Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: d8/st4oGaYQAP0MyPx6oaMoXF4jYdQXlW2/QnuUBSHk=
Subject key identifier: 8A:16:F3:B1:93:05:28:B2:4E:5F:38:DD:51:94:5E:47:02:13:EC:87
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 019A5074ACDD272F4084C7DCAA8C64A53C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 20:00:14 +0000
Manifest this update: Tue 04 Nov 2025 20:00:14 +0000
Manifest next update: Wed 05 Nov 2025 20:00:14 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: ZYNMLeZV6uMjKO03-jW6YTqiSW4.roa (hash: krbVJoOGLyeDpoeNky9ZOE+tnfOGV0J+XN0ZCMIwYdg=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: GHmvvXSoGwbasbCx2WTyGyLNeE4rUV2ol9oVACJyE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:ac:dd:27:2f:40:84:c7:dc:aa:8c:64:a5:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Nov 4 20:00:14 2025 GMT
Not After : Nov 5 20:00:14 2025 GMT
Subject: CN=8a16f3b1930528b24e5f38dd51945e470213ec87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:2d:33:4b:bd:b8:d6:8a:39:1a:89:a3:d5:
79:9b:aa:c0:bc:be:f9:38:51:a0:88:d8:19:0f:b4:
cb:1a:ce:0d:3b:75:b4:7d:a1:46:c8:f1:f6:21:2b:
b9:ef:90:b7:af:5f:44:e8:94:ee:d5:bf:50:b4:cd:
3d:86:9b:ae:0c:c7:d8:b6:f6:a4:18:0a:87:1f:12:
20:62:b7:07:87:9e:54:c7:db:ee:12:e5:5e:c5:9c:
1c:3f:90:51:53:22:20:8a:aa:02:2a:14:16:a5:76:
1b:46:3a:e2:dd:d4:66:a2:98:da:a5:c9:d2:a7:0f:
9e:ae:61:0f:1a:8b:97:dd:bc:61:19:f6:5f:e5:6d:
ab:b8:c7:cc:f0:6d:f7:9f:79:ba:c4:93:3c:45:a0:
ca:69:19:0a:57:c2:d1:8d:06:1f:8f:0e:84:b7:70:
b4:99:cf:fd:58:39:41:42:98:ce:4e:09:98:52:88:
aa:1d:c6:c9:d3:49:b3:46:41:eb:59:78:97:5c:8f:
ae:dc:2b:28:05:40:ba:0e:43:77:50:a2:e9:c3:60:
8a:cc:82:11:f3:c3:1f:64:4d:78:0d:db:56:75:26:
d7:86:d6:83:4f:c3:1b:9c:8b:17:d6:3a:e6:7a:dd:
e8:9e:54:72:0f:f4:49:f4:7e:ad:2a:50:6a:70:f0:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:F3:B1:93:05:28:B2:4E:5F:38:DD:51:94:5E:47:02:13:EC:87
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:76:33:50:0e:a4:92:36:98:2d:67:cd:ce:41:63:1c:5e:7f:
30:c3:da:26:f1:44:5a:ce:e7:f0:91:89:a1:3d:e3:e5:26:a5:
71:f9:f6:33:0c:3e:6c:0d:91:7b:6a:3f:b6:06:78:58:d7:1a:
3e:74:d9:52:31:57:2a:2e:c2:66:c3:54:c6:13:64:68:11:ab:
ef:8b:22:2b:bf:98:d7:34:6c:1e:69:00:5d:83:24:21:a4:09:
c2:44:c2:08:38:4a:91:8a:43:cd:13:62:df:5b:18:42:1f:bc:
c8:13:19:d4:c2:6b:36:12:98:b0:68:c0:67:e4:56:66:58:1f:
c8:b4:15:82:93:73:4d:8d:18:a9:98:0a:f7:fb:d0:85:91:b9:
fd:c5:f3:82:2d:27:70:ee:8c:cd:d8:65:c0:cb:42:50:26:6e:
1f:56:d0:4a:9a:65:e5:30:82:97:bc:25:e5:cd:8b:f8:7f:5d:
9b:3c:b7:7d:fe:ab:a5:00:ee:c5:6a:a9:b2:ad:3e:3d:a0:8e:
81:50:73:7a:59:64:ee:02:26:5d:67:81:85:7e:98:57:5c:07:
59:e9:ea:2a:5d:75:6f:ee:79:42:b2:97:63:29:19:75:f4:f5:
aa:a6:3e:73:4f:cf:1d:3c:e9:36:58:cc:10:df:fa:75:1f:bb:
99:3c:67:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdKzdJy9AhMfcqoxkpTw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjEzMDhjNmE5NzdkNWNiOTAzYmYyNWE5NjMwOGIwZThj
ZTNiNDYwHhcNMjUxMTA0MjAwMDE0WhcNMjUxMTA1MjAwMDE0WjAzMTEwLwYDVQQD
Eyg4YTE2ZjNiMTkzMDUyOGIyNGU1ZjM4ZGQ1MTk0NWU0NzAyMTNlYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfAtM0u9uNaKORqJo9V5m6rAvL75
OFGgiNgZD7TLGs4NO3W0faFGyPH2ISu575C3r19E6JTu1b9QtM09hpuuDMfYtvak
GAqHHxIgYrcHh55Ux9vuEuVexZwcP5BRUyIgiqoCKhQWpXYbRjri3dRmopjapcnS
pw+ermEPGouX3bxhGfZf5W2ruMfM8G33n3m6xJM8RaDKaRkKV8LRjQYfjw6Et3C0
mc/9WDlBQpjOTgmYUoiqHcbJ00mzRkHrWXiXXI+u3CsoBUC6DkN3UKLpw2CKzIIR
88MfZE14DdtWdSbXhtaDT8MbnIsX1jrmet3onlRyD/RJ9H6tKlBqcPAcrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoW87GTBSiyTl843VGUXkcCE+yHMB8GA1UdIwQY
MBaAFIuxMIxql31cuQO/JaljCLDozjtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMt
MTAxYWJkNzM5MWE2LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMtMTAxYWJkNzM5MWE2
LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3YzUA6k
kjaYLWfNzkFjHF5/MMPaJvFEWs7n8JGJoT3j5Salcfn2Mww+bA2Re2o/tgZ4WNca
PnTZUjFXKi7CZsNUxhNkaBGr74siK7+Y1zRsHmkAXYMkIaQJwkTCCDhKkYpDzRNi
31sYQh+8yBMZ1MJrNhKYsGjAZ+RWZlgfyLQVgpNzTY0YqZgK9/vQhZG5/cXzgi0n
cO6MzdhlwMtCUCZuH1bQSppl5TCCl7wl5c2L+H9dmzy3ff6rpQDuxWqpsq0+PaCO
gVBzellk7gImXWeBhX6YV1wHWenqKl11b+55QrKXYykZdfT1qqY+c0/PHTzpNljM
EN/6dR+7mTxnoA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:57:01 2025 by rpki-client