Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: IUUaVG8Wbq0araRgTTlXEcslTguq4KL2UnnRYjp6wIk=
Subject key identifier: 82:75:60:1A:25:42:DC:A9:51:07:1E:2C:D9:7A:BB:CA:F1:AA:DB:53
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 0199D43866E5F3BDA1778711DBA4421194FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0ADB
Signing time: Sat 11 Oct 2025 17:01:30 +0000
Manifest this update: Sat 11 Oct 2025 17:01:30 +0000
Manifest next update: Sun 12 Oct 2025 17:01:30 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: N8CH4IqKXObLSjP++9iy8NCnoetfDxjy29+C6K8/oE8=)
2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:38:66:e5:f3:bd:a1:77:87:11:db:a4:42:11:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Oct 11 17:01:30 2025 GMT
Not After : Oct 12 17:01:30 2025 GMT
Subject: CN=8275601a2542dca951071e2cd97abbcaf1aadb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:aa:6b:d5:2d:63:40:f9:68:47:c3:e7:a9:
e6:3b:87:70:2c:f4:d2:1d:d4:71:aa:4f:18:4d:b6:
8f:54:b8:b8:45:77:a5:83:fd:1a:5c:24:66:5d:81:
56:24:35:bf:91:9e:27:c8:b7:35:39:96:61:95:62:
7a:41:c0:4c:2e:98:a6:2b:38:73:22:a2:b0:ec:79:
57:6f:94:dd:a0:31:33:e7:34:c4:66:dc:71:e9:a3:
c7:49:b0:8a:2b:3a:77:df:c8:59:7e:42:f7:20:bb:
68:7c:77:bf:fc:cd:01:5e:7f:90:81:43:b2:dd:5c:
7e:7e:e1:ff:df:cd:f8:90:64:7c:44:6a:08:de:11:
f3:46:78:ce:55:14:73:f1:63:ae:9e:2b:9e:d2:51:
ad:f1:af:d3:69:ce:1a:f4:07:23:22:1c:bd:aa:2f:
13:82:44:35:90:61:94:f8:bb:7b:73:de:e4:c0:06:
10:71:c6:41:33:ef:d9:c7:77:38:62:8e:15:aa:d1:
db:77:29:da:0a:b6:ca:17:04:82:d9:1e:0e:3c:5e:
12:6b:fd:33:f5:35:1f:e7:56:55:88:05:69:e7:7e:
79:f5:6b:c7:be:c4:c7:07:3b:d1:92:7e:f2:a4:60:
70:52:5a:00:a4:aa:b6:a6:e0:ef:7e:48:04:6b:03:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:75:60:1A:25:42:DC:A9:51:07:1E:2C:D9:7A:BB:CA:F1:AA:DB:53
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fe:8b:1f:7a:d2:1d:10:de:64:1c:98:fa:c6:b2:7e:b8:cf:
1f:43:4e:12:eb:95:39:96:f4:75:b4:79:28:ff:2e:ae:ee:77:
e5:10:fa:c9:3c:02:89:30:41:e1:4a:ea:e7:1d:8c:69:d2:ff:
d9:47:5d:97:3b:8d:3c:a8:31:e6:00:88:dc:4a:96:f5:a5:97:
3c:72:a1:01:30:cf:fc:6e:ce:7a:ba:9c:a0:a7:b5:b7:fd:7e:
cd:50:bb:ad:cf:34:9d:a0:c6:19:3c:30:cd:91:63:0d:cc:8c:
71:90:9d:60:70:42:3b:e9:6c:13:1d:88:e6:75:8f:f8:a0:e3:
40:bc:ba:c8:16:26:8b:73:22:a8:a8:bf:3b:c3:5c:17:64:1a:
0f:a1:d2:94:87:c4:e6:68:8f:b2:d5:ed:0a:57:66:40:35:4f:
c1:3b:f7:9a:83:0f:9c:5f:47:75:18:65:8a:40:ce:05:47:a8:
de:d8:6d:37:f2:c0:6b:03:f6:72:86:fc:60:91:01:07:a1:c9:
ae:42:6a:3d:60:62:91:b9:bd:41:19:50:ac:ce:b2:07:14:84:
00:ee:8b:3e:0f:e7:8a:6e:c0:da:fe:19:5d:0f:6b:98:42:0c:
d4:d0:e4:06:83:d0:fa:4b:91:84:9b:ad:11:9e:61:f8:83:68:
4e:29:f1:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnUOGbl872hd4cR26RCEZT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm
ZThlYWEwHhcNMjUxMDExMTcwMTMwWhcNMjUxMDEyMTcwMTMwWjAzMTEwLwYDVQQD
Eyg4Mjc1NjAxYTI1NDJkY2E5NTEwNzFlMmNkOTdhYmJjYWYxYWFkYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9uqa9UtY0D5aEfD56nmO4dwLPTS
HdRxqk8YTbaPVLi4RXelg/0aXCRmXYFWJDW/kZ4nyLc1OZZhlWJ6QcBMLpimKzhz
IqKw7HlXb5TdoDEz5zTEZtxx6aPHSbCKKzp338hZfkL3ILtofHe//M0BXn+QgUOy
3Vx+fuH/3834kGR8RGoI3hHzRnjOVRRz8WOuniue0lGt8a/Tac4a9AcjIhy9qi8T
gkQ1kGGU+Lt7c97kwAYQccZBM+/Zx3c4Yo4VqtHbdynaCrbKFwSC2R4OPF4Sa/0z
9TUf51ZViAVp53559WvHvsTHBzvRkn7ypGBwUloApKq2puDvfkgEawPMjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ1YBolQtypUQceLNl6u8rxqttTMB8GA1UdIwQY
MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt
Y2M2NGQxM2E2MTJjLzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj
LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqP6LH3rS
HRDeZByY+sayfrjPH0NOEuuVOZb0dbR5KP8uru535RD6yTwCiTBB4Urq5x2MadL/
2UddlzuNPKgx5gCI3EqW9aWXPHKhATDP/G7OerqcoKe1t/1+zVC7rc80naDGGTww
zZFjDcyMcZCdYHBCO+lsEx2I5nWP+KDjQLy6yBYmi3MiqKi/O8NcF2QaD6HSlIfE
5miPstXtCldmQDVPwTv3moMPnF9HdRhlikDOBUeo3thtN/LAawP2cob8YJEBB6HJ
rkJqPWBikbm9QRlQrM6yBxSEAO6LPg/nim7A2v4ZXQ9rmEIM1NDkBoPQ+kuRhJut
EZ5h+INoTinxrw==
-----END CERTIFICATE-----
Generated at Sun Oct 12 02:46:37 2025 by rpki-client