Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: QHNJQ2qbS21enLNIwKM5VBsqzk61oRJ6VIT4bfERkb4=
Subject key identifier: 49:2A:2B:89:30:EC:6A:61:62:23:50:A1:A6:AF:8B:D4:E7:1B:30:60
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 019A503DA1D42F9DB68875FA4D2D05F047E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 13B5
Signing time: Tue 04 Nov 2025 19:00:07 +0000
Manifest this update: Tue 04 Nov 2025 19:00:07 +0000
Manifest next update: Wed 05 Nov 2025 19:00:07 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: V08oxmHZ+PhyHb3uu1qHnZvvNySBaVpP2+TRlsMD3bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a1:d4:2f:9d:b6:88:75:fa:4d:2d:05:f0:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Nov 4 19:00:07 2025 GMT
Not After : Nov 5 19:00:07 2025 GMT
Subject: CN=492a2b8930ec6a61622350a1a6af8bd4e71b3060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:f9:1d:ff:cc:44:ce:ba:c7:0d:bd:bc:92:
7e:34:7b:c1:5e:76:ed:ff:4d:b1:a9:61:cc:e4:ac:
dd:15:14:2d:94:ed:22:b9:dd:b3:96:bc:ff:92:c4:
0b:f9:bf:ab:e7:0a:c4:97:c8:93:d6:bc:c5:7a:f2:
43:1f:65:5f:50:84:ab:7c:c4:60:38:03:be:91:11:
10:7b:1e:28:c7:87:31:06:82:5e:1c:02:70:1a:b7:
b1:91:26:1e:b1:b2:5b:85:76:43:b8:7e:b5:2d:91:
5d:51:2c:30:1b:f7:ea:5b:50:b7:fb:df:fb:9a:75:
94:85:f6:5b:d5:10:56:1b:39:c4:3c:bd:4a:63:2d:
15:0b:0f:cf:21:67:ba:0a:45:c1:41:c5:50:f5:f0:
01:ab:1c:a9:2e:cc:db:ed:9a:35:ca:06:70:08:22:
a5:4a:90:7d:53:e7:93:02:07:05:d9:76:0b:b9:c0:
34:40:a5:77:2c:05:b6:bd:4c:1d:c0:05:fa:da:01:
fb:a0:2f:11:04:b9:5f:3f:87:53:e0:09:89:39:60:
0e:a2:9a:9a:45:eb:ea:64:4b:0d:a2:44:fc:6d:de:
4c:8b:5a:cd:8f:7b:00:c4:c9:a6:c5:6d:6c:30:dd:
a0:95:31:00:4b:a8:73:85:dc:19:d9:c0:72:0a:00:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2A:2B:89:30:EC:6A:61:62:23:50:A1:A6:AF:8B:D4:E7:1B:30:60
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:46:f4:11:b8:66:9e:50:cc:1e:c5:68:dd:ee:cc:a5:a2:a2:
1d:29:61:ae:94:a7:5a:40:4a:aa:cc:4b:7d:42:90:e8:98:57:
c7:4f:5d:d0:30:7b:24:9d:a9:24:e5:1a:9e:e9:2c:aa:b2:bc:
79:a7:6a:d9:21:3d:59:20:8d:0d:da:f3:47:a5:11:e2:20:d0:
63:d3:f3:28:e7:a9:b1:23:4d:f7:fc:4b:63:f6:53:da:ac:ae:
26:cb:2b:a4:13:39:23:73:b1:8c:ae:ac:17:c3:46:b6:ef:7d:
92:10:c2:45:5d:06:e8:2f:e1:b4:24:b5:6c:2d:15:a9:43:bf:
67:d7:94:58:d0:52:9a:bc:62:5a:fa:57:3c:7d:e0:de:9b:54:
7f:6a:01:7f:74:70:a2:b2:bc:dd:22:47:6c:b9:ff:49:a4:f5:
70:47:ba:92:8b:f0:b9:7c:b2:b5:86:9c:f8:4d:13:06:6f:84:
35:15:03:84:6c:c4:e8:5b:71:3d:49:69:1b:ab:18:63:cb:96:
cb:12:a1:30:47:58:2a:56:39:4e:7c:e3:2b:d9:c1:99:51:bf:
28:5b:6a:5b:7f:e7:96:55:7a:65:24:bd:b4:36:a2:2f:b6:25:
ee:24:cf:11:8b:b7:cc:9f:c5:4d:5e:f3:08:9e:bf:67:41:1e:
15:f6:2e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPaHUL522iHX6TS0F8EflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDBiYTUxZDYzYjE3NzU4MzdlODcyZmJkZTg0ZTJkZDA4
NzRmNjMwHhcNMjUxMTA0MTkwMDA3WhcNMjUxMTA1MTkwMDA3WjAzMTEwLwYDVQQD
Eyg0OTJhMmI4OTMwZWM2YTYxNjIyMzUwYTFhNmFmOGJkNGU3MWIzMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3z5Hf/MRM66xw29vJJ+NHvBXnbt
/02xqWHM5KzdFRQtlO0iud2zlrz/ksQL+b+r5wrEl8iT1rzFevJDH2VfUISrfMRg
OAO+kREQex4ox4cxBoJeHAJwGrexkSYesbJbhXZDuH61LZFdUSwwG/fqW1C3+9/7
mnWUhfZb1RBWGznEPL1KYy0VCw/PIWe6CkXBQcVQ9fABqxypLszb7Zo1ygZwCCKl
SpB9U+eTAgcF2XYLucA0QKV3LAW2vUwdwAX62gH7oC8RBLlfP4dT4AmJOWAOopqa
RevqZEsNokT8bd5Mi1rNj3sAxMmmxW1sMN2glTEAS6hzhdwZ2cByCgB6ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkqK4kw7GphYiNQoaavi9TnGzBgMB8GA1UdIwQY
MBaAFO8AulHWOxd1g36HL73oTi3Qh09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDIt
ODVjNTk1NDRjNmYzLzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDItODVjNTk1NDRjNmYz
LzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0b0Ebhm
nlDMHsVo3e7MpaKiHSlhrpSnWkBKqsxLfUKQ6JhXx09d0DB7JJ2pJOUanuksqrK8
eadq2SE9WSCNDdrzR6UR4iDQY9PzKOepsSNN9/xLY/ZT2qyuJssrpBM5I3OxjK6s
F8NGtu99khDCRV0G6C/htCS1bC0VqUO/Z9eUWNBSmrxiWvpXPH3g3ptUf2oBf3Rw
orK83SJHbLn/SaT1cEe6kovwuXyytYac+E0TBm+ENRUDhGzE6FtxPUlpG6sYY8uW
yxKhMEdYKlY5TnzjK9nBmVG/KFtqW3/nllV6ZSS9tDaiL7Yl7iTPEYu3zJ/FTV7z
CJ6/Z0EeFfYu3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:18 2025 by rpki-client