Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: loaAdCghQETb+/7FVq1UpgFqht5RWGl1ssYYQ6n7DsI=
Subject key identifier: 58:B4:AE:3F:7E:05:B5:8A:80:1E:57:1A:8F:0C:CF:32:B5:D3:94:82
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019A503DBF85EAA9D59C1E87F195D417F606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 02EA
Signing time: Tue 04 Nov 2025 19:00:15 +0000
Manifest this update: Tue 04 Nov 2025 19:00:15 +0000
Manifest next update: Wed 05 Nov 2025 19:00:15 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: ml7C8sBjPjTWRaWUhcKV5NNj75AsCPBXNlOzjMbXbrs=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:bf:85:ea:a9:d5:9c:1e:87:f1:95:d4:17:f6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Nov 4 19:00:15 2025 GMT
Not After : Nov 5 19:00:15 2025 GMT
Subject: CN=58b4ae3f7e05b58a801e571a8f0ccf32b5d39482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:f2:1e:ae:6a:a4:ff:ce:7a:ba:fa:ee:0f:
90:56:62:5b:22:7d:ab:b5:79:ad:57:56:04:2e:24:
d1:4b:f1:ad:6a:d7:61:08:96:74:a6:22:70:ad:b5:
4b:2b:b0:50:9c:36:33:c3:d1:18:d0:3b:4e:a5:33:
28:9e:1a:b3:09:50:b2:3e:39:7a:cb:67:f4:74:5c:
1d:72:88:65:4f:cc:56:3f:7c:b6:ec:a9:91:5e:69:
87:7f:9c:35:1c:da:d8:fe:04:bb:2c:0d:7c:40:05:
81:78:5c:41:49:b7:08:f3:61:91:29:a6:ac:a1:53:
60:6a:57:da:8e:13:5f:0e:6a:d7:5a:de:3d:56:6c:
d2:b7:f8:ec:ad:c9:0b:76:28:9f:0e:55:cf:a6:aa:
4d:b8:af:b6:0d:f4:dc:89:a6:ba:db:1f:35:38:27:
43:d8:a9:57:c4:cf:23:0e:3d:bf:33:c7:11:c8:59:
c8:a3:3d:62:13:0a:3a:cc:aa:d4:e6:0a:c9:4a:48:
34:a1:c1:de:7f:52:22:13:c7:11:b8:6b:76:3a:1d:
c5:93:27:95:24:2e:92:b9:dd:d4:75:f2:9e:b2:93:
e0:57:5d:15:c2:26:ea:11:01:f1:b6:1a:7d:88:91:
ae:1f:ac:e8:32:cc:e1:d8:c9:2f:34:14:a7:5d:68:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B4:AE:3F:7E:05:B5:8A:80:1E:57:1A:8F:0C:CF:32:B5:D3:94:82
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:72:48:be:80:75:e7:d4:c8:c4:f0:1e:e5:e9:8c:b6:72:0f:
f1:2d:ac:05:bb:c1:68:42:16:82:41:72:97:31:d1:f9:74:51:
09:e3:86:9a:8e:d0:0a:89:65:c1:d4:fc:3b:42:72:ed:9c:43:
3a:d4:46:ee:a0:59:38:24:10:f2:74:9a:1b:71:af:a1:04:37:
20:60:e0:ed:f7:f2:3c:3c:1f:bf:e4:7a:51:30:b8:ed:b2:39:
b5:3a:db:4e:9b:5b:2b:33:65:ab:98:ac:43:2c:bc:5c:c7:a1:
79:4d:6a:4c:de:7c:8b:7f:d0:d0:61:25:f1:4c:ce:76:3f:12:
53:50:c1:e0:8a:6f:77:be:c4:cb:19:91:4d:3f:fa:98:c1:ac:
2e:92:49:8e:4e:75:f3:94:a7:1f:64:f6:78:7a:e9:45:52:cf:
c8:13:55:e4:47:37:aa:2f:e5:ce:2c:6e:86:b9:26:ba:e0:df:
1b:6a:cc:52:6b:eb:04:75:0a:fd:39:91:8b:70:3c:6b:44:2d:
ae:76:da:38:ec:30:37:a3:a8:28:2a:2b:a2:b5:3c:0e:f8:09:
98:38:9a:a6:71:3f:98:bc:66:fd:ce:70:a0:0a:2a:0c:71:47:
3d:88:20:66:af:24:d7:75:ad:f2:d0:9a:18:5d:96:3f:c0:70:
6a:bb:9e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPb+F6qnVnB6H8ZXUF/YGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWQ4NzhiODFhOTAyMzk0MGQ0ZWM4YzE3MmQwNGQ0YzI1
NTg2Y2EwHhcNMjUxMTA0MTkwMDE1WhcNMjUxMTA1MTkwMDE1WjAzMTEwLwYDVQQD
Eyg1OGI0YWUzZjdlMDViNThhODAxZTU3MWE4ZjBjY2YzMmI1ZDM5NDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QLyHq5qpP/Oerr67g+QVmJbIn2r
tXmtV1YELiTRS/GtatdhCJZ0piJwrbVLK7BQnDYzw9EY0DtOpTMonhqzCVCyPjl6
y2f0dFwdcohlT8xWP3y27KmRXmmHf5w1HNrY/gS7LA18QAWBeFxBSbcI82GRKaas
oVNgalfajhNfDmrXWt49VmzSt/jsrckLdiifDlXPpqpNuK+2DfTciaa62x81OCdD
2KlXxM8jDj2/M8cRyFnIoz1iEwo6zKrU5grJSkg0ocHef1IiE8cRuGt2Oh3FkyeV
JC6Sud3UdfKespPgV10VwibqEQHxthp9iJGuH6zoMszh2MkvNBSnXWhABwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFi0rj9+BbWKgB5XGo8MzzK105SCMB8GA1UdIwQY
MBaAFO7th4uBqQI5QNTsjBctBNTCVYbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDct
NTZjMzYyNGI4YjFiLzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDctNTZjMzYyNGI4YjFi
LzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3JIvoB1
59TIxPAe5emMtnIP8S2sBbvBaEIWgkFylzHR+XRRCeOGmo7QCollwdT8O0Jy7ZxD
OtRG7qBZOCQQ8nSaG3GvoQQ3IGDg7ffyPDwfv+R6UTC47bI5tTrbTptbKzNlq5is
Qyy8XMeheU1qTN58i3/Q0GEl8UzOdj8SU1DB4Ipvd77EyxmRTT/6mMGsLpJJjk51
85SnH2T2eHrpRVLPyBNV5Ec3qi/lzixuhrkmuuDfG2rMUmvrBHUK/TmRi3A8a0Qt
rnbaOOwwN6OoKCororU8DvgJmDiapnE/mLxm/c5woAoqDHFHPYggZq8k13Wt8tCa
GF2WP8BwaruedA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:19 2025 by rpki-client