Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File: 7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier: z8P/oEfe3e+zlZdgOn2IqnLaWtNHcWCwpn2vaFoBGMM=
Subject key identifier: 32:38:8E:AC:38:9C:C7:B5:77:3B:37:DC:5D:34:BF:24:51:BC:81:D2
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial: 019A4F62A38B593B3C961EAF029783E55CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number: 0BEC
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: oeZ+vZnimT8WNp8oQF/SHcbn58OpEG/7JUs8KbX83iM=)
2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a3:8b:59:3b:3c:96:1e:af:02:97:83:e5:5c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=32388eac389cc7b5773b37dc5d34bf2451bc81d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:07:75:ae:a9:74:e9:0a:ce:3d:ae:66:55:
91:81:b5:c7:eb:78:0e:12:a6:29:6b:86:69:4d:e4:
bc:5f:9c:50:a4:b0:b8:d9:b7:fe:e2:3a:a8:fd:45:
80:17:ea:77:59:7e:8f:a8:43:a6:dd:04:21:bf:aa:
f7:95:18:85:b5:3a:96:ff:17:54:ee:00:03:d5:b9:
cb:4a:94:22:43:4a:26:42:f2:87:b0:10:f4:d9:88:
71:de:dd:f3:67:0d:fb:2a:99:0f:46:de:ac:e5:86:
74:da:fd:e8:fc:26:ea:af:2b:a5:f1:e3:dd:2c:e9:
f8:86:83:43:59:df:8e:d5:21:a1:ca:f2:e2:d9:66:
8e:0e:2c:bc:03:a6:97:12:9e:e3:e7:30:0b:70:29:
c5:41:2c:47:e0:cd:77:47:e4:e3:34:1f:b8:32:9d:
f0:48:a8:c7:15:ee:87:0f:fe:fa:2f:a9:36:98:5f:
aa:03:c8:5a:f7:9c:ff:12:d8:72:53:cd:8c:27:da:
55:71:88:1e:66:7e:00:cd:04:4f:41:6a:ef:62:60:
88:3f:1f:bb:5c:2a:04:48:b9:9c:ad:81:d6:25:be:
b0:9f:72:c0:4e:ac:2e:ef:37:df:97:84:37:35:9d:
5d:b0:8d:9d:14:e3:32:69:7c:61:86:c0:69:10:3d:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:38:8E:AC:38:9C:C7:B5:77:3B:37:DC:5D:34:BF:24:51:BC:81:D2
X509v3 Authority Key Identifier:
keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d1:74:cc:04:2f:55:fb:85:3b:7d:e4:d1:42:b5:7d:3f:0c:
4b:4e:17:0f:70:60:ba:54:ea:0e:0f:b6:1c:58:58:62:e1:84:
f6:04:0e:6e:bd:af:a2:b0:00:21:e6:d1:39:6d:fb:f5:73:44:
b0:e5:c0:d7:d2:a1:18:7e:3a:1f:40:c7:20:86:6c:06:6b:de:
23:fd:09:6c:5f:39:3f:03:78:59:28:4e:fa:b5:e8:54:ac:8c:
b4:22:4f:63:a2:52:b0:e3:13:29:df:8f:fe:3b:d3:76:04:e9:
13:10:fa:38:e2:a9:44:d0:c3:59:93:16:60:17:65:49:d6:f7:
92:cc:3e:1f:1f:81:39:2a:b6:c0:e3:3a:80:a4:ad:2d:9a:ca:
1e:2c:f4:9d:75:f9:37:76:b9:e3:45:47:e0:62:f3:f4:42:40:
36:aa:3b:fa:14:ba:10:e2:f9:bd:69:28:e1:59:94:d8:72:b8:
0d:ea:84:15:1e:1a:0f:6d:0f:85:cc:aa:21:1d:fb:02:c7:e9:
db:e3:33:f8:e4:90:42:a2:dd:ac:f1:23:2f:97:39:ea:25:dc:
ad:87:c0:2c:75:2c:89:41:ac:1b:4a:48:2c:c3:d5:ee:46:36:
e6:56:d9:6b:99:b3:01:ae:1e:53:70:fe:2e:5e:7d:78:56:74:
02:3b:6d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYqOLWTs8lh6vApeD5Vy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTJhMTIyZGNmZmMyMjJmYTk5ODRiZjE2YjZmOWYxM2Y3
OGE1YTUwHhcNMjUxMTA0MTUwMDU1WhcNMjUxMTA1MTUwMDU1WjAzMTEwLwYDVQQD
EygzMjM4OGVhYzM4OWNjN2I1NzczYjM3ZGM1ZDM0YmYyNDUxYmM4MWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujEHda6pdOkKzj2uZlWRgbXH63gO
EqYpa4ZpTeS8X5xQpLC42bf+4jqo/UWAF+p3WX6PqEOm3QQhv6r3lRiFtTqW/xdU
7gAD1bnLSpQiQ0omQvKHsBD02Yhx3t3zZw37KpkPRt6s5YZ02v3o/Cbqryul8ePd
LOn4hoNDWd+O1SGhyvLi2WaODiy8A6aXEp7j5zALcCnFQSxH4M13R+TjNB+4Mp3w
SKjHFe6HD/76L6k2mF+qA8ha95z/EthyU82MJ9pVcYgeZn4AzQRPQWrvYmCIPx+7
XCoESLmcrYHWJb6wn3LATqwu7zffl4Q3NZ1dsI2dFOMyaXxhhsBpED0i8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI4jqw4nMe1dzs33F00vyRRvIHSMB8GA1UdIwQY
MBaAFO3ioSLc/8Ii+pmEvxa2+fE/eKWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgt
MjM1OWNiNjBhNTc0LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgtMjM1OWNiNjBhNTc0
LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANF0zAQv
VfuFO33k0UK1fT8MS04XD3BgulTqDg+2HFhYYuGE9gQObr2vorAAIebROW379XNE
sOXA19KhGH46H0DHIIZsBmveI/0JbF85PwN4WShO+rXoVKyMtCJPY6JSsOMTKd+P
/jvTdgTpExD6OOKpRNDDWZMWYBdlSdb3ksw+Hx+BOSq2wOM6gKStLZrKHiz0nXX5
N3a540VH4GLz9EJANqo7+hS6EOL5vWko4VmU2HK4DeqEFR4aD20PhcyqIR37Asfp
2+Mz+OSQQqLdrPEjL5c56iXcrYfALHUsiUGsG0pILMPV7kY25lbZa5mzAa4eU3D+
Ll59eFZ0AjttUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:07 2025 by rpki-client