Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier: tFDVbaTsHMb0oWe9+PnlATRZ5SgymSXPPNqfELSrGBQ=
Subject key identifier: 66:7A:2F:35:D2:76:EE:0C:F3:44:1D:E3:D0:93:67:B8:EA:14:02:B5
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial: 019A4D742EA832A2B62AC1C9EECA2A03D6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number: 12DC
Signing time: Tue 04 Nov 2025 06:00:50 +0000
Manifest this update: Tue 04 Nov 2025 06:00:50 +0000
Manifest next update: Wed 05 Nov 2025 06:00:50 +0000
Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: vMoUNqyWR7600DeSZfRnrOB5HsyjXnhLSVeLdRflsKc=)
2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2e:a8:32:a2:b6:2a:c1:c9:ee:ca:2a:03:d6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Validity
Not Before: Nov 4 06:00:50 2025 GMT
Not After : Nov 5 06:00:50 2025 GMT
Subject: CN=667a2f35d276ee0cf3441de3d09367b8ea1402b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:d5:8c:1b:2a:72:df:31:de:0a:66:30:f0:
b9:70:e6:55:d1:b6:cd:05:89:b8:30:c9:48:0e:2f:
80:ed:e5:41:b6:31:d4:5a:f2:6b:05:d4:f7:2c:b2:
79:49:84:ae:7f:da:4b:24:f3:50:f4:61:bb:22:47:
cd:6a:5b:d8:81:df:fe:d1:79:a8:6a:5b:1d:10:bc:
15:99:6a:ec:25:c5:8b:af:bb:07:87:1e:27:ac:dd:
e0:99:b7:a0:1d:18:32:b1:35:79:3e:10:86:8a:b0:
ae:56:ec:9b:70:59:ab:a4:1b:93:c0:fd:f1:18:8e:
65:27:d1:cb:e7:ad:ce:d1:da:51:07:17:bc:b0:b8:
c4:53:b0:ae:77:33:7b:c6:9f:9b:8d:51:9f:b3:c1:
8a:9f:5c:82:db:69:6d:eb:5a:54:be:5d:de:58:2e:
f6:79:79:a1:b6:bf:34:28:7e:8d:95:38:41:ed:aa:
f9:82:69:60:d8:d2:de:2e:7d:50:b8:da:78:08:65:
f8:b2:83:4b:03:41:c3:9d:98:5a:6f:b8:29:ab:06:
c8:c2:78:5d:a4:95:a2:5b:79:52:0e:2c:db:3b:d1:
73:b0:77:9b:2f:6f:c4:9c:d7:9c:20:a1:aa:b9:ce:
e2:73:42:15:c8:08:08:2a:fc:1d:e0:68:53:bf:97:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:2F:35:D2:76:EE:0C:F3:44:1D:E3:D0:93:67:B8:EA:14:02:B5
X509v3 Authority Key Identifier:
keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9c:f2:52:1e:79:e2:75:47:07:a9:1d:98:65:44:df:c0:2a:
f9:8e:3e:58:c1:55:5b:1d:d9:99:9a:9d:ab:2d:93:c6:79:39:
47:8f:01:7d:e5:e1:df:6b:1d:94:ed:46:8d:88:f2:0e:71:f3:
e5:8b:a6:4a:2b:10:26:28:45:f2:48:13:62:a7:cb:89:32:8f:
14:5d:68:7a:df:a6:6b:08:7a:8e:3b:fd:43:8c:6b:05:a4:5f:
7f:e3:8d:f8:75:ab:d2:ca:e7:67:fe:1c:ec:1a:97:f7:7a:3c:
1d:53:d6:30:5f:05:bd:ba:73:47:cb:f1:74:9c:87:3f:f3:c7:
bd:bb:e3:dc:c5:04:76:45:e3:a7:2e:3f:2f:d2:09:05:f8:76:
4c:a0:55:6c:99:ab:ca:7d:72:f8:d6:ef:a1:0e:37:a3:36:79:
6c:91:0b:55:37:f4:f3:8a:e5:8d:cb:a4:01:8e:c9:44:84:73:
4c:a5:eb:72:86:3b:58:e6:f4:84:03:47:ee:2d:56:92:86:00:
a5:a9:6f:d3:bc:3b:ac:0d:01:0a:d3:62:5d:c3:dd:88:5a:ee:
da:07:bf:96:81:db:96:77:49:e3:cd:11:14:d0:19:a5:95:a5:
00:71:c2:22:a1:f4:73:f7:12:91:d1:3b:93:18:d9:e6:55:82:
c0:82:d2:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdC6oMqK2KsHJ7soqA9boMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh
ZWYzY2MwHhcNMjUxMTA0MDYwMDUwWhcNMjUxMTA1MDYwMDUwWjAzMTEwLwYDVQQD
Eyg2NjdhMmYzNWQyNzZlZTBjZjM0NDFkZTNkMDkzNjdiOGVhMTQwMmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY/VjBsqct8x3gpmMPC5cOZV0bbN
BYm4MMlIDi+A7eVBtjHUWvJrBdT3LLJ5SYSuf9pLJPNQ9GG7IkfNalvYgd/+0Xmo
alsdELwVmWrsJcWLr7sHhx4nrN3gmbegHRgysTV5PhCGirCuVuybcFmrpBuTwP3x
GI5lJ9HL563O0dpRBxe8sLjEU7CudzN7xp+bjVGfs8GKn1yC22lt61pUvl3eWC72
eXmhtr80KH6NlThB7ar5gmlg2NLeLn1QuNp4CGX4soNLA0HDnZhab7gpqwbIwnhd
pJWiW3lSDizbO9FzsHebL2/EnNecIKGquc7ic0IVyAgIKvwd4GhTv5dMgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ6LzXSdu4M80Qd49CTZ7jqFAK1MB8GA1UdIwQY
MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt
ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx
LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpzyUh55
4nVHB6kdmGVE38Aq+Y4+WMFVWx3ZmZqdqy2Txnk5R48BfeXh32sdlO1GjYjyDnHz
5YumSisQJihF8kgTYqfLiTKPFF1oet+mawh6jjv9Q4xrBaRff+ON+HWr0srnZ/4c
7BqX93o8HVPWMF8FvbpzR8vxdJyHP/PHvbvj3MUEdkXjpy4/L9IJBfh2TKBVbJmr
yn1y+NbvoQ43ozZ5bJELVTf084rljcukAY7JRIRzTKXrcoY7WOb0hANH7i1WkoYA
palv07w7rA0BCtNiXcPdiFru2ge/loHblndJ480RFNAZpZWlAHHCIqH0c/cSkdE7
kxjZ5lWCwILS0A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:58 2025 by rpki-client