Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: mvWB+3bnqiF9iAXoQiwm71Cpk1lTboo2ugLyT5NU9RY=
Subject key identifier: 32:A7:6A:F5:CB:44:8D:97:8F:3B:88:30:72:84:2B:5D:75:00:2D:57
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 019A4DE1B74D118D0C67D6243D83E0F6ABC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: sL9zV28PLKGAtS2dP1MU2JyVBvso5XjHjhNFzYA8zpA=)
2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b7:4d:11:8d:0c:67:d6:24:3d:83:e0:f6:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=32a76af5cb448d978f3b883072842b5d75002d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:73:ac:55:57:bc:01:9e:88:86:5e:bc:43:
13:b4:22:9b:ec:3f:4a:f8:a0:aa:a9:5f:3c:4e:83:
2c:65:68:7d:63:7b:15:b0:f5:0d:9f:cf:fe:94:02:
96:c7:29:6f:9a:d9:9a:81:d1:51:a5:2f:68:b3:05:
51:2e:d5:c0:b2:2e:7d:d3:04:fb:70:5c:db:82:3c:
e3:29:79:e8:4d:ca:02:9a:4f:02:9c:14:c6:00:34:
97:ee:45:33:08:73:4a:bb:24:42:80:61:a1:8f:87:
7e:1a:ea:3b:7a:14:37:0a:53:15:bd:25:25:86:aa:
a8:26:e0:67:2d:d3:80:3d:f9:7c:0d:19:33:65:4f:
d7:4b:6d:12:27:64:00:52:db:85:8d:23:66:e2:e8:
4c:20:28:e6:a7:37:cb:5a:0c:a6:d4:25:89:d9:bb:
00:79:a8:64:b9:20:a7:65:5c:88:77:85:52:d3:91:
d7:ff:1c:62:5e:a1:b8:09:18:6c:59:f5:8d:1d:da:
21:58:9b:ae:d1:c9:0a:30:34:e5:17:fd:9a:5a:26:
8b:b1:d2:c1:6e:a2:6d:5f:84:76:6c:47:35:2b:e2:
b3:77:25:d4:6d:9b:a6:c4:73:49:f3:35:d6:71:df:
87:ba:6e:15:79:33:69:56:eb:da:43:c8:0f:56:ac:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:6A:F5:CB:44:8D:97:8F:3B:88:30:72:84:2B:5D:75:00:2D:57
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:6b:38:94:22:38:e5:ac:52:50:e9:07:64:3e:8e:b9:9c:
c3:c1:2e:d0:d9:05:48:60:ec:13:b3:f9:c7:7b:99:8b:50:29:
9f:2a:4c:f6:11:eb:16:73:b7:79:fd:85:57:37:da:17:53:2e:
fc:f1:94:87:91:e0:7a:81:bf:e2:32:a9:c0:9b:0c:0c:77:37:
23:6d:d0:b4:7e:10:b8:80:ea:70:d3:6c:30:2c:57:fa:e0:cc:
e7:bf:96:f5:94:aa:3a:53:b4:98:0c:ce:98:eb:53:54:72:64:
47:36:37:f7:12:36:37:62:1f:91:c8:eb:57:94:1f:0a:80:cd:
69:ba:28:a8:e4:32:86:9a:f3:f3:af:8b:c5:ae:15:61:15:41:
8e:3a:82:a4:40:04:6d:39:2f:f2:7c:52:c0:d7:49:88:3f:f5:
00:bf:f8:f6:dc:a4:83:c7:15:fe:ea:80:38:74:4d:04:11:00:
af:0f:28:9a:3f:2e:d1:84:a6:8d:0a:57:86:71:0e:d8:c4:7b:
65:4e:74:28:87:e0:59:c4:ca:76:f2:59:e9:66:7b:c6:ca:22:
32:54:04:7d:44:5f:ce:30:f4:00:4d:88:eb:a0:3c:0c:99:29:
09:6e:a2:24:ca:4d:c4:d1:77:d5:a0:db:48:00:fc:14:65:76:
e3:37:b0:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4bdNEY0MZ9YkPYPg9qvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmI0YzBiNGFmNjE1Yzg1YTNjZGNkZWQ0YjdlYmI2NjYz
MTFiNDgwHhcNMjUxMTA0MDgwMDI5WhcNMjUxMTA1MDgwMDI5WjAzMTEwLwYDVQQD
EygzMmE3NmFmNWNiNDQ4ZDk3OGYzYjg4MzA3Mjg0MmI1ZDc1MDAyZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLhzrFVXvAGeiIZevEMTtCKb7D9K
+KCqqV88ToMsZWh9Y3sVsPUNn8/+lAKWxylvmtmagdFRpS9oswVRLtXAsi590wT7
cFzbgjzjKXnoTcoCmk8CnBTGADSX7kUzCHNKuyRCgGGhj4d+Guo7ehQ3ClMVvSUl
hqqoJuBnLdOAPfl8DRkzZU/XS20SJ2QAUtuFjSNm4uhMICjmpzfLWgym1CWJ2bsA
eahkuSCnZVyId4VS05HX/xxiXqG4CRhsWfWNHdohWJuu0ckKMDTlF/2aWiaLsdLB
bqJtX4R2bEc1K+KzdyXUbZumxHNJ8zXWcd+Hum4VeTNpVuvaQ8gPVqxpMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKnavXLRI2XjzuIMHKEK111AC1XMB8GA1UdIwQY
MBaAFO67TAtK9hXIWjzc3tS367ZmMRtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQt
MThlODRlNzQ3ZDIyLzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQtMThlODRlNzQ3ZDIy
LzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1lrOJQi
OOWsUlDpB2Q+jrmcw8Eu0NkFSGDsE7P5x3uZi1ApnypM9hHrFnO3ef2FVzfaF1Mu
/PGUh5HgeoG/4jKpwJsMDHc3I23QtH4QuIDqcNNsMCxX+uDM57+W9ZSqOlO0mAzO
mOtTVHJkRzY39xI2N2IfkcjrV5QfCoDNabooqOQyhprz86+Lxa4VYRVBjjqCpEAE
bTkv8nxSwNdJiD/1AL/49tykg8cV/uqAOHRNBBEArw8omj8u0YSmjQpXhnEO2MR7
ZU50KIfgWcTKdvJZ6WZ7xsoiMlQEfURfzjD0AE2I66A8DJkpCW6iJMpNxNF31aDb
SAD8FGV24zewyg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:55 2025 by rpki-client