Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: jGC9yK5q6m6Q1Dzm8ZvEKUH3jL9mnKi/5dc5dtO8/Iw=
Subject key identifier: B9:EE:28:96:90:B7:50:7B:CB:2D:D1:C8:9B:7C:8D:E3:17:51:1B:CF
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 019A503DC0317EA1D9B3D38A3E2DB3D1BF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 19:00:15 +0000
Manifest this update: Tue 04 Nov 2025 19:00:15 +0000
Manifest next update: Wed 05 Nov 2025 19:00:15 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: yhGyiatochVkDaTSbd6Zw8aqW/hAMdJgDuM/3gcmzNQ=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c0:31:7e:a1:d9:b3:d3:8a:3e:2d:b3:d1:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Nov 4 19:00:15 2025 GMT
Not After : Nov 5 19:00:15 2025 GMT
Subject: CN=b9ee289690b7507bcb2dd1c89b7c8de317511bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:44:5f:29:73:4e:95:64:90:7b:c3:75:d9:
f1:7a:ee:7f:3d:d1:de:6a:f8:1c:0a:09:14:a0:be:
1a:04:cc:c1:0d:ce:b9:52:d6:50:90:58:7a:88:c0:
46:4c:34:91:8c:00:27:ac:29:6b:71:b0:fd:8e:0e:
c1:f4:11:2f:85:0f:ea:25:53:1a:f9:f5:79:24:ce:
84:d4:cd:bf:5d:ce:98:e7:39:b9:ac:8c:69:f2:38:
56:0e:c9:bd:ff:74:dd:e8:5e:aa:1c:8e:5c:72:e5:
c9:9e:82:ea:92:ce:7b:9f:b7:70:c6:ca:da:56:cf:
bb:a5:6f:42:5a:37:84:6d:71:2d:63:5b:2f:fb:1d:
b6:7d:a4:08:0b:e5:42:7c:8d:be:2c:17:37:8d:4f:
a4:50:80:fc:2d:f6:39:f0:2e:3c:f5:ce:b1:18:31:
0d:24:36:32:e2:5e:ac:e4:a6:cf:65:2b:8e:b2:cd:
c8:03:5c:0a:63:d4:56:8d:f0:60:53:bf:b0:d7:60:
b1:fd:56:9d:a5:34:8f:5a:ae:e0:0a:15:9b:fa:be:
17:78:61:8a:56:27:73:27:a5:55:7c:1c:36:c1:75:
69:e6:4f:a6:4e:94:75:06:aa:ce:67:16:db:51:c2:
15:61:21:36:c5:4d:f6:79:c4:18:75:ce:43:53:fd:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:28:96:90:B7:50:7B:CB:2D:D1:C8:9B:7C:8D:E3:17:51:1B:CF
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cd:d8:08:bc:39:ef:7f:bf:b7:fe:58:06:fb:6b:f1:b4:0f:
08:ca:45:5a:01:ac:74:27:99:7b:dc:4d:dc:a1:88:c2:15:c0:
60:f6:ee:2a:1c:8b:3b:de:80:08:5a:1e:89:88:2f:52:e5:be:
2b:98:38:f7:f6:e2:e5:49:f9:f6:5a:94:0d:01:ca:92:ec:40:
c4:46:da:44:10:e0:30:fa:96:42:df:9b:ff:22:85:fa:8f:92:
25:9b:2d:d9:89:b4:b4:2e:0b:f1:0e:1b:51:ae:c2:b7:04:9b:
54:80:e6:5d:65:7b:4a:1c:f0:24:6b:fa:78:f0:e4:54:2d:62:
e6:bb:c2:48:cf:21:d4:39:a0:0a:07:8f:c7:e2:db:20:e8:b3:
99:82:6c:c4:15:ca:84:b5:ec:83:ce:52:47:00:42:2f:8e:6c:
ae:a4:3e:ea:df:01:63:d1:52:f1:5a:1e:03:66:60:92:bd:13:
f4:32:13:ee:f4:0c:ab:6f:5e:cc:8f:02:6c:08:dd:a8:11:1e:
a7:f5:b7:c9:72:a6:8f:34:e6:74:34:e7:56:d0:00:ef:56:ff:
78:43:31:e8:24:f8:e3:4a:7c:62:46:0c:c2:42:51:62:7f:65:
70:12:69:20:ab:56:c6:b4:8b:4f:8e:00:b9:4a:17:fe:d3:66:
0f:8f:73:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPcAxfqHZs9OKPi2z0b9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3
MjEwZTUwHhcNMjUxMTA0MTkwMDE1WhcNMjUxMTA1MTkwMDE1WjAzMTEwLwYDVQQD
EyhiOWVlMjg5NjkwYjc1MDdiY2IyZGQxYzg5YjdjOGRlMzE3NTExYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrxEXylzTpVkkHvDddnxeu5/PdHe
avgcCgkUoL4aBMzBDc65UtZQkFh6iMBGTDSRjAAnrClrcbD9jg7B9BEvhQ/qJVMa
+fV5JM6E1M2/Xc6Y5zm5rIxp8jhWDsm9/3Td6F6qHI5ccuXJnoLqks57n7dwxsra
Vs+7pW9CWjeEbXEtY1sv+x22faQIC+VCfI2+LBc3jU+kUID8LfY58C489c6xGDEN
JDYy4l6s5KbPZSuOss3IA1wKY9RWjfBgU7+w12Cx/VadpTSPWq7gChWb+r4XeGGK
VidzJ6VVfBw2wXVp5k+mTpR1BqrOZxbbUcIVYSE2xU32ecQYdc5DU/2ZXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnuKJaQt1B7yy3RyJt8jeMXURvPMB8GA1UdIwQY
MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt
YWIyY2U5NGMxNDIzLzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz
LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEs3YCLw5
73+/t/5YBvtr8bQPCMpFWgGsdCeZe9xN3KGIwhXAYPbuKhyLO96ACFoeiYgvUuW+
K5g49/bi5Un59lqUDQHKkuxAxEbaRBDgMPqWQt+b/yKF+o+SJZst2Ym0tC4L8Q4b
Ua7CtwSbVIDmXWV7ShzwJGv6ePDkVC1i5rvCSM8h1DmgCgePx+LbIOizmYJsxBXK
hLXsg85SRwBCL45srqQ+6t8BY9FS8VoeA2Zgkr0T9DIT7vQMq29ezI8CbAjdqBEe
p/W3yXKmjzTmdDTnVtAA71b/eEMx6CT440p8YkYMwkJRYn9lcBJpIKtWxrSLT44A
uUoX/tNmD49z0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:16 2025 by rpki-client