Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: G7mDrjxhBf4OVYeiWef8/hTfEX7IgNHLWrnTfwwEQfs=
Subject key identifier: 2A:0F:B8:1E:4A:82:CA:4F:5D:BE:1C:30:4A:D4:6A:E6:97:DF:3D:C3
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019A4E868CB576FE036CF4FBB4B3C68A6DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0EDA
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: i3pb8gMONBjh3FZBTXZYH7ZqBLKG/cxqrZKWW9YiQ5I=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8c:b5:76:fe:03:6c:f4:fb:b4:b3:c6:8a:6d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=2a0fb81e4a82ca4f5dbe1c304ad46ae697df3dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:90:69:49:0b:38:49:4a:3f:04:0d:9a:10:
39:f9:a6:06:3c:eb:16:20:d0:1f:8d:df:6d:9d:dc:
81:7e:99:94:0c:4b:7d:2b:04:f2:35:93:ca:4b:33:
6a:e6:d1:6d:ba:58:66:41:15:36:1f:aa:b9:11:fb:
18:58:ae:6a:ad:67:1c:e4:d0:3a:b3:bb:9a:66:f6:
61:55:4a:56:82:6c:e0:81:4f:c9:54:6f:1b:04:c2:
d4:5d:67:06:6e:f5:fe:a7:01:de:53:6b:74:23:d8:
66:f2:d3:ba:6d:d5:65:9f:d0:0b:7b:e9:22:c8:70:
f8:3d:ac:d8:2f:40:f1:37:0d:10:91:21:fb:e8:72:
58:c5:ec:d5:af:33:9c:6a:3b:72:84:94:e6:56:e9:
40:d9:4e:d5:e7:32:b7:b6:d0:33:64:26:ad:3d:1f:
87:0c:c1:6e:41:b6:8d:d3:47:ac:ad:3e:7f:d5:34:
64:70:b1:17:97:7d:3d:9f:c8:75:c8:70:b4:ee:e9:
ee:e0:a2:bc:61:36:e0:83:89:60:e9:10:61:80:c5:
26:a6:1a:2a:08:9c:26:da:e3:95:86:3b:12:63:85:
2a:0b:dc:e5:07:38:7e:77:5e:db:b8:84:23:ee:ca:
00:34:33:6f:78:b8:d7:13:5a:da:bb:2e:e1:4f:de:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0F:B8:1E:4A:82:CA:4F:5D:BE:1C:30:4A:D4:6A:E6:97:DF:3D:C3
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cd:dd:76:50:74:b9:51:05:e7:87:3a:09:a7:7f:b1:48:28:
8b:87:35:72:90:32:a8:9a:5e:4c:7a:f3:69:95:08:15:c2:bf:
77:7c:3e:70:a4:03:d7:5b:01:72:16:32:f2:0e:0b:9a:fd:ab:
1e:b3:2a:48:32:14:df:7b:94:1d:17:c0:ad:dd:0e:94:45:46:
df:52:3a:2f:e3:2b:e3:6f:82:39:74:8c:5d:2e:6e:ec:2b:ee:
b0:cb:80:3f:61:fc:b4:38:3e:11:09:56:02:4d:6e:0a:92:45:
01:e9:b0:6b:bd:ce:7e:fb:93:8b:a2:a4:22:72:d3:72:b9:c0:
6d:b8:f6:ff:7b:14:2e:47:f8:14:81:6d:ba:e7:89:c5:7e:4e:
d3:64:e7:37:b7:83:6b:5f:b5:ae:c0:c4:c9:c0:a4:2e:9e:9e:
bf:be:80:e8:07:9b:8d:c3:f9:1a:16:99:91:29:33:27:94:59:
4a:0f:c4:e4:1d:4c:53:61:2e:ad:58:08:d2:17:6e:09:60:7e:
ad:b7:c8:a9:35:74:52:f6:f1:38:57:34:fc:93:01:f4:ad:77:
d0:78:70:61:2d:61:ea:02:d7:92:29:70:b7:f2:7a:14:62:f2:
ae:64:35:ad:07:1e:45:73:76:11:43:ee:6f:6e:88:05:6a:f1:
5e:fa:45:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhoy1dv4DbPT7tLPGim2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4
YzEzNGYwHhcNMjUxMTA0MTEwMDMxWhcNMjUxMTA1MTEwMDMxWjAzMTEwLwYDVQQD
EygyYTBmYjgxZTRhODJjYTRmNWRiZTFjMzA0YWQ0NmFlNjk3ZGYzZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE+QaUkLOElKPwQNmhA5+aYGPOsW
INAfjd9tndyBfpmUDEt9KwTyNZPKSzNq5tFtulhmQRU2H6q5EfsYWK5qrWcc5NA6
s7uaZvZhVUpWgmzggU/JVG8bBMLUXWcGbvX+pwHeU2t0I9hm8tO6bdVln9ALe+ki
yHD4PazYL0DxNw0QkSH76HJYxezVrzOcajtyhJTmVulA2U7V5zK3ttAzZCatPR+H
DMFuQbaN00esrT5/1TRkcLEXl309n8h1yHC07unu4KK8YTbgg4lg6RBhgMUmphoq
CJwm2uOVhjsSY4UqC9zlBzh+d17buIQj7soANDNveLjXE1rauy7hT97GAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoPuB5KgspPXb4cMErUauaX3z3DMB8GA1UdIwQY
MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt
MzU0MmY5OWJlNjNiLzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi
LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOM3ddlB0
uVEF54c6Cad/sUgoi4c1cpAyqJpeTHrzaZUIFcK/d3w+cKQD11sBchYy8g4Lmv2r
HrMqSDIU33uUHRfArd0OlEVG31I6L+Mr42+COXSMXS5u7CvusMuAP2H8tDg+EQlW
Ak1uCpJFAemwa73OfvuTi6KkInLTcrnAbbj2/3sULkf4FIFtuueJxX5O02TnN7eD
a1+1rsDEycCkLp6ev76A6AebjcP5GhaZkSkzJ5RZSg/E5B1MU2EurVgI0hduCWB+
rbfIqTV0UvbxOFc0/JMB9K130HhwYS1h6gLXkilwt/J6FGLyrmQ1rQceRXN2EUPu
b26IBWrxXvpF7A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:10 2025 by rpki-client