Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: lAteqkgse9fsVBxSArbv7b669mdG3XAWVfNiCXkMDRo=
Subject key identifier: BA:03:B4:2D:CC:02:38:67:99:25:30:D5:99:B4:90:BA:EE:C3:15:30
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 019A50AB91D4000D2E9D69987F24203C3EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 21:00:12 +0000
Manifest this update: Tue 04 Nov 2025 21:00:12 +0000
Manifest next update: Wed 05 Nov 2025 21:00:12 +0000
Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: YYi/8OpDWvCP6/WGHZfeiPuROkO6FmTtX7ZvEzJC+V8=)
2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:91:d4:00:0d:2e:9d:69:98:7f:24:20:3c:3e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Nov 4 21:00:12 2025 GMT
Not After : Nov 5 21:00:12 2025 GMT
Subject: CN=ba03b42dcc023867992530d599b490baeec31530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:ba:e3:f2:68:6a:79:ea:0c:b1:81:02:bc:
4e:07:90:09:8e:34:12:ea:15:04:67:b5:3d:a6:ce:
fd:60:2d:16:f1:88:e9:e9:5e:14:22:ca:c7:54:c3:
c5:0b:9b:6b:a7:1a:d7:45:00:c4:0c:b7:e7:f7:f3:
b1:37:40:4c:b8:a9:e1:de:73:fe:e9:28:8f:0d:17:
18:a6:cd:af:bc:f1:25:c9:53:0c:d2:87:9e:71:7e:
cd:72:66:76:d5:fe:0e:fb:41:ae:f7:c6:1f:43:e8:
03:74:78:dd:76:72:ab:60:64:c6:26:a7:7d:a7:f0:
c2:25:53:d7:10:6e:a2:f4:11:26:38:44:69:61:7a:
cd:00:80:ba:93:12:cd:14:c0:18:58:bb:90:53:51:
af:cf:8d:b8:07:14:80:96:15:19:a8:fd:72:f7:65:
59:2b:b0:67:f6:10:59:b8:a2:ad:07:c6:e0:6b:86:
62:88:59:05:d3:9d:90:14:76:23:ea:2d:c6:5d:64:
db:35:67:51:c9:c9:aa:98:78:ab:96:42:53:4d:05:
4d:89:23:7f:a8:c0:74:6d:78:3b:66:ef:c5:3a:aa:
a4:4a:ea:66:17:4c:e4:4e:03:cd:45:7a:cb:12:8c:
10:b2:26:ff:e6:6d:0a:4d:81:4e:d8:48:1a:40:81:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:03:B4:2D:CC:02:38:67:99:25:30:D5:99:B4:90:BA:EE:C3:15:30
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e3:4f:99:92:54:40:20:2c:15:b1:77:b5:d4:70:a7:e7:78:
26:f7:6a:74:05:44:f3:87:74:6d:c6:e5:4b:40:35:39:3d:76:
11:38:07:6c:7a:f8:0c:fb:75:6b:71:0c:65:3d:be:72:e9:a0:
c4:45:36:bd:53:b4:96:90:df:47:bb:b3:9b:b1:9e:d6:d7:a4:
92:97:c9:14:6a:ae:98:eb:0f:9c:93:ff:8a:fc:8b:b3:92:d2:
98:98:a2:e2:77:8d:0e:95:08:1e:6d:a9:d1:b3:ed:81:91:18:
cf:4a:c3:31:58:0f:c5:77:44:d6:f2:a8:23:60:da:7c:c6:73:
4d:b4:f1:9a:cb:97:da:7d:0b:7e:25:c3:44:de:10:25:67:24:
0e:a7:45:35:0f:04:d4:0a:46:ff:3a:40:70:5f:6b:f1:ba:6e:
a7:fa:7b:c7:94:92:ae:d0:f8:f5:54:f6:f9:7a:62:aa:0d:3d:
45:46:85:68:4e:50:cb:70:2f:a5:52:9d:1e:9b:6c:cd:e2:72:
1c:4f:73:0b:0c:39:e0:fe:ea:a9:33:76:37:b0:a6:40:25:e6:
57:bb:b9:b9:60:29:c3:df:89:8c:c0:9a:46:2f:fb:9a:6c:ed:
4d:96:a5:d8:75:7b:c0:c5:e9:cb:f1:d6:7b:ed:30:61:b6:72:
1b:a9:84:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQq5HUAA0unWmYfyQgPD7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5
YWFlNTEwHhcNMjUxMTA0MjEwMDEyWhcNMjUxMTA1MjEwMDEyWjAzMTEwLwYDVQQD
EyhiYTAzYjQyZGNjMDIzODY3OTkyNTMwZDU5OWI0OTBiYWVlYzMxNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUG64/JoannqDLGBArxOB5AJjjQS
6hUEZ7U9ps79YC0W8Yjp6V4UIsrHVMPFC5trpxrXRQDEDLfn9/OxN0BMuKnh3nP+
6SiPDRcYps2vvPElyVMM0oeecX7NcmZ21f4O+0Gu98YfQ+gDdHjddnKrYGTGJqd9
p/DCJVPXEG6i9BEmOERpYXrNAIC6kxLNFMAYWLuQU1Gvz424BxSAlhUZqP1y92VZ
K7Bn9hBZuKKtB8bga4ZiiFkF052QFHYj6i3GXWTbNWdRycmqmHirlkJTTQVNiSN/
qMB0bXg7Zu/FOqqkSupmF0zkTgPNRXrLEowQsib/5m0KTYFO2EgaQIFxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoDtC3MAjhnmSUw1Zm0kLruwxUwMB8GA1UdIwQY
MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt
ZTI0MzM2ZWM4YTA4LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4
LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeNPmZJU
QCAsFbF3tdRwp+d4JvdqdAVE84d0bcblS0A1OT12ETgHbHr4DPt1a3EMZT2+cumg
xEU2vVO0lpDfR7uzm7Ge1tekkpfJFGqumOsPnJP/ivyLs5LSmJii4neNDpUIHm2p
0bPtgZEYz0rDMVgPxXdE1vKoI2DafMZzTbTxmsuX2n0LfiXDRN4QJWckDqdFNQ8E
1ApG/zpAcF9r8bpup/p7x5SSrtD49VT2+Xpiqg09RUaFaE5Qy3AvpVKdHptszeJy
HE9zCww54P7qqTN2N7CmQCXmV7u5uWApw9+JjMCaRi/7mmztTZal2HV7wMXpy/HW
e+0wYbZyG6mE6w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:38:53 2025 by rpki-client