Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier: 8d2f67OcLWagOGJ5sC0fyPyNvSc2R4LKzRmL9WnGbfI=
Subject key identifier: 7C:14:D2:1F:1F:A9:36:FB:6D:3D:EA:4D:3D:01:AA:5B:88:0D:DB:FD
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial: 019A4E4FBCA47471CB6F616E6D9BD3C5F057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: KFCe59IF9/UP06UDVe5OzVt6sVa5+FLGcKR5nSHwJsc=)
2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bc:a4:74:71:cb:6f:61:6e:6d:9b:d3:c5:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=7c14d21f1fa936fb6d3dea4d3d01aa5b880ddbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:2a:8c:ce:fc:61:62:90:72:61:26:78:a9:
dc:b5:6f:09:97:eb:b0:63:79:a9:1c:7a:4d:d9:ea:
d2:b2:c9:96:85:0c:0f:b4:bc:7c:aa:60:e4:ed:2a:
a4:fa:b4:a3:62:77:39:aa:3f:ee:c1:fc:63:24:4a:
13:d0:96:f3:e9:6c:2c:fa:42:02:2e:5d:2e:ae:3e:
01:ea:63:5d:32:01:b9:2c:b5:5d:ed:ec:20:ac:ae:
a3:18:82:8d:20:73:11:1d:54:ea:ce:1c:35:28:92:
a7:82:01:8a:66:24:ff:b0:4e:dd:11:bc:d3:c3:c3:
37:e9:be:70:fb:2c:e2:0b:79:89:7c:cb:3c:9f:9c:
81:08:6b:2c:69:38:b5:fc:2b:02:94:32:75:75:58:
ac:54:d6:81:4b:7f:f6:bc:64:fd:3d:03:2a:b4:d3:
2e:1d:11:b7:9f:b1:d3:60:5f:bf:33:0d:eb:36:87:
5d:84:c9:74:ba:03:58:65:81:cf:8d:ca:10:42:38:
40:53:0a:2d:21:a1:8d:9a:e6:d1:e4:35:50:50:e3:
d7:d6:1c:1d:05:a8:43:82:47:d0:29:da:40:f1:33:
e4:fe:3b:f4:b5:0e:e2:f3:e4:26:ab:87:2d:66:ac:
40:03:3d:65:ba:c2:ca:dd:87:bd:4e:4e:ea:4c:fd:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:D2:1F:1F:A9:36:FB:6D:3D:EA:4D:3D:01:AA:5B:88:0D:DB:FD
X509v3 Authority Key Identifier:
keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:69:70:b6:d4:eb:9c:26:57:b2:75:d7:69:c5:4f:d3:0c:a9:
c7:9d:48:ae:2c:a4:25:02:68:c4:75:32:69:a5:82:d5:51:b0:
04:e4:8d:85:93:4d:3b:76:69:6b:e5:c8:0b:5c:eb:7b:8e:e9:
a9:67:e4:ab:3d:5e:d8:d2:89:20:7d:81:ff:0c:33:ea:33:30:
cb:88:7a:3d:2b:8d:fb:90:f2:75:1f:ee:27:cd:1f:b1:37:d2:
13:1a:71:a5:63:09:36:35:9e:50:1d:a1:6a:88:99:a4:ac:da:
23:42:e2:89:34:74:6c:b3:70:2b:62:67:ef:58:7c:a1:01:1a:
f3:c9:86:f7:b6:a7:88:8e:7a:f0:ed:38:31:b3:da:f6:c2:9c:
be:56:23:a4:d5:e1:99:a3:00:f5:aa:bf:75:24:18:a0:a7:50:
8b:6e:af:3e:7c:ae:56:93:40:c8:63:ce:54:9f:04:81:91:cd:
73:39:56:ed:8c:1f:5b:70:7e:39:26:31:09:d8:78:e6:7f:15:
ef:99:10:16:2b:03:aa:0b:2d:87:a8:a2:28:c5:23:c9:d1:fe:
92:1d:8b:29:40:de:f1:db:6a:62:75:e8:3e:e4:52:75:df:4f:
55:7f:11:b3:f1:6f:39:5b:8a:c1:7f:da:7a:53:4b:47:52:70:
a7:3d:2d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT7ykdHHLb2FubZvTxfBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlN2EyNjRkYmNjZDc1YWE4NmNkMzYxYzZkMzY2YmQ4OGM5
MGRhMjMwHhcNMjUxMTA0MTAwMDM5WhcNMjUxMTA1MTAwMDM5WjAzMTEwLwYDVQQD
Eyg3YzE0ZDIxZjFmYTkzNmZiNmQzZGVhNGQzZDAxYWE1Yjg4MGRkYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0UqjM78YWKQcmEmeKnctW8Jl+uw
Y3mpHHpN2erSssmWhQwPtLx8qmDk7Sqk+rSjYnc5qj/uwfxjJEoT0Jbz6Wws+kIC
Ll0urj4B6mNdMgG5LLVd7ewgrK6jGIKNIHMRHVTqzhw1KJKnggGKZiT/sE7dEbzT
w8M36b5w+yziC3mJfMs8n5yBCGssaTi1/CsClDJ1dVisVNaBS3/2vGT9PQMqtNMu
HRG3n7HTYF+/Mw3rNoddhMl0ugNYZYHPjcoQQjhAUwotIaGNmubR5DVQUOPX1hwd
BahDgkfQKdpA8TPk/jv0tQ7i8+Qmq4ctZqxAAz1lusLK3Ye9Tk7qTP0powIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwU0h8fqTb7bT3qTT0BqluIDdv9MB8GA1UdIwQY
MBaAFO56Jk28zXWqhs02HG02a9iMkNojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMt
MzE3ZTgyMGRmY2RiLzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMtMzE3ZTgyMGRmY2Ri
LzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWlwttTr
nCZXsnXXacVP0wypx51IriykJQJoxHUyaaWC1VGwBOSNhZNNO3Zpa+XIC1zre47p
qWfkqz1e2NKJIH2B/wwz6jMwy4h6PSuN+5DydR/uJ80fsTfSExpxpWMJNjWeUB2h
aoiZpKzaI0LiiTR0bLNwK2Jn71h8oQEa88mG97aniI568O04MbPa9sKcvlYjpNXh
maMA9aq/dSQYoKdQi26vPnyuVpNAyGPOVJ8EgZHNczlW7YwfW3B+OSYxCdh45n8V
75kQFisDqgsth6iiKMUjydH+kh2LKUDe8dtqYnXoPuRSdd9PVX8Rs/FvOVuKwX/a
elNLR1Jwpz0tFA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:55 2025 by rpki-client