Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File: 7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier: TUh7Fxnmu+tXSso3X8NUaAHZk3l+hn4UhYHg+4nXSH0=
Subject key identifier: 29:BD:47:85:5C:55:AF:C2:F0:36:8E:0D:53:C0:6A:EF:76:0B:D4:0A
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 019A4E863BEE69D86FDD83FC46433A1CDC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number: 0CEA
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: Z46Dznk+Glchux/km91nF+EInOUY8jLcxI1M+1lCb/8=)
2: Xc0IWZbMmju7pbBifzTAy_VFZls.roa (hash: ieHjZYyTowrkAjtUXCZ6gebps3wJnEiAbxYcxuJzbhs=)
3: gRffKuEX0czsrnlZBP9RuWOhUxc.roa (hash: ZNpwDIB3C/ZPnj8Whylo5eGsxYBRndXhcd3COmk7erw=)
4: yxisVf5RbQd_iyu5bjOm2uTCJqY.roa (hash: TlTPbndQ3fvJ6HctsZUhUZG2cQbNIxMU2U4IlG98W/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3b:ee:69:d8:6f:dd:83:fc:46:43:3a:1c:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=29bd47855c55afc2f0368e0d53c06aef760bd40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:e5:ff:ec:3e:4f:05:20:95:f7:c6:fc:ae:
77:be:ef:f2:0b:6e:09:a2:c4:d0:e9:94:7c:8b:e0:
a6:dd:23:c8:81:76:b1:d0:3d:1b:b9:6f:32:10:d9:
19:dd:d3:d7:06:2c:23:3c:56:ad:56:d9:c1:55:80:
c3:fe:16:b7:ad:96:37:33:77:b2:83:30:44:74:d0:
98:46:b7:6d:27:45:b3:5e:3d:78:87:5b:bb:a7:d7:
fb:af:33:79:5a:5c:c6:b9:20:49:94:47:a4:a2:2d:
15:8d:4d:13:e2:86:08:71:cc:28:70:7e:a8:56:d8:
e9:ba:be:ab:2c:30:f3:ab:4b:40:4a:de:89:a6:ee:
99:c5:54:2e:b8:45:f0:c8:e0:5c:0c:0e:fb:4a:e7:
34:45:e3:4f:2b:91:44:37:b1:01:de:8b:66:f3:2e:
26:83:cc:74:22:14:a6:4a:10:da:4d:6c:65:bd:59:
77:65:fb:4f:fb:75:9a:40:72:eb:ff:aa:8b:58:e5:
67:04:18:27:4c:a4:b1:f3:17:1b:ec:ef:7a:41:6f:
47:50:2b:0f:0e:08:d5:d9:22:5a:95:cd:1e:00:32:
69:38:a5:d3:98:af:1e:50:4b:30:7c:b9:c9:28:b6:
e4:dc:f1:4c:8c:e0:ab:52:3b:ad:8a:c2:40:c0:d2:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:47:85:5C:55:AF:C2:F0:36:8E:0D:53:C0:6A:EF:76:0B:D4:0A
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4a:e6:65:80:41:23:61:4c:72:05:37:aa:21:a4:fd:65:96:
a1:4c:d3:7f:7b:7b:ec:4d:ea:c0:fa:51:69:ca:3f:a7:bf:a7:
b6:91:96:de:08:15:27:86:c9:cf:98:9d:cb:36:1b:ee:c8:ff:
15:6f:d0:05:5c:75:3d:f7:14:c3:13:7a:04:93:4e:17:9c:dc:
e5:01:eb:48:9b:61:cd:62:04:0d:42:88:64:31:b3:30:46:ba:
a2:e5:26:fe:6f:3f:48:06:6e:69:01:e8:28:16:cc:a5:87:87:
be:d0:5f:72:fc:f7:df:ee:5b:0f:ac:de:3f:d2:62:79:b2:24:
ec:f0:b7:eb:5a:fc:ab:4e:93:4d:63:d9:f8:d1:46:b0:f4:91:
48:71:24:7a:41:db:7a:b5:b3:10:dd:4c:73:fc:ff:2c:99:ff:
92:40:4b:d7:3a:7c:f9:9f:4c:09:4e:8a:2f:a2:cf:eb:74:4e:
1c:be:36:35:5e:79:df:0d:c8:70:13:1a:4b:cd:be:35:20:15:
3c:da:eb:b2:42:b3:97:c7:61:08:28:8b:2e:d3:64:f4:53:7b:
e5:10:1a:34:17:d8:23:59:80:f3:8e:45:a3:b2:06:2c:7c:29:
88:c1:cf:52:05:a1:0c:18:42:cd:e2:74:e7:4e:53:88:da:f6:
a9:7d:18:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhjvuadhv3YP8RkM6HNx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4
ZWJiYjQwHhcNMjUxMTA0MTEwMDExWhcNMjUxMTA1MTEwMDExWjAzMTEwLwYDVQQD
EygyOWJkNDc4NTVjNTVhZmMyZjAzNjhlMGQ1M2MwNmFlZjc2MGJkNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBzl/+w+TwUglffG/K53vu/yC24J
osTQ6ZR8i+Cm3SPIgXax0D0buW8yENkZ3dPXBiwjPFatVtnBVYDD/ha3rZY3M3ey
gzBEdNCYRrdtJ0WzXj14h1u7p9f7rzN5WlzGuSBJlEekoi0VjU0T4oYIccwocH6o
Vtjpur6rLDDzq0tASt6Jpu6ZxVQuuEXwyOBcDA77Suc0ReNPK5FEN7EB3otm8y4m
g8x0IhSmShDaTWxlvVl3ZftP+3WaQHLr/6qLWOVnBBgnTKSx8xcb7O96QW9HUCsP
DgjV2SJalc0eADJpOKXTmK8eUEswfLnJKLbk3PFMjOCrUjutisJAwNJzMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm9R4VcVa/C8DaODVPAau92C9QKMB8GA1UdIwQY
MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It
ZTQ1ZmE2NGQ0ZDJkLzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk
LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUrmZYBB
I2FMcgU3qiGk/WWWoUzTf3t77E3qwPpRaco/p7+ntpGW3ggVJ4bJz5idyzYb7sj/
FW/QBVx1PfcUwxN6BJNOF5zc5QHrSJthzWIEDUKIZDGzMEa6ouUm/m8/SAZuaQHo
KBbMpYeHvtBfcvz33+5bD6zeP9JiebIk7PC361r8q06TTWPZ+NFGsPSRSHEkekHb
erWzEN1Mc/z/LJn/kkBL1zp8+Z9MCU6KL6LP63ROHL42NV553w3IcBMaS82+NSAV
PNrrskKzl8dhCCiLLtNk9FN75RAaNBfYI1mA845Fo7IGLHwpiMHPUgWhDBhCzeJ0
505TiNr2qX0YcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:27 2025 by rpki-client