Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: tI8ImMAZpTZ1js/YdMIhY3lxzIeLOWJ9rUiyex6UBr8=
Subject key identifier: 77:B4:31:8D:8C:A8:16:BF:59:63:19:57:3E:5B:4A:11:2F:39:26:E4
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 019A4DE1993F81183CF6F88CF4B4153D6230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 0669
Signing time: Tue 04 Nov 2025 08:00:21 +0000
Manifest this update: Tue 04 Nov 2025 08:00:21 +0000
Manifest next update: Wed 05 Nov 2025 08:00:21 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: uBzhJZUkh5KBEmqyLe8NIP2JSgi+KzeDC8gw1XR6yvU=)
2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:99:3f:81:18:3c:f6:f8:8c:f4:b4:15:3d:62:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Nov 4 08:00:21 2025 GMT
Not After : Nov 5 08:00:21 2025 GMT
Subject: CN=77b4318d8ca816bf596319573e5b4a112f3926e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:b9:68:f9:bc:0e:e6:81:da:40:46:01:1e:
74:4d:98:28:c5:8d:54:0e:1e:f3:62:4c:5f:aa:15:
37:7e:dc:00:e7:5b:04:dc:3b:c2:3d:e2:62:d0:5d:
69:b8:92:b7:56:a3:42:6e:2d:f4:90:1b:bf:19:98:
cd:4d:02:9e:fd:73:53:4e:ce:97:55:e7:da:8a:61:
e2:85:e4:dd:9b:73:6f:1c:01:5c:35:8a:ec:b8:87:
43:5a:db:73:a7:ad:c6:ab:5d:ca:46:3a:50:7e:a0:
e5:fe:df:70:b0:6a:f0:4d:b4:ba:71:58:16:cd:78:
e2:c0:89:aa:a6:db:54:5d:9f:b9:f4:2c:27:19:cc:
fb:b7:2c:a3:bd:d4:69:67:ea:64:d0:14:be:4e:74:
c5:94:c4:61:f5:ed:3b:af:90:be:45:7c:ab:1e:3d:
72:6a:04:18:b1:83:07:9e:39:27:3e:8f:b7:66:0b:
4f:c1:e5:1f:e3:2a:4d:f8:58:f2:04:9c:25:dd:d6:
d3:06:20:0f:22:f3:c5:14:b7:77:3d:25:c9:9b:6b:
92:4e:32:b9:9a:ca:9c:a4:fd:7b:39:df:25:02:0e:
ba:54:d5:e4:b8:f5:4e:5f:c1:86:4f:7a:f1:b0:43:
07:2c:e1:a5:db:f8:c0:b3:97:dd:e4:4f:90:de:31:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B4:31:8D:8C:A8:16:BF:59:63:19:57:3E:5B:4A:11:2F:39:26:E4
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2a:46:40:aa:76:54:03:58:b4:f0:a4:b7:06:d9:1f:36:37:
df:44:39:e7:a6:9b:d2:93:c3:34:de:d3:98:62:cf:5a:4f:94:
f2:de:53:c7:f7:22:bf:06:79:76:82:a8:51:7c:93:1c:b6:d9:
83:99:30:6f:44:bf:cd:fd:db:9a:56:4f:aa:a0:62:59:72:45:
55:50:18:88:f4:e3:b7:f5:54:2c:c4:85:ec:40:ca:50:9f:a2:
49:a9:7a:d1:c4:8e:6b:45:e6:b5:d6:82:60:49:d8:1a:c5:7a:
9f:e6:62:06:38:05:60:3a:df:dc:09:77:d0:3a:5e:b4:8a:8b:
6d:ab:8f:a6:fb:0f:0a:35:9a:42:3d:c4:9d:37:ec:81:ca:58:
63:11:ff:7a:b2:9c:d7:a6:38:7b:8c:10:5c:a9:62:be:68:39:
07:a1:9c:c7:d6:02:3a:11:6d:e9:36:7f:92:e2:57:93:69:42:
53:c8:d9:80:a3:20:16:63:39:12:de:e7:a1:75:d2:ca:5f:ad:
b1:8d:23:c5:33:cc:1d:fd:61:82:47:06:5a:ad:47:02:0a:99:
e0:02:4f:5b:20:86:a4:bc:8c:6f:4c:a4:aa:bd:dc:06:53:0c:
94:b4:bc:8c:79:6f:0b:a8:31:c3:c3:08:d7:cc:36:22:80:70:
ea:ee:37:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4Zk/gRg89viM9LQVPWIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmE4ZWMwM2VlYzNiY2ZjMzNjZjkwZjFmNGY4ZTdlOTAy
MzRlNjkwHhcNMjUxMTA0MDgwMDIxWhcNMjUxMTA1MDgwMDIxWjAzMTEwLwYDVQQD
Eyg3N2I0MzE4ZDhjYTgxNmJmNTk2MzE5NTczZTViNGExMTJmMzkyNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv65aPm8DuaB2kBGAR50TZgoxY1U
Dh7zYkxfqhU3ftwA51sE3DvCPeJi0F1puJK3VqNCbi30kBu/GZjNTQKe/XNTTs6X
VefaimHiheTdm3NvHAFcNYrsuIdDWttzp63Gq13KRjpQfqDl/t9wsGrwTbS6cVgW
zXjiwImqpttUXZ+59CwnGcz7tyyjvdRpZ+pk0BS+TnTFlMRh9e07r5C+RXyrHj1y
agQYsYMHnjknPo+3ZgtPweUf4ypN+FjyBJwl3dbTBiAPIvPFFLd3PSXJm2uSTjK5
msqcpP17Od8lAg66VNXkuPVOX8GGT3rxsEMHLOGl2/jAs5fd5E+Q3jGIqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe0MY2MqBa/WWMZVz5bShEvOSbkMB8GA1UdIwQY
MBaAFO8qjsA+7DvPwzz5Dx9Pjn6QI05pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUt
MDVjMDY3OTZlOTM4LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUtMDVjMDY3OTZlOTM4
LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCpGQKp2
VANYtPCktwbZHzY330Q556ab0pPDNN7TmGLPWk+U8t5Tx/civwZ5doKoUXyTHLbZ
g5kwb0S/zf3bmlZPqqBiWXJFVVAYiPTjt/VULMSF7EDKUJ+iSal60cSOa0XmtdaC
YEnYGsV6n+ZiBjgFYDrf3Al30DpetIqLbauPpvsPCjWaQj3EnTfsgcpYYxH/erKc
16Y4e4wQXKlivmg5B6Gcx9YCOhFt6TZ/kuJXk2lCU8jZgKMgFmM5Et7noXXSyl+t
sY0jxTPMHf1hgkcGWq1HAgqZ4AJPWyCGpLyMb0ykqr3cBlMMlLS8jHlvC6gxw8MI
18w2IoBw6u43bA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:46 2025 by rpki-client