
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File: Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier: symz6voiqG73BUnEXfwak27MGaMzXMzIp7/olv/+QQE=
Subject key identifier: 18:51:EB:A3:87:52:F2:84:02:DA:75:CC:63:7C:81:4F:74:3C:D3:C7
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial: 019A4E86A3537E3AB7943487050F7B33DA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number: 0FB5
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=)
2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: Em77mCkLy7Rjuy+OSfrhMQ9FNujQV6B72LVcpIETXi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a3:53:7e:3a:b7:94:34:87:05:0f:7b:33:da:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=1851eba38752f28402da75cc637c814f743cd3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:54:8b:bf:2f:05:3b:73:ab:0f:6e:df:ba:
78:c6:04:60:82:f1:9a:63:4d:ee:9b:32:38:29:f7:
e8:c5:a7:7b:05:b0:bd:66:27:18:de:1a:da:52:f3:
36:d2:c2:5a:f1:70:2d:d2:73:22:6d:8c:39:d6:c6:
47:e8:5a:bc:a2:a3:4c:3f:96:0b:ef:4a:6e:14:28:
db:58:4d:59:1f:92:f0:04:2a:34:41:24:f8:86:22:
41:ca:1c:26:8f:b0:c7:ad:14:74:40:df:64:bc:06:
15:9a:18:d9:34:cd:24:b1:d4:c7:02:f4:80:25:08:
77:6a:54:a3:c6:1f:f2:e9:89:0a:3e:0b:e0:84:c9:
a3:3f:41:3d:29:ae:3c:3d:be:8a:cd:40:68:a0:cb:
34:ed:66:5f:67:f2:22:c1:76:8e:07:f0:75:b1:70:
16:e2:23:f6:e4:15:e3:3a:f2:be:55:7f:13:d8:6e:
68:88:63:31:3d:4a:e2:f5:94:83:af:4b:2a:46:65:
64:fd:59:f1:65:b6:35:fc:ba:c7:e9:06:bb:50:9b:
b9:0f:84:e1:2c:84:91:54:8e:26:0d:4d:4e:1a:01:
ac:85:bd:0a:54:0c:9b:c0:59:e7:f0:25:b5:a7:b8:
2d:58:02:77:95:ab:85:fc:b5:8e:c7:14:d7:2c:9f:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:EB:A3:87:52:F2:84:02:DA:75:CC:63:7C:81:4F:74:3C:D3:C7
X509v3 Authority Key Identifier:
keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:06:8f:d0:e0:42:47:d7:c1:cf:5c:c7:85:73:37:53:57:74:
66:cd:e6:b1:30:e9:ad:85:ef:9d:f4:66:43:34:09:70:a4:ca:
3c:14:e6:e5:52:9d:ab:3a:7e:b3:14:ea:fc:70:91:a3:9e:2f:
97:e0:d7:95:b5:cd:05:9a:cf:92:27:5a:40:79:89:e2:7f:bc:
10:35:d7:6f:40:2f:32:ab:95:aa:91:c7:68:4b:af:a6:df:38:
20:73:ef:f0:39:1e:2d:70:f2:fd:6f:9b:59:b7:ed:2b:49:e0:
09:f0:1a:02:fd:c9:1e:02:f6:29:57:35:a6:d6:c9:3e:df:50:
12:7d:20:e7:b7:59:2b:6d:2d:91:41:58:b2:8f:21:d1:45:b7:
d7:f4:18:aa:d4:13:a8:e3:d0:db:a7:64:9a:79:cc:a4:71:11:
3e:c0:d6:98:81:66:12:ef:75:6a:9b:b2:96:81:25:9a:d7:0f:
e5:a2:3b:90:f4:29:44:9c:fe:50:03:18:b1:f6:f0:48:51:5b:
4d:4f:ac:77:ec:c3:67:51:ce:4e:4b:7c:5a:22:03:20:d9:3b:
b5:17:fa:9c:9b:85:10:f3:b0:57:47:37:f6:b3:1d:68:61:7f:
d8:f2:eb:47:e7:a3:36:b6:47:c9:da:26:42:a0:6e:d4:4e:da:
a1:e4:28:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhqNTfjq3lDSHBQ97M9pJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWFlZGVkYTEwNWQ3ZTkxMjlhOWIwY2U1NmI5YmZjYjlj
NjczOTQwHhcNMjUxMTA0MTEwMDM3WhcNMjUxMTA1MTEwMDM3WjAzMTEwLwYDVQQD
EygxODUxZWJhMzg3NTJmMjg0MDJkYTc1Y2M2MzdjODE0Zjc0M2NkM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHFUi78vBTtzqw9u37p4xgRggvGa
Y03umzI4Kffoxad7BbC9ZicY3hraUvM20sJa8XAt0nMibYw51sZH6Fq8oqNMP5YL
70puFCjbWE1ZH5LwBCo0QST4hiJByhwmj7DHrRR0QN9kvAYVmhjZNM0ksdTHAvSA
JQh3alSjxh/y6YkKPgvghMmjP0E9Ka48Pb6KzUBooMs07WZfZ/IiwXaOB/B1sXAW
4iP25BXjOvK+VX8T2G5oiGMxPUri9ZSDr0sqRmVk/VnxZbY1/LrH6Qa7UJu5D4Th
LISRVI4mDU1OGgGshb0KVAybwFnn8CW1p7gtWAJ3lauF/LWOxxTXLJ/AmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhR66OHUvKEAtp1zGN8gU90PNPHMB8GA1UdIwQY
MBaAFD3q7e2hBdfpEpqbDOVrm/y5xnOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMt
MGRiMTA4NTBjNzk0LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMtMGRiMTA4NTBjNzk0
LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAaP0OBC
R9fBz1zHhXM3U1d0Zs3msTDprYXvnfRmQzQJcKTKPBTm5VKdqzp+sxTq/HCRo54v
l+DXlbXNBZrPkidaQHmJ4n+8EDXXb0AvMquVqpHHaEuvpt84IHPv8DkeLXDy/W+b
WbftK0ngCfAaAv3JHgL2KVc1ptbJPt9QEn0g57dZK20tkUFYso8h0UW31/QYqtQT
qOPQ26dkmnnMpHERPsDWmIFmEu91apuyloElmtcP5aI7kPQpRJz+UAMYsfbwSFFb
TU+sd+zDZ1HOTkt8WiIDINk7tRf6nJuFEPOwV0c39rMdaGF/2PLrR+ejNrZHydom
QqBu1E7aoeQoGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:16 2025 by rpki-client