Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: +OrCuuXXlz/1oT3lxY1qhV6Je+YVK+Xzqz5ZzwsgJ/M=
Subject key identifier: B6:B1:9F:FA:C0:E9:12:19:50:80:2B:13:34:87:7B:6F:FD:9A:68:47
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 019A4E4F98E6EBB0218A61E63FCB56344078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 1077
Signing time: Tue 04 Nov 2025 10:00:30 +0000
Manifest this update: Tue 04 Nov 2025 10:00:30 +0000
Manifest next update: Wed 05 Nov 2025 10:00:30 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: zx7bj6jTl3ca2BblVZFw32Nad+qF8NOZV1lshmVE2jE=)
2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:98:e6:eb:b0:21:8a:61:e6:3f:cb:56:34:40:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Nov 4 10:00:30 2025 GMT
Not After : Nov 5 10:00:30 2025 GMT
Subject: CN=b6b19ffac0e9121950802b1334877b6ffd9a6847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:55:40:26:87:b4:c4:a2:c5:0a:94:7c:0e:
75:25:2d:0f:86:eb:70:5a:ad:0e:04:5a:ef:b8:e4:
d0:d4:0b:87:33:62:6b:62:af:9c:46:80:5b:7b:f7:
44:de:2b:d7:a9:c4:47:e4:d5:b3:09:f3:b1:4f:87:
80:9b:56:f5:98:f1:b9:8c:5b:ae:f9:a7:c9:d1:32:
71:4a:49:3e:39:97:4b:da:e0:15:5a:9a:74:51:51:
cb:d0:92:72:30:48:74:d7:6e:a1:47:6c:21:35:e7:
13:e6:6b:f2:85:a6:41:5d:80:f0:ae:e9:bd:1c:46:
e6:c2:f6:76:92:4b:83:10:f2:75:9b:c0:a5:77:85:
c9:d1:3d:00:c3:ae:03:f9:37:43:79:43:87:e6:2c:
37:d4:fc:3a:e8:76:c5:f9:c7:24:a8:e2:75:93:a3:
68:b8:81:9f:64:9f:b6:86:71:8b:da:7c:69:72:6f:
6f:2e:59:2f:db:6e:da:e5:50:bd:4e:67:ee:1d:71:
c6:f2:d4:aa:d2:a3:bf:bf:a6:b9:16:99:d0:56:7b:
de:5a:1d:40:a5:f3:30:76:da:95:94:49:ab:22:5e:
dd:9d:15:14:ac:f3:a2:87:ff:18:3b:50:c1:58:c7:
9f:a2:e4:af:a3:cd:c5:aa:96:93:f6:c7:02:2c:0f:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:9F:FA:C0:E9:12:19:50:80:2B:13:34:87:7B:6F:FD:9A:68:47
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:f4:a9:c2:1e:bd:37:65:c3:51:4e:68:b9:56:1f:2f:b4:
27:37:de:eb:76:17:ab:3c:06:eb:a8:19:ac:31:5c:9a:d9:7c:
4c:a8:7d:81:b7:2b:e7:0c:ab:0c:8d:3e:38:34:14:c3:3e:3e:
7d:0c:26:e7:df:f2:c9:97:2d:20:5e:b4:bf:ed:ef:82:c3:90:
47:53:f9:0f:88:cf:fb:83:70:da:0a:75:16:54:5a:fd:70:95:
0f:a9:71:e5:f8:fa:a4:37:35:4d:1d:9c:aa:d9:b9:80:ba:f7:
c5:0b:d2:ed:d3:3c:1b:05:a9:be:92:25:6c:2e:08:dc:bb:6d:
90:01:23:e6:5b:35:c8:9e:e2:2d:94:a5:75:77:ca:89:e2:72:
c6:c9:81:2a:b8:e2:48:ff:b2:ac:e4:39:06:e6:dc:ad:f0:7f:
71:01:fa:27:02:95:44:33:1a:68:08:2b:38:a1:c1:c5:82:a3:
bc:d4:e2:9a:47:e3:ca:da:7c:4f:59:a5:2d:ed:a9:39:90:e4:
a2:7f:54:9f:f0:78:0e:61:0b:1f:09:9b:5a:15:01:93:80:3e:
82:ca:60:12:46:05:04:2c:26:e1:af:76:16:c2:1f:a5:3e:b9:
8f:1f:41:ea:fb:99:bc:33:49:f0:c1:74:10:d2:2c:c1:85:b4:
eb:d9:ef:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT5jm67AhimHmP8tWNEB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2
ODI0ZjEwHhcNMjUxMTA0MTAwMDMwWhcNMjUxMTA1MTAwMDMwWjAzMTEwLwYDVQQD
EyhiNmIxOWZmYWMwZTkxMjE5NTA4MDJiMTMzNDg3N2I2ZmZkOWE2ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZVQCaHtMSixQqUfA51JS0Phutw
Wq0OBFrvuOTQ1AuHM2JrYq+cRoBbe/dE3ivXqcRH5NWzCfOxT4eAm1b1mPG5jFuu
+afJ0TJxSkk+OZdL2uAVWpp0UVHL0JJyMEh0126hR2whNecT5mvyhaZBXYDwrum9
HEbmwvZ2kkuDEPJ1m8Cld4XJ0T0Aw64D+TdDeUOH5iw31Pw66HbF+cckqOJ1k6No
uIGfZJ+2hnGL2nxpcm9vLlkv227a5VC9TmfuHXHG8tSq0qO/v6a5FpnQVnveWh1A
pfMwdtqVlEmrIl7dnRUUrPOih/8YO1DBWMefouSvo83FqpaT9scCLA+VowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaxn/rA6RIZUIArEzSHe2/9mmhHMB8GA1UdIwQY
MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt
MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh
LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOv0qcIe
vTdlw1FOaLlWHy+0Jzfe63YXqzwG66gZrDFcmtl8TKh9gbcr5wyrDI0+ODQUwz4+
fQwm59/yyZctIF60v+3vgsOQR1P5D4jP+4Nw2gp1FlRa/XCVD6lx5fj6pDc1TR2c
qtm5gLr3xQvS7dM8GwWpvpIlbC4I3LttkAEj5ls1yJ7iLZSldXfKieJyxsmBKrji
SP+yrOQ5BubcrfB/cQH6JwKVRDMaaAgrOKHBxYKjvNTimkfjytp8T1mlLe2pOZDk
on9Un/B4DmELHwmbWhUBk4A+gspgEkYFBCwm4a92FsIfpT65jx9B6vuZvDNJ8MF0
ENIswYW069nvDw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:18 2025 by rpki-client