Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: UYin/8Acf3lR1GRDuIhn9wDCkYf94j84DD1MgTyaqDE=
Subject key identifier: F4:39:C4:2F:8B:F8:EB:4B:0C:23:90:14:2E:17:85:2F:75:60:03:C5
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 019A4E8637D2FDBE373FA34D72DE8DBE30A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 11:00:10 +0000
Manifest this update: Tue 04 Nov 2025 11:00:10 +0000
Manifest next update: Wed 05 Nov 2025 11:00:10 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: lahtEf8dZDT8R0T9WjyvWvLz1y8aTgG3YE7S5cEQAuA=)
2: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (hash: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:37:d2:fd:be:37:3f:a3:4d:72:de:8d:be:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Nov 4 11:00:10 2025 GMT
Not After : Nov 5 11:00:10 2025 GMT
Subject: CN=f439c42f8bf8eb4b0c2390142e17852f756003c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:f6:b0:ed:7f:2c:5e:20:97:a3:de:1a:46:
e7:f3:44:05:fb:9f:ab:48:7d:2e:5f:17:35:cd:60:
95:82:13:ee:2c:f2:35:16:44:93:59:3a:b1:da:9d:
6e:89:da:7f:47:ad:b7:1e:a7:60:01:88:cd:ce:8f:
78:3e:61:f6:f5:2c:ad:b7:d5:a4:cd:62:50:3f:40:
60:f1:f7:dc:ae:30:74:f7:83:e1:c3:45:c0:63:bf:
d5:e9:20:66:28:74:d4:0c:06:b2:03:0a:73:f8:35:
01:69:ce:1f:38:66:74:94:9c:33:81:de:1e:1f:c2:
2a:36:9b:80:bf:93:ca:ac:c1:1a:2a:67:b3:50:6c:
17:e3:7e:12:5c:e1:12:b4:3e:d9:69:d9:c8:de:1e:
ff:65:37:32:52:4c:ea:2c:25:aa:2c:e8:38:56:41:
93:dc:4a:11:a4:dc:f0:15:9d:c1:02:de:2c:27:46:
ee:81:ff:0a:89:2e:12:ed:f1:43:d1:9f:c1:25:03:
dc:df:cb:f5:0a:28:e1:8e:ed:47:2b:57:08:7b:e5:
a0:b0:c0:f3:1e:17:34:83:c9:0e:ed:4d:71:eb:43:
ac:ce:45:2a:b4:e3:56:c2:bf:09:7e:1e:23:9a:d4:
e5:1f:90:ee:12:15:f0:d4:70:94:68:f9:3f:64:4c:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:39:C4:2F:8B:F8:EB:4B:0C:23:90:14:2E:17:85:2F:75:60:03:C5
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e5:8c:3a:31:09:ee:f9:84:e1:17:d5:18:72:98:6a:4c:5f:
0e:51:cb:11:44:35:c8:c4:85:56:d2:b6:27:a2:a8:44:bf:b8:
27:8b:cb:52:93:10:f9:51:44:ad:71:e1:9d:f0:fc:d3:84:5c:
db:7e:b3:d8:bb:ed:6e:8a:37:aa:7d:50:be:f4:a5:6f:44:a8:
06:d2:41:f7:2d:0c:8c:4a:65:9e:d6:1f:3d:ca:33:19:36:67:
48:52:30:b0:76:0e:57:c4:33:2e:cc:31:0d:08:9d:e9:7a:c0:
e8:28:31:24:6c:26:4f:c2:0a:0e:4b:b6:1f:68:8c:49:4a:92:
e3:fd:71:95:e5:10:c4:31:36:2d:67:ca:4f:eb:4e:82:80:74:
ee:14:51:30:67:73:89:ae:bf:d5:94:ef:c5:58:d2:da:e0:24:
cb:a3:2d:d7:1b:fc:40:30:09:7d:c7:ea:39:ff:21:58:f0:2d:
21:a9:17:6d:d5:f4:ee:60:00:d7:54:e6:21:5f:42:0b:33:34:
98:46:6a:48:54:55:b3:01:83:29:a6:f7:08:c2:56:be:13:cc:
86:b3:84:8e:a2:52:ff:f4:45:43:cb:1d:18:83:62:95:2d:dc:
8d:26:21:3b:50:c6:86:35:b9:18:b1:f5:85:84:79:c3:b6:e2:
5c:ec:10:2f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpOhjfS/b43P6NNct6NvjClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYjI2OTUyYjEyMTNmOWNiZDFkOGM5NjcxZmIyMjM1N2Fk
OGQzMjIwHhcNMjUxMTA0MTEwMDEwWhcNMjUxMTA1MTEwMDEwWjAzMTEwLwYDVQQD
EyhmNDM5YzQyZjhiZjhlYjRiMGMyMzkwMTQyZTE3ODUyZjc1NjAwM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx32sO1/LF4gl6PeGkbn80QF+5+r
SH0uXxc1zWCVghPuLPI1FkSTWTqx2p1uidp/R623HqdgAYjNzo94PmH29Sytt9Wk
zWJQP0Bg8ffcrjB094Phw0XAY7/V6SBmKHTUDAayAwpz+DUBac4fOGZ0lJwzgd4e
H8IqNpuAv5PKrMEaKmezUGwX434SXOEStD7ZadnI3h7/ZTcyUkzqLCWqLOg4VkGT
3EoRpNzwFZ3BAt4sJ0bugf8KiS4S7fFD0Z/BJQPc38v1Cijhju1HK1cIe+WgsMDz
Hhc0g8kO7U1x60OszkUqtONWwr8Jfh4jmtTlH5DuEhXw1HCUaPk/ZEwV6wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPQ5xC+L+OtLDCOQFC4XhS91YAPFMB8GA1UdIwQY
MBaAFPuyaVKxIT+cvR2MlnH7IjV62NMiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03SnBVckVoUDV5OUhZeVdjZnNpTlhyWTB5SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjU5OThkLTRiN2EtNDJiMi1iNDZk
LWRkMjMyOTFmN2ExOS8xLzEtN0pwVXJFaFA1eTlIWXlXY2ZzaU5YclkweUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdh
MTkvMS8xLTdKcFVyRWhQNXk5SFl5V2Nmc2lOWHJZMHlJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReWM
OjEJ7vmE4RfVGHKYakxfDlHLEUQ1yMSFVtK2J6KoRL+4J4vLUpMQ+VFErXHhnfD8
04Rc236z2Lvtboo3qn1QvvSlb0SoBtJB9y0MjEplntYfPcozGTZnSFIwsHYOV8Qz
LswxDQid6XrA6CgxJGwmT8IKDku2H2iMSUqS4/1xleUQxDE2LWfKT+tOgoB07hRR
MGdzia6/1ZTvxVjS2uAky6Mt1xv8QDAJfcfqOf8hWPAtIakXbdX07mAA11TmIV9C
CzM0mEZqSFRVswGDKab3CMJWvhPMhrOEjqJS//RFQ8sdGINilS3cjSYhO1DGhjW5
GLH1hYR5w7biXOwQLw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:18 2025 by rpki-client