOrZqj+T1rAGPfy+Y/novzvlLM=
Subject key identifier: 87:04:60:B3:55:4D:08:A2:E2:5C:30:5E:B6:B3:C6:FE:7F:10:F1:AB
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 019A533F8BF0445C6DF33565B7D5E6611006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 134F
Signing time: Wed 05 Nov 2025 09:01:04 +0000
Manifest this update: Wed 05 Nov 2025 09:01:04 +0000
Manifest next update: Thu 06 Nov 2025 09:01:04 +0000
Files and hashes: 1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: tKO0AqL7X9E7EsGeWId7qMZrr2PsD7HXhmc8S9V/rZg=)
2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:8b:f0:44:5c:6d:f3:35:65:b7:d5:e6:61:10:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Nov 5 09:01:04 2025 GMT
Not After : Nov 6 09:01:04 2025 GMT
Subject: CN=870460b3554d08a2e25c305eb6b3c6fe7f10f1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ef:50:25:42:48:80:e5:fa:b1:03:aa:e4:ba:
63:7b:83:16:94:9c:76:88:8e:83:ad:aa:de:0d:c7:
cf:8f:cf:3d:a4:43:ec:8d:06:6b:50:9e:dd:c9:94:
ba:2d:0e:46:ac:0c:86:07:39:84:d8:ed:d0:df:55:
f0:8d:44:99:26:93:0a:c4:9c:ae:03:5b:15:71:ff:
e4:50:30:94:0a:c4:6b:2c:4d:f4:01:03:80:a6:26:
59:9e:e2:6e:81:d0:e2:94:06:47:a4:34:e3:30:4a:
4e:df:f0:a0:13:6e:12:ea:a9:74:d1:be:de:27:cc:
8f:d6:09:46:dd:3d:28:57:b0:b4:ab:46:df:a4:98:
b4:5e:ec:e0:f8:90:88:2c:d9:5c:d7:d6:49:f7:57:
c9:f5:2a:9b:7c:7b:3b:cc:5a:18:d7:15:a7:07:4e:
7d:a8:a8:ba:8f:15:c6:e1:98:2b:b2:0b:27:b2:b3:
78:ac:9a:fe:1f:54:34:d8:a0:5d:32:17:d2:5a:26:
a7:03:e6:1d:5d:5e:45:e7:48:73:19:93:4d:7c:64:
c1:8d:c1:c7:ad:0c:e1:e1:9e:bf:e7:85:77:ac:a1:
b0:41:aa:0e:65:af:32:19:4a:a3:51:ac:60:61:a7:
ca:ed:23:25:45:7e:e8:01:c9:87:a0:7f:47:36:00:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:60:B3:55:4D:08:A2:E2:5C:30:5E:B6:B3:C6:FE:7F:10:F1:AB
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:34:c1:a5:c6:9b:88:db:69:50:3e:c1:ee:a5:b0:1e:7d:0e:
87:40:cd:d3:dd:f6:7b:da:5b:81:58:37:25:b1:47:9e:8c:90:
c9:ba:52:25:50:74:d4:c0:70:61:b5:de:d1:3b:be:cf:4d:05:
7a:fd:3f:86:45:c1:fd:f0:a9:9e:25:5a:30:cf:98:6b:fe:9d:
86:35:88:f7:ba:55:bf:58:7d:bc:4a:b9:96:2e:71:ac:ff:0d:
3c:62:9a:d5:32:90:35:d8:f8:b6:51:9a:b1:5f:d1:27:69:6c:
fa:9f:0e:af:fd:28:2f:60:c5:f3:ae:e8:f5:ff:90:74:48:3b:
ca:52:d1:be:d2:a2:6f:67:ca:7e:b9:27:60:08:a3:92:b5:81:
19:8a:43:68:b4:ae:9f:9b:68:3a:05:8a:a5:d2:a1:11:9a:67:
84:34:95:2d:1c:1e:47:f8:0c:c9:0b:0b:a5:b1:2f:ca:24:20:
63:bb:80:d0:a0:e9:17:03:24:a2:d8:23:20:8d:29:be:d1:0a:
e1:89:2a:47:b1:58:79:3e:60:4a:3a:fe:bd:cc:39:ae:dd:a6:
47:c1:59:8a:76:40:a9:37:77:b1:ec:a8:4b:53:f2:47:cf:4b:
b5:32:37:34:6c:bc:56:6e:96:05:48:0f:d4:95:48:f2:1d:82:
d6:07:8e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP4vwRFxt8zVlt9XmYRAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzU0M2FhMDAzNzNlOWU0ZDEwZTY0YzgzZDM3NzliMzc4
ODg4YzEwHhcNMjUxMTA1MDkwMTA0WhcNMjUxMTA2MDkwMTA0WjAzMTEwLwYDVQQD
Eyg4NzA0NjBiMzU1NGQwOGEyZTI1YzMwNWViNmIzYzZmZTdmMTBmMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++9QJUJIgOX6sQOq5Lpje4MWlJx2
iI6DrareDcfPj889pEPsjQZrUJ7dyZS6LQ5GrAyGBzmE2O3Q31XwjUSZJpMKxJyu
A1sVcf/kUDCUCsRrLE30AQOApiZZnuJugdDilAZHpDTjMEpO3/CgE24S6ql00b7e
J8yP1glG3T0oV7C0q0bfpJi0Xuzg+JCILNlc19ZJ91fJ9SqbfHs7zFoY1xWnB059
qKi6jxXG4ZgrsgsnsrN4rJr+H1Q02KBdMhfSWianA+YdXV5F50hzGZNNfGTBjcHH
rQzh4Z6/54V3rKGwQaoOZa8yGUqjUaxgYafK7SMlRX7oAcmHoH9HNgCBVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcEYLNVTQii4lwwXrazxv5/EPGrMB8GA1UdIwQY
MBaAFOw1Q6oANz6eTRDmTIPTd5s3iIjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEt
NTZmNmVjYzFjMTIxLzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEtNTZmNmVjYzFjMTIx
LzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTTBpcab
iNtpUD7B7qWwHn0Oh0DN0932e9pbgVg3JbFHnoyQybpSJVB01MBwYbXe0Tu+z00F
ev0/hkXB/fCpniVaMM+Ya/6dhjWI97pVv1h9vEq5li5xrP8NPGKa1TKQNdj4tlGa
sV/RJ2ls+p8Or/0oL2DF867o9f+QdEg7ylLRvtKib2fKfrknYAijkrWBGYpDaLSu
n5toOgWKpdKhEZpnhDSVLRweR/gMyQsLpbEvyiQgY7uA0KDpFwMkotgjII0pvtEK
4YkqR7FYeT5gSjr+vcw5rt2mR8FZinZAqTd3seyoS1PyR89LtTI3NGy8Vm6WBUgP
1JVI8h2C1geOrw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:13:12 2025 by rpki-client