Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: YHOFXBj+gjjRYFlqn0BDpvvz9yajpvKuX9JGvNDGR2k=
Subject key identifier: EE:4D:6A:62:93:05:72:49:1A:7E:BB:B0:22:2D:04:74:8C:72:F5:E9
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019A50E37F0EF342D295E9DB70EE73C0E20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0981
Signing time: Tue 04 Nov 2025 22:01:17 +0000
Manifest this update: Tue 04 Nov 2025 22:01:17 +0000
Manifest next update: Wed 05 Nov 2025 22:01:17 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: WdqZVxWt/EUve65vKDChN6yl68I7waXYKasGqcC4Guw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:7f:0e:f3:42:d2:95:e9:db:70:ee:73:c0:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Nov 4 22:01:17 2025 GMT
Not After : Nov 5 22:01:17 2025 GMT
Subject: CN=ee4d6a62930572491a7ebbb0222d04748c72f5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:d1:d9:53:c8:ad:d8:6d:c9:ed:d5:3c:7a:
bb:bf:2c:38:1d:22:a9:71:e3:39:12:0f:3f:6f:3c:
0a:af:19:d6:ec:c8:d4:b0:7b:f8:28:9c:4b:2d:d2:
70:e1:2f:08:aa:96:c2:16:c8:d0:d1:5c:ac:af:d7:
7a:a3:7d:65:b3:d9:cb:48:7d:eb:65:11:be:50:78:
94:27:88:12:15:35:b6:07:56:dc:08:aa:18:7e:86:
db:05:bd:50:64:d7:c7:78:a9:71:3d:73:e5:54:f7:
cf:9d:7d:19:7f:a0:da:55:62:42:f4:b6:c0:2d:9f:
ee:07:85:c5:4e:8e:3f:9e:04:42:7e:3b:95:b6:a7:
79:05:75:26:cd:2c:ff:53:ab:25:0b:ae:8b:b9:a8:
d7:cf:48:20:d8:ae:54:c8:ef:e8:ba:10:4e:72:c9:
69:03:1b:45:13:8f:fe:16:2d:75:98:ec:9f:1f:44:
b9:c6:5c:de:ff:19:07:ef:c5:8c:63:1c:8b:6d:33:
84:5d:9e:32:73:b7:da:3c:60:50:82:01:2b:e4:81:
7e:39:08:2b:30:6a:17:76:7b:29:12:46:ed:a5:4e:
f9:8e:99:db:56:ad:3b:af:3e:85:b6:f5:cf:83:b9:
b6:d6:ee:19:4e:89:56:c1:26:93:4d:79:63:9a:1e:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4D:6A:62:93:05:72:49:1A:7E:BB:B0:22:2D:04:74:8C:72:F5:E9
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:74:88:be:75:93:80:01:b8:94:29:93:89:84:a7:a7:12:
4d:51:1c:51:7e:bd:3a:39:35:aa:ae:71:dc:d6:49:c8:f8:cf:
4b:49:29:9a:3f:25:41:fd:50:c1:94:9b:e1:0b:6d:31:bc:38:
32:2d:75:66:f1:85:01:52:cd:65:8f:06:11:85:38:f5:88:4f:
de:ae:c8:96:d1:00:8d:c6:26:ad:da:58:56:31:c5:1b:9f:f0:
b9:a6:68:62:b5:e8:4f:0c:b1:75:74:31:a1:55:87:22:bf:ae:
45:89:5d:82:32:88:4e:8c:16:71:f3:da:c9:15:4d:1b:66:d2:
f3:17:65:de:db:be:e2:fd:78:39:3f:8a:49:62:cb:d2:28:0c:
ba:43:3b:2a:4f:2a:5a:67:c9:fd:29:ee:60:76:5a:38:5b:23:
15:5f:e5:7c:a2:bb:91:9a:20:97:fa:a7:6f:df:10:a5:f9:1f:
5c:dd:09:88:01:de:f7:2a:76:69:87:d7:0d:76:55:1e:b3:bc:
f7:74:74:32:15:86:93:96:42:4a:33:34:24:13:61:d9:51:ae:
21:5d:09:98:ab:c6:d8:37:76:50:70:86:db:d4:c1:79:cc:cf:
33:1d:6d:03:1f:8f:42:02:c5:db:e9:e7:31:0f:90:34:cf:48:
8e:95:16:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ438O80LSlenbcO5zwOIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjUxMTA0MjIwMTE3WhcNMjUxMTA1MjIwMTE3WjAzMTEwLwYDVQQD
EyhlZTRkNmE2MjkzMDU3MjQ5MWE3ZWJiYjAyMjJkMDQ3NDhjNzJmNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznfR2VPIrdhtye3VPHq7vyw4HSKp
ceM5Eg8/bzwKrxnW7MjUsHv4KJxLLdJw4S8IqpbCFsjQ0Vysr9d6o31ls9nLSH3r
ZRG+UHiUJ4gSFTW2B1bcCKoYfobbBb1QZNfHeKlxPXPlVPfPnX0Zf6DaVWJC9LbA
LZ/uB4XFTo4/ngRCfjuVtqd5BXUmzSz/U6slC66LuajXz0gg2K5UyO/ouhBOcslp
AxtFE4/+Fi11mOyfH0S5xlze/xkH78WMYxyLbTOEXZ4yc7faPGBQggEr5IF+OQgr
MGoXdnspEkbtpU75jpnbVq07rz6FtvXPg7m21u4ZTolWwSaTTXljmh6QwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5NamKTBXJJGn67sCItBHSMcvXpMB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7p0iL51
k4ABuJQpk4mEp6cSTVEcUX69Ojk1qq5x3NZJyPjPS0kpmj8lQf1QwZSb4QttMbw4
Mi11ZvGFAVLNZY8GEYU49YhP3q7IltEAjcYmrdpYVjHFG5/wuaZoYrXoTwyxdXQx
oVWHIr+uRYldgjKITowWcfPayRVNG2bS8xdl3tu+4v14OT+KSWLL0igMukM7Kk8q
WmfJ/SnuYHZaOFsjFV/lfKK7kZogl/qnb98QpfkfXN0JiAHe9yp2aYfXDXZVHrO8
93R0MhWGk5ZCSjM0JBNh2VGuIV0JmKvG2Dd2UHCG29TBeczPMx1tAx+PQgLF2+nn
MQ+QNM9IjpUWXQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:52 2025 by rpki-client