Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: 16mAHuL1aS3YZjEmriYgfLNabvhlF4/irrifGsF7glQ=
Subject key identifier: 5F:FB:F4:22:1B:30:43:0C:B1:9F:8E:82:78:8F:18:41:9C:BD:A3:ED
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 019A4E86A78BFDAC2E658D0B14250819F72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 112D
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: 0YnoXFsLC3L8LFSSyo3TEM6ihxM.roa (hash: 1mt7G/fO9VBU7/suzQGIUYMupKdv6yImTUBwyXrv1sk=)
2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: 4AkjLT2muwDjXMkRPgddY9BrllgZzLir2SEdGkNRhmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a7:8b:fd:ac:2e:65:8d:0b:14:25:08:19:f7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=5ffbf4221b30430cb19f8e82788f18419cbda3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:57:3e:c8:5f:69:64:84:d3:c6:3a:5c:86:
94:00:ed:52:38:02:98:f0:38:d3:8d:ff:dd:69:85:
cd:ef:db:c6:49:ec:ec:6b:32:36:e7:1a:e2:a3:e9:
37:10:4e:9e:4a:72:d7:0a:f0:55:28:94:27:fe:ab:
1a:4c:98:36:e8:5c:a5:3d:f2:62:ff:3e:ad:9c:77:
68:a0:33:94:90:92:a4:05:15:29:c6:f0:25:ce:ac:
0e:bf:af:d3:af:a1:82:ff:5f:67:f1:96:17:19:ed:
f3:d7:f5:96:cf:a7:72:86:1f:db:e5:e0:14:03:a1:
94:6c:cb:6a:df:c6:11:dd:7c:f3:da:73:21:c0:5e:
05:c1:c5:78:0a:d8:4e:1e:13:f2:9f:3b:f0:20:1b:
1e:cc:54:87:45:01:22:c7:fa:b3:c4:23:90:85:57:
f2:d8:34:6a:ff:a0:2b:4a:95:a7:b2:7e:bf:9e:c1:
4b:02:26:7b:1d:96:1b:37:33:03:e2:1f:50:74:dc:
ac:3a:72:b2:c6:b7:09:08:1c:05:77:e6:c3:14:2f:
00:5e:2a:00:73:1e:6e:e7:8c:26:4d:1a:a2:e9:e3:
fd:ad:82:07:a3:89:0b:f5:37:c7:f4:e1:d5:59:23:
c3:bf:97:d7:b2:82:57:7b:6d:d6:32:00:6b:97:2e:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FB:F4:22:1B:30:43:0C:B1:9F:8E:82:78:8F:18:41:9C:BD:A3:ED
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:41:88:de:3d:6f:d4:7d:59:3f:00:dd:ba:58:c5:d3:29:90:
fe:79:c5:3a:52:40:5b:da:e3:d3:91:fb:fb:93:39:3c:3e:c4:
67:99:10:a8:19:0c:62:00:21:f8:bb:aa:5e:ac:8f:7e:31:c3:
71:ad:e5:b4:41:32:d6:e8:9f:e0:24:6a:4a:b1:7d:88:93:70:
5b:a6:40:00:fd:d3:e9:77:31:11:7f:94:26:0e:fc:bd:06:80:
86:f0:cc:91:08:44:7e:fc:68:35:53:84:42:da:a9:dd:7d:d2:
90:0d:17:f2:5b:f9:cf:ba:e4:4a:73:f0:6a:0c:ff:3c:2d:95:
51:48:7f:fb:05:30:da:3a:10:e7:3d:08:be:2e:00:16:d8:47:
ed:27:9f:b3:fe:1f:7c:d9:dd:9a:81:1c:d0:ca:5b:55:06:88:
70:8a:89:50:c9:d9:dd:c2:ac:a1:ea:fd:50:23:c1:44:c7:ee:
06:e6:9a:14:7e:e1:37:bc:56:f2:a8:5e:d3:14:ac:04:f1:e6:
dd:55:23:48:1b:7a:7e:67:90:99:14:0f:b2:01:13:c1:e2:fe:
3a:57:73:21:f5:c8:91:b3:aa:39:8a:b3:99:96:af:09:8b:ee:
fa:d0:c9:af:22:9d:50:fa:56:54:31:23:a0:91:76:39:ba:e7:
b3:2e:a2:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhqeL/awuZY0LFCUIGfcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmIwMDM4MWU3MzNkYzZlNDFkMDZkYjllYzhkZGQzMTEy
ODFiZGQwHhcNMjUxMTA0MTEwMDM4WhcNMjUxMTA1MTEwMDM4WjAzMTEwLwYDVQQD
Eyg1ZmZiZjQyMjFiMzA0MzBjYjE5ZjhlODI3ODhmMTg0MTljYmRhM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCFXPshfaWSE08Y6XIaUAO1SOAKY
8DjTjf/daYXN79vGSezsazI25xrio+k3EE6eSnLXCvBVKJQn/qsaTJg26FylPfJi
/z6tnHdooDOUkJKkBRUpxvAlzqwOv6/Tr6GC/19n8ZYXGe3z1/WWz6dyhh/b5eAU
A6GUbMtq38YR3Xzz2nMhwF4FwcV4CthOHhPynzvwIBsezFSHRQEix/qzxCOQhVfy
2DRq/6ArSpWnsn6/nsFLAiZ7HZYbNzMD4h9QdNysOnKyxrcJCBwFd+bDFC8AXioA
cx5u54wmTRqi6eP9rYIHo4kL9TfH9OHVWSPDv5fXsoJXe23WMgBrly4/YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/79CIbMEMMsZ+OgniPGEGcvaPtMB8GA1UdIwQY
MBaAFOz7ADgecz3G5B0G257I3dMRKBvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEt
NTgzNjZlOThhOWU2LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEtNTgzNjZlOThhOWU2
LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEGI3j1v
1H1ZPwDduljF0ymQ/nnFOlJAW9rj05H7+5M5PD7EZ5kQqBkMYgAh+LuqXqyPfjHD
ca3ltEEy1uif4CRqSrF9iJNwW6ZAAP3T6XcxEX+UJg78vQaAhvDMkQhEfvxoNVOE
Qtqp3X3SkA0X8lv5z7rkSnPwagz/PC2VUUh/+wUw2joQ5z0Ivi4AFthH7Sefs/4f
fNndmoEc0MpbVQaIcIqJUMnZ3cKsoer9UCPBRMfuBuaaFH7hN7xW8qhe0xSsBPHm
3VUjSBt6fmeQmRQPsgETweL+OldzIfXIkbOqOYqzmZavCYvu+tDJryKdUPpWVDEj
oJF2Obrnsy6iRg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:40 2025 by rpki-client