Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: o+HpyZMYBgX8uAUJq3Clv7nKcWgffalD4yKun68y6mk=
Subject key identifier: 44:A8:52:08:73:43:BA:3C:45:AE:43:26:82:3C:75:11:71:57:96:63
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 019A4EF4450F0B9CF8B21373370484EAC986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 09C6
Signing time: Tue 04 Nov 2025 13:00:22 +0000
Manifest this update: Tue 04 Nov 2025 13:00:22 +0000
Manifest next update: Wed 05 Nov 2025 13:00:22 +0000
Files and hashes: 1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: Hqyk3pqXGumlQGh1kpnh99g8jywAjBPldR0SoLl4P7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:45:0f:0b:9c:f8:b2:13:73:37:04:84:ea:c9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Nov 4 13:00:22 2025 GMT
Not After : Nov 5 13:00:22 2025 GMT
Subject: CN=44a852087343ba3c45ae4326823c751171579663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:88:07:92:f7:74:34:fa:e4:dc:74:f0:ea:
f6:94:52:f6:6e:49:b9:3e:a9:90:28:71:9d:82:de:
fa:0a:c0:9c:77:28:5b:f8:fd:2d:18:6a:c0:9b:f5:
80:1a:22:3a:4c:ee:9d:23:cb:20:38:a6:c0:e9:8c:
29:24:99:7d:dd:c0:a3:e4:84:1e:5b:8a:d6:e3:ac:
78:89:dd:0a:66:9f:b3:09:68:2a:df:9f:68:1a:3e:
a0:e6:e9:c5:9b:ce:ff:83:f6:07:ce:d6:8b:6b:62:
ea:90:1b:f8:66:c5:32:62:99:40:54:e6:d7:4d:de:
df:d7:67:4a:b8:92:d4:cf:1e:29:b2:15:d6:7b:ae:
fd:fa:eb:0b:55:4f:72:65:a5:7c:0f:ce:16:de:71:
2d:dc:0f:80:58:f9:c3:cb:7c:72:9d:71:a5:62:69:
93:de:5f:b7:05:1b:10:e6:c7:5e:f3:7e:12:a3:3f:
81:c2:68:3c:a8:54:10:23:a2:8e:fb:ce:e2:cc:ec:
ee:7a:70:6a:8b:95:43:b0:11:e4:2b:3d:26:44:82:
90:17:2e:dd:aa:0f:a6:01:cc:32:fd:bd:08:3a:35:
e1:ea:68:ff:76:82:05:50:02:3a:d0:99:17:53:4d:
ac:98:49:f8:f5:59:0a:14:7d:16:b8:b0:0d:37:5d:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:52:08:73:43:BA:3C:45:AE:43:26:82:3C:75:11:71:57:96:63
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:07:f8:65:1e:17:dd:fe:a0:1a:a6:4f:07:a2:34:2d:7a:51:
fc:5f:42:06:ef:47:69:67:b3:dd:ab:70:fc:03:41:73:b5:12:
25:7d:a7:ce:24:4c:0f:34:4e:68:93:39:32:e5:85:b5:d1:1d:
98:c2:c9:80:76:55:70:ae:13:db:df:65:3a:82:e1:96:e8:00:
62:b2:7e:4b:7c:c9:90:e5:fb:07:fc:05:c2:3d:ba:15:07:12:
df:c7:c9:ee:a1:18:5e:79:24:eb:79:30:54:f9:1d:60:d0:10:
9f:f8:2a:dc:4a:94:90:35:4f:68:4f:08:9b:65:c2:3d:21:5a:
5d:ce:ce:c5:4e:d3:26:12:cb:6b:62:17:d4:ac:cc:6a:c3:de:
08:e6:99:4e:87:75:e5:fc:d5:1c:7e:a8:e3:d1:63:d3:00:55:
b8:f7:cc:e1:5b:e3:16:0c:72:44:51:73:31:42:e7:e2:45:35:
d5:95:25:d8:fc:13:87:57:47:dd:be:28:a0:a2:6b:97:64:67:
bd:c7:28:5f:f6:76:a0:a3:45:de:b8:4d:92:7b:e5:45:96:ea:
aa:c7:fb:81:27:34:17:aa:3e:25:ee:96:7f:61:db:95:38:14:
8e:fc:79:27:80:d0:c3:49:7e:5b:ee:51:41:6b:80:16:7e:ce:
84:83:7c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EUPC5z4shNzNwSE6smGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjFkMGYyYzNkMjFlNTRjNGQxODEyNzYwNDQzNWE5MGYy
NGRiNTEwHhcNMjUxMTA0MTMwMDIyWhcNMjUxMTA1MTMwMDIyWjAzMTEwLwYDVQQD
Eyg0NGE4NTIwODczNDNiYTNjNDVhZTQzMjY4MjNjNzUxMTcxNTc5NjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8OIB5L3dDT65Nx08Or2lFL2bkm5
PqmQKHGdgt76CsCcdyhb+P0tGGrAm/WAGiI6TO6dI8sgOKbA6YwpJJl93cCj5IQe
W4rW46x4id0KZp+zCWgq359oGj6g5unFm87/g/YHztaLa2LqkBv4ZsUyYplAVObX
Td7f12dKuJLUzx4pshXWe679+usLVU9yZaV8D84W3nEt3A+AWPnDy3xynXGlYmmT
3l+3BRsQ5sde834Soz+Bwmg8qFQQI6KO+87izOzuenBqi5VDsBHkKz0mRIKQFy7d
qg+mAcwy/b0IOjXh6mj/doIFUAI60JkXU02smEn49VkKFH0WuLANN11l2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESoUghzQ7o8Ra5DJoI8dRFxV5ZjMB8GA1UdIwQY
MBaAFAux0PLD0h5UxNGBJ2BENakPJNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQt
Nzk5ZjdmNDU2MTYwLzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQtNzk5ZjdmNDU2MTYw
LzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgf4ZR4X
3f6gGqZPB6I0LXpR/F9CBu9HaWez3atw/ANBc7USJX2nziRMDzROaJM5MuWFtdEd
mMLJgHZVcK4T299lOoLhlugAYrJ+S3zJkOX7B/wFwj26FQcS38fJ7qEYXnkk63kw
VPkdYNAQn/gq3EqUkDVPaE8Im2XCPSFaXc7OxU7TJhLLa2IX1KzMasPeCOaZTod1
5fzVHH6o49Fj0wBVuPfM4VvjFgxyRFFzMULn4kU11ZUl2PwTh1dH3b4ooKJrl2Rn
vccoX/Z2oKNF3rhNknvlRZbqqsf7gSc0F6o+Je6Wf2HblTgUjvx5J4DQw0l+W+5R
QWuAFn7OhIN8yA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:16 2025 by rpki-client