Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: /Oh9Hmv68ae0qIcAGvzc4H6fjpV8EVKNT4v3X0x0YFU=
Subject key identifier: E2:1F:91:07:3C:19:D9:E2:49:91:21:C8:56:CE:F7:B3:DE:B6:EB:38
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 019A53081469F9D61BF233A9408BEC53A3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 02C7
Signing time: Wed 05 Nov 2025 08:00:29 +0000
Manifest this update: Wed 05 Nov 2025 08:00:29 +0000
Manifest next update: Thu 06 Nov 2025 08:00:29 +0000
Files and hashes: 1: NwE-Q3U5NROLLw8YZo5SdVq6prU.roa (hash: 4nK8pCzkjFWGecL8LPoOkleHLxc20BBIlahc8LVNGkQ=)
2: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: j5V1gBlsBOvoahiMR4fg76uwONaoRRzzRl6wpsGVf84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:14:69:f9:d6:1b:f2:33:a9:40:8b:ec:53:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Nov 5 08:00:29 2025 GMT
Not After : Nov 6 08:00:29 2025 GMT
Subject: CN=e21f91073c19d9e2499121c856cef7b3deb6eb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:16:ab:02:54:ed:12:6f:74:95:f0:ee:d7:
4f:6e:f1:df:29:1b:44:a6:3c:84:b4:27:7f:55:41:
34:bb:c5:88:69:0c:01:2c:15:d7:01:7a:4b:94:36:
e1:5f:7e:06:82:09:78:9a:de:67:b5:91:eb:4f:06:
6a:3f:11:9f:71:a1:67:83:62:a8:84:17:ab:69:a1:
8b:81:99:82:5d:08:59:5b:55:eb:26:c5:de:0a:c0:
08:e5:05:a2:47:ff:e8:0b:e5:e8:20:54:88:ca:fd:
a3:70:00:9e:53:df:71:a4:05:68:70:ee:3f:b5:d7:
0a:74:9b:0c:23:90:cf:fb:05:0a:d1:2f:33:4a:8f:
75:8c:3b:cc:6d:42:fa:48:a0:c5:2e:fe:c7:97:44:
cd:aa:ca:69:f7:e0:5f:9e:00:64:cf:e1:8c:61:16:
e8:bc:b2:9e:3b:67:ca:cc:b8:0d:37:ca:58:2a:07:
6e:16:49:1c:e6:97:1b:ad:06:30:7b:2e:2d:75:cb:
38:0a:d6:06:71:7c:a3:86:2d:28:1f:d9:30:78:a0:
b0:6b:f2:06:fa:7a:f8:d0:45:ce:2b:b3:99:52:f1:
fe:05:dc:c4:77:71:25:1e:56:1d:e4:ea:19:c9:c6:
c7:0d:dd:51:af:69:24:0a:2f:72:e3:d2:92:43:12:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1F:91:07:3C:19:D9:E2:49:91:21:C8:56:CE:F7:B3:DE:B6:EB:38
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:d5:ec:d1:2e:5d:7f:60:34:22:2f:24:da:d2:5d:c7:07:
6b:dd:9e:48:2c:36:d9:95:b0:b2:04:75:92:38:d6:de:6d:66:
0d:e3:f7:4d:54:6c:8f:11:55:b3:e3:aa:a7:4e:38:b2:8e:29:
38:b9:a5:56:07:bf:03:c6:bf:19:d1:81:4c:ed:a3:e0:56:a2:
ae:fd:32:95:56:40:47:a6:77:36:90:82:b7:e9:67:50:e6:f6:
3e:de:9e:eb:fe:2b:e3:f5:f3:5d:ea:34:0d:1a:42:5f:b6:09:
9c:1a:fc:93:97:94:50:f3:8d:d0:09:46:a3:b7:93:89:41:31:
a3:4a:eb:aa:f5:03:cd:ed:04:97:b3:93:d2:63:69:43:05:34:
16:2c:d9:02:9f:cc:a0:51:0d:1a:da:3e:a9:08:56:0e:53:4e:
9b:e7:34:01:cb:75:39:39:6d:86:f6:98:c9:66:ef:d5:83:56:
a5:1f:4e:82:de:67:74:e3:6d:6f:d5:f1:31:91:1b:ed:08:09:
48:92:29:cb:e1:58:84:2d:f2:a5:9f:cd:b2:6c:9b:0b:17:fc:
3f:bc:79:4b:97:07:03:4e:43:b4:1a:8f:cd:12:f2:f3:5f:e1:
9a:2c:e5:e7:39:c4:e5:4c:ae:6f:61:2e:ef:36:2d:b9:9b:c1:
62:9d:d6:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCBRp+dYb8jOpQIvsU6P1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTM0MGVkMjMyM2E5Mjg2ZTk4MGY2NjQ2OTk5MGE5YTFl
MzA3NWQwHhcNMjUxMTA1MDgwMDI5WhcNMjUxMTA2MDgwMDI5WjAzMTEwLwYDVQQD
EyhlMjFmOTEwNzNjMTlkOWUyNDk5MTIxYzg1NmNlZjdiM2RlYjZlYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsMWqwJU7RJvdJXw7tdPbvHfKRtE
pjyEtCd/VUE0u8WIaQwBLBXXAXpLlDbhX34Gggl4mt5ntZHrTwZqPxGfcaFng2Ko
hBeraaGLgZmCXQhZW1XrJsXeCsAI5QWiR//oC+XoIFSIyv2jcACeU99xpAVocO4/
tdcKdJsMI5DP+wUK0S8zSo91jDvMbUL6SKDFLv7Hl0TNqspp9+BfngBkz+GMYRbo
vLKeO2fKzLgNN8pYKgduFkkc5pcbrQYwey4tdcs4CtYGcXyjhi0oH9kweKCwa/IG
+nr40EXOK7OZUvH+BdzEd3ElHlYd5OoZycbHDd1Rr2kkCi9y49KSQxJ6twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIfkQc8GdniSZEhyFbO97Petus4MB8GA1UdIwQY
MBaAFH4TQO0jI6kobpgPZkaZkKmh4wddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMt
ZmUwMjdhMDM0NDQ5LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMtZmUwMjdhMDM0NDQ5
LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbrV7NEu
XX9gNCIvJNrSXccHa92eSCw22ZWwsgR1kjjW3m1mDeP3TVRsjxFVs+Oqp044so4p
OLmlVge/A8a/GdGBTO2j4Fairv0ylVZAR6Z3NpCCt+lnUOb2Pt6e6/4r4/XzXeo0
DRpCX7YJnBr8k5eUUPON0AlGo7eTiUExo0rrqvUDze0El7OT0mNpQwU0FizZAp/M
oFENGto+qQhWDlNOm+c0Act1OTlthvaYyWbv1YNWpR9Ogt5ndONtb9XxMZEb7QgJ
SJIpy+FYhC3ypZ/NsmybCxf8P7x5S5cHA05DtBqPzRLy81/hmizl5znE5Uyub2Eu
7zYtuZvBYp3WUQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:02:42 2025 by rpki-client