Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: 6/zAnBk0WcNMHiMO1DaPdZTTQzt6TSVJCbdcmFJCDOw=
Subject key identifier: 23:59:C0:62:A8:7D:B2:0B:FE:71:3E:A0:FD:A8:4C:D9:55:9A:28:B7
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 019A4EF440DC5E8F1770929EBCBFA817CACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: VoAKNGwixqTclxDTqAazMxFnHBxHE6rOLKDXSeLmL/A=)
2: GCDECUA53das4KdfVgJGCGchlPM.roa (hash: Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:40:dc:5e:8f:17:70:92:9e:bc:bf:a8:17:ca:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=2359c062a87db20bfe713ea0fda84cd9559a28b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:17:3b:8d:f8:0c:e2:78:af:bf:1a:8c:2c:
2e:d5:45:b0:a2:49:89:92:d7:14:33:22:46:de:2d:
a8:3a:ab:a0:81:c3:fa:94:54:19:77:3b:ad:e6:e3:
ec:8b:0a:25:13:a0:78:3c:8c:51:f7:96:5f:7a:04:
b8:b4:f3:97:83:c7:25:d6:65:48:e9:77:86:9b:ab:
55:30:6e:15:dc:f2:ae:e9:2f:e9:28:8f:f5:e8:8f:
90:7c:f5:3d:f3:1a:42:13:a2:be:f3:bb:5e:3b:f0:
92:24:28:6e:4a:42:83:a0:ca:b0:13:06:32:e7:98:
22:a2:fe:53:9e:cb:92:39:53:8a:5d:ed:dc:d6:24:
11:64:c9:6b:2a:40:e7:b5:34:f6:0f:05:c9:e0:f4:
de:7c:4d:ad:ab:36:ca:72:95:46:35:6d:f4:08:65:
fa:9f:40:70:81:25:da:7f:03:55:69:e0:41:a3:44:
ac:2b:15:ed:16:67:8e:0d:f4:8e:33:61:aa:d9:8b:
4b:ae:07:5c:e1:9d:51:6b:9f:d2:a9:b0:52:32:0c:
53:87:72:b7:3a:b6:b9:d4:50:20:4c:38:c5:0c:6a:
8a:2d:51:c2:08:9d:3a:d2:81:ef:b3:bc:7f:7d:ba:
ba:5b:e6:ac:5e:64:81:60:9a:1e:05:9d:b9:25:54:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:C0:62:A8:7D:B2:0B:FE:71:3E:A0:FD:A8:4C:D9:55:9A:28:B7
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:0c:d7:77:78:e8:54:d9:00:9d:a3:b4:b5:5a:e6:97:52:
c1:a9:34:22:78:0c:02:30:7e:c2:22:26:21:ac:c9:e0:6c:a4:
5d:fb:be:fa:b8:14:5b:c4:7d:d1:fc:34:d8:91:3a:ef:16:df:
1d:11:74:6a:b5:53:60:59:ed:84:42:bc:c0:7f:c7:e9:23:e2:
ab:59:0b:3d:50:b4:1a:1a:20:c3:0d:cc:c0:2c:f8:7b:fe:0b:
9e:d7:de:49:21:4b:57:cc:e7:a6:f9:d9:a5:5e:8f:f5:f1:9b:
b8:ba:d3:60:9c:47:7b:41:f9:d9:0b:cc:56:7b:86:36:bc:01:
c4:ab:4e:4c:bf:f8:cc:33:07:a8:bf:f9:8c:e0:b5:aa:e4:38:
4a:3a:83:25:f2:60:9b:0c:46:bb:71:ff:52:e6:34:88:df:ae:
c3:aa:4f:b6:93:37:d7:15:d0:31:5a:90:13:b6:51:9b:00:7d:
94:1e:e9:a4:03:8c:fd:2f:7a:a2:c7:0f:95:7f:87:f2:51:d2:
19:ec:71:31:3f:3b:0b:ed:77:c1:a7:56:c6:c3:c6:b1:f1:28:
a1:16:ab:35:39:07:47:f3:53:34:05:4b:59:2b:ec:3b:0e:7c:
a3:6d:35:05:3e:05:24:76:6c:e0:f5:14:30:e5:bd:e4:cc:44:
6b:b0:f1:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EDcXo8XcJKevL+oF8rOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMzFhMDU0ZmM5ZmI0YjE0N2U4YTk4YmRhN2U3MWM4MWFm
MGJjZmQwHhcNMjUxMTA0MTMwMDIxWhcNMjUxMTA1MTMwMDIxWjAzMTEwLwYDVQQD
EygyMzU5YzA2MmE4N2RiMjBiZmU3MTNlYTBmZGE4NGNkOTU1OWEyOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR0XO434DOJ4r78ajCwu1UWwokmJ
ktcUMyJG3i2oOquggcP6lFQZdzut5uPsiwolE6B4PIxR95ZfegS4tPOXg8cl1mVI
6XeGm6tVMG4V3PKu6S/pKI/16I+QfPU98xpCE6K+87teO/CSJChuSkKDoMqwEwYy
55giov5TnsuSOVOKXe3c1iQRZMlrKkDntTT2DwXJ4PTefE2tqzbKcpVGNW30CGX6
n0BwgSXafwNVaeBBo0SsKxXtFmeODfSOM2Gq2YtLrgdc4Z1Ra5/SqbBSMgxTh3K3
Ora51FAgTDjFDGqKLVHCCJ060oHvs7x/fbq6W+asXmSBYJoeBZ25JVTwywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNZwGKofbIL/nE+oP2oTNlVmii3MB8GA1UdIwQY
MBaAFO8xoFT8n7SxR+ipi9p+ccga8Lz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80YTkyMjQtMzdkNC00YjIzLWE0Mjct
MjcxMzYyZTNmMjVhLzEvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80YTkyMjQtMzdkNC00YjIzLWE0MjctMjcxMzYyZTNmMjVh
LzEvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPEM13d4
6FTZAJ2jtLVa5pdSwak0IngMAjB+wiImIazJ4GykXfu++rgUW8R90fw02JE67xbf
HRF0arVTYFnthEK8wH/H6SPiq1kLPVC0Ghogww3MwCz4e/4LntfeSSFLV8znpvnZ
pV6P9fGbuLrTYJxHe0H52QvMVnuGNrwBxKtOTL/4zDMHqL/5jOC1quQ4SjqDJfJg
mwxGu3H/UuY0iN+uw6pPtpM31xXQMVqQE7ZRmwB9lB7ppAOM/S96oscPlX+H8lHS
GexxMT87C+13wadWxsPGsfEooRarNTkHR/NTNAVLWSvsOw58o201BT4FJHZs4PUU
MOW95MxEa7DxrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:01 2025 by rpki-client