Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: CGHmhdvF7g2D1Yar6GUD6qwojFd514h43UOnRzHNKiM=
Subject key identifier: 9C:F2:B5:1E:07:F9:07:3B:07:19:EF:EA:B6:40:B4:89:82:E4:99:93
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 019A4E189F121F1D737A27AC570C048A1E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: Z288N3LxJOoEw4bplXk4GGBR7K7cuEgcjYv9wojY8rM=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9f:12:1f:1d:73:7a:27:ac:57:0c:04:8a:1e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=9cf2b51e07f9073b0719efeab640b48982e49993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:bb:1a:7d:52:c6:fe:eb:89:a7:ce:03:d9:
9c:8d:56:54:dc:2b:13:f1:7b:89:d5:ac:10:00:b1:
15:39:e9:dd:7a:8f:e9:66:5c:37:1b:48:81:36:91:
c9:cd:54:f5:ea:46:5b:cd:23:a7:14:7c:32:3b:ca:
9c:16:1e:97:b5:10:2c:2e:1f:de:13:39:6f:65:02:
80:f9:ac:ec:fe:56:00:ad:1d:da:14:d3:e8:64:1d:
41:6a:e5:e0:c0:81:87:b2:1e:30:6d:34:52:c1:5a:
b2:d5:19:44:e2:59:fd:25:13:c3:d7:25:9c:89:a9:
5c:af:77:f4:60:e3:9c:a1:b6:09:0a:88:c4:1d:ed:
6f:c3:07:5c:ac:ce:2e:b0:7e:be:b9:82:e2:fd:90:
c0:00:2b:80:6d:b0:8f:b6:32:64:20:c7:c2:8f:1c:
3c:c5:08:2a:e0:c0:01:6c:43:4c:f3:88:81:d2:84:
56:f2:2f:ea:ff:88:21:bb:cf:c7:fb:45:e7:ee:b9:
09:dc:e2:fb:28:66:a1:c1:75:87:12:01:81:c3:be:
2e:be:55:b5:6e:a7:c0:52:db:2b:d0:e3:b8:70:8d:
1f:e3:d3:bb:5f:82:4f:17:7b:bc:93:0e:2e:3d:fc:
77:59:83:99:ba:68:f5:15:f2:7b:32:ce:30:5c:5a:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F2:B5:1E:07:F9:07:3B:07:19:EF:EA:B6:40:B4:89:82:E4:99:93
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:04:73:2c:5b:15:97:7a:38:4a:41:0e:f8:a7:35:5d:ac:3b:
2e:f3:bc:dd:82:62:a2:87:83:9b:56:9f:be:bd:71:58:25:e3:
5a:30:05:9a:42:85:4b:4e:6f:50:04:38:be:89:78:18:8d:65:
a6:e5:6b:e6:ab:74:c9:a5:f5:15:2c:ad:cb:f3:17:65:15:74:
46:d3:0a:ca:2a:33:36:8b:a7:fa:4b:5a:3e:a3:fb:85:d4:a5:
0b:2c:38:fc:68:c3:3b:02:4a:b4:56:ec:ec:0b:91:f0:ae:52:
bc:18:4e:f2:38:15:8f:96:37:d3:05:de:4b:49:14:7d:23:8c:
90:37:19:5b:42:17:ba:c2:4f:78:ad:9d:40:98:23:b5:82:37:
c8:24:d2:4f:e9:9b:d6:81:fc:37:7a:21:8b:38:44:4f:13:92:
68:eb:64:92:82:2b:16:2c:34:25:a6:e9:cb:0e:34:c3:9d:10:
3c:65:34:e9:9e:04:5a:ac:4a:70:c7:42:44:3f:5f:2e:76:68:
0c:15:41:cc:2a:2c:ee:5f:df:39:f6:42:64:47:a5:da:94:3b:
e3:5d:c4:86:95:f7:22:10:8a:e6:de:18:ec:30:cd:a3:2e:c0:
2e:f3:b5:9a:85:75:c9:67:d8:55:81:ef:73:bd:be:e6:06:ad:
85:e2:6d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGJ8SHx1zeiesVwwEih41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0
NTVhNTYwHhcNMjUxMTA0MDkwMDI3WhcNMjUxMTA1MDkwMDI3WjAzMTEwLwYDVQQD
Eyg5Y2YyYjUxZTA3ZjkwNzNiMDcxOWVmZWFiNjQwYjQ4OTgyZTQ5OTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgG7Gn1Sxv7riafOA9mcjVZU3CsT
8XuJ1awQALEVOendeo/pZlw3G0iBNpHJzVT16kZbzSOnFHwyO8qcFh6XtRAsLh/e
EzlvZQKA+azs/lYArR3aFNPoZB1BauXgwIGHsh4wbTRSwVqy1RlE4ln9JRPD1yWc
ialcr3f0YOOcobYJCojEHe1vwwdcrM4usH6+uYLi/ZDAACuAbbCPtjJkIMfCjxw8
xQgq4MABbENM84iB0oRW8i/q/4ghu8/H+0Xn7rkJ3OL7KGahwXWHEgGBw74uvlW1
bqfAUtsr0OO4cI0f49O7X4JPF3u8kw4uPfx3WYOZumj1FfJ7Ms4wXFrf7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzytR4H+Qc7Bxnv6rZAtImC5JmTMB8GA1UdIwQY
MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et
MjY4Y2VkODQzNWI1LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1
LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwRzLFsV
l3o4SkEO+Kc1Xaw7LvO83YJiooeDm1afvr1xWCXjWjAFmkKFS05vUAQ4vol4GI1l
puVr5qt0yaX1FSyty/MXZRV0RtMKyiozNoun+ktaPqP7hdSlCyw4/GjDOwJKtFbs
7AuR8K5SvBhO8jgVj5Y30wXeS0kUfSOMkDcZW0IXusJPeK2dQJgjtYI3yCTST+mb
1oH8N3ohizhETxOSaOtkkoIrFiw0Jabpyw40w50QPGU06Z4EWqxKcMdCRD9fLnZo
DBVBzCos7l/fOfZCZEel2pQ7413EhpX3IhCK5t4Y7DDNoy7ALvO1moV1yWfYVYHv
c72+5gatheJtVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:58 2025 by rpki-client