Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: l1Y6aH9tZEsM5WOg11U5tnDIkPI1GC98uwJRDEtFqGM=
Subject key identifier: EB:C7:24:04:6C:C2:D8:CC:F5:EE:F5:72:A6:D5:84:2B:89:AB:BC:1B
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 019A54514C2AA5D4A7B2C6368EFDA347F5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: 0215
Signing time: Wed 05 Nov 2025 14:00:05 +0000
Manifest this update: Wed 05 Nov 2025 14:00:05 +0000
Manifest next update: Thu 06 Nov 2025 14:00:05 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: ICi7wv5Kci3K9m73+OpaEFLWBhjqzBpDwgjPwuc4nqI=)
2: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (hash: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:4c:2a:a5:d4:a7:b2:c6:36:8e:fd:a3:47:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Nov 5 14:00:05 2025 GMT
Not After : Nov 6 14:00:05 2025 GMT
Subject: CN=ebc724046cc2d8ccf5eef572a6d5842b89abbc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:23:be:e4:c9:34:78:84:98:29:49:be:de:
9b:37:f8:ec:5e:bc:ba:54:02:85:9b:e7:08:5c:31:
0c:c0:ee:10:78:07:f7:8a:9b:5c:7e:b8:b2:69:a4:
43:57:a2:e2:0b:ac:ee:29:d7:9a:af:03:c4:c0:80:
a8:34:d5:9a:cc:ce:86:34:a5:19:b6:df:bb:c6:dd:
84:85:b4:ab:01:38:ab:03:62:00:b6:7f:52:3e:df:
29:28:a8:46:2a:39:ab:ed:a8:99:16:a9:f5:bb:b6:
18:86:0d:14:65:89:c1:03:0d:bc:12:43:ce:45:9d:
f2:78:65:52:92:1b:9f:6e:f0:e9:3f:ad:e1:d4:a6:
15:aa:a6:ac:2b:fd:38:ed:7a:73:c8:8c:e2:5e:56:
00:25:5c:ca:cb:0b:c5:e7:af:4a:4d:6d:f5:79:d4:
8c:28:eb:61:98:e6:19:88:99:19:cc:09:f8:f3:e6:
4d:85:35:6e:63:e8:21:bb:6a:8b:45:ec:14:42:51:
ea:05:6b:5a:0d:13:47:97:20:52:be:7b:69:63:2c:
07:9b:81:cf:3d:a8:8a:5d:ca:1b:bc:f2:01:e1:b0:
eb:9f:42:af:ab:d4:7a:8c:32:ff:f1:0f:15:03:8b:
5b:95:06:7e:e7:f1:d9:5f:f8:b8:56:64:ad:92:77:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C7:24:04:6C:C2:D8:CC:F5:EE:F5:72:A6:D5:84:2B:89:AB:BC:1B
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:2f:d1:8d:76:72:23:c1:87:82:63:ee:7a:38:86:0f:a9:
ce:24:79:92:ed:5a:f3:a2:90:bb:f3:e9:0d:7c:ab:59:e2:c7:
ba:1a:2a:72:dc:f0:af:b5:45:44:b4:f4:c1:88:c2:01:61:2e:
51:51:8a:36:e7:66:1b:68:79:06:ad:76:d2:a2:ed:51:b3:f0:
4b:bc:54:fb:52:5f:4f:56:b7:66:e2:fd:8f:2c:b8:96:8b:e4:
ad:a3:a9:fe:d1:1e:af:d0:01:d8:ad:93:f3:c7:82:8d:a6:fc:
9d:37:d0:59:8c:70:db:5c:41:3f:d9:2f:f9:93:89:4a:72:e8:
7a:14:a7:2e:05:29:37:05:28:ff:85:5c:c8:a0:fd:ac:63:fc:
46:9c:97:1e:6e:80:6d:a7:c5:3b:13:55:6c:5f:1d:1f:8e:9f:
f3:2c:15:07:10:a0:6b:01:e2:b9:b9:c0:69:a5:9a:73:53:f0:
8c:ce:37:81:da:f3:65:1b:86:3e:1b:8b:e0:dd:de:84:7b:4b:
cd:3f:1b:37:8a:67:d0:2c:da:bf:15:b8:9d:91:2e:0b:1c:c5:
6d:43:3d:85:e6:51:8a:9f:52:49:c5:f0:f5:17:e0:f3:23:95:
81:ef:ef:66:b1:91:1f:06:ed:88:67:d0:6d:74:fa:0d:30:08:
7b:7d:15:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUUwqpdSnssY2jv2jR/XAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNDY0Yzc2YzAxOTQ4Zjg3ZTA0ZTJmYzVmNTE2NzAyYjM5
MDc0NTYwHhcNMjUxMTA1MTQwMDA1WhcNMjUxMTA2MTQwMDA1WjAzMTEwLwYDVQQD
EyhlYmM3MjQwNDZjYzJkOGNjZjVlZWY1NzJhNmQ1ODQyYjg5YWJiYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQjvuTJNHiEmClJvt6bN/jsXry6
VAKFm+cIXDEMwO4QeAf3iptcfriyaaRDV6LiC6zuKdearwPEwICoNNWazM6GNKUZ
tt+7xt2EhbSrATirA2IAtn9SPt8pKKhGKjmr7aiZFqn1u7YYhg0UZYnBAw28EkPO
RZ3yeGVSkhufbvDpP63h1KYVqqasK/047XpzyIziXlYAJVzKywvF569KTW31edSM
KOthmOYZiJkZzAn48+ZNhTVuY+ghu2qLRewUQlHqBWtaDRNHlyBSvntpYywHm4HP
PaiKXcobvPIB4bDrn0Kvq9R6jDL/8Q8VA4tblQZ+5/HZX/i4VmStkncJpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvHJARswtjM9e71cqbVhCuJq7wbMB8GA1UdIwQY
MBaAFO1GTHbAGUj4fgTi/F9RZwKzkHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQt
Mzg1N2VjNWNiMWRiLzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQtMzg1N2VjNWNiMWRi
LzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfcv0Y12
ciPBh4Jj7no4hg+pziR5ku1a86KQu/PpDXyrWeLHuhoqctzwr7VFRLT0wYjCAWEu
UVGKNudmG2h5Bq120qLtUbPwS7xU+1JfT1a3ZuL9jyy4lovkraOp/tEer9AB2K2T
88eCjab8nTfQWYxw21xBP9kv+ZOJSnLoehSnLgUpNwUo/4VcyKD9rGP8RpyXHm6A
bafFOxNVbF8dH46f8ywVBxCgawHiubnAaaWac1PwjM43gdrzZRuGPhuL4N3ehHtL
zT8bN4pn0CzavxW4nZEuCxzFbUM9heZRip9SScXw9Rfg8yOVge/vZrGRHwbtiGfQ
bXT6DTAIe30Vyg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:52 2025 by rpki-client