Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: Sgzjwq0/QTKDukcJyE6Xb8Tn0OQ5djv0/oE9L1ST7vs=
Subject key identifier: B9:FA:F2:78:2E:2E:23:98:55:1B:C5:8B:67:9E:26:D8:94:E4:6C:C8
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 019A2930E2037F1F8DD5B9EB62D78A66AE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 0656
Signing time: Tue 28 Oct 2025 05:01:00 +0000
Manifest this update: Tue 28 Oct 2025 05:01:00 +0000
Manifest next update: Wed 29 Oct 2025 05:01:00 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: HMe9eelk/9HukMfhmLogQVBUMT2QVfvseUElGn7eA3U=)
2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:e2:03:7f:1f:8d:d5:b9:eb:62:d7:8a:66:ae:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Oct 28 05:01:00 2025 GMT
Not After : Oct 29 05:01:00 2025 GMT
Subject: CN=b9faf2782e2e2398551bc58b679e26d894e46cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:49:5f:3e:50:7d:98:02:7d:84:88:a0:31:
d8:d4:bd:14:2b:62:46:72:ed:65:ef:fb:e0:98:a1:
b1:ed:e8:08:b3:d5:8c:de:aa:3d:f9:75:99:d6:3a:
99:05:83:97:95:23:10:b3:26:61:47:7e:33:41:b4:
77:7b:2f:c1:aa:24:7d:cf:ae:32:a0:ad:5c:34:f1:
cf:eb:59:2c:38:2f:8d:70:64:41:4c:8d:ec:ef:b7:
a0:d9:3a:55:87:a8:97:de:62:0c:6b:e9:4c:c5:42:
4b:65:ab:48:5b:43:55:05:03:ba:bb:a6:24:d5:b7:
88:25:0f:99:3d:dc:97:2a:0b:f8:80:31:be:91:d4:
1b:c3:13:0d:a4:69:d1:1b:d3:42:ea:64:eb:e4:19:
e4:f7:70:09:56:13:a1:43:49:8b:99:93:ac:f8:74:
63:d0:45:c2:12:7c:65:f0:4b:f9:ee:ac:91:55:df:
f7:bd:10:e2:9a:be:a0:36:d1:6a:00:5f:48:3e:82:
25:07:8b:5b:5b:7a:75:b8:b7:a2:e7:4e:7a:2a:38:
2a:f6:c4:a9:0e:dc:51:c9:1f:c5:65:fc:2f:d7:2d:
97:24:7d:39:d5:2a:84:a8:f4:df:9e:bd:31:4c:07:
f0:09:ed:1e:48:db:a3:ad:88:cc:ae:7f:5d:70:be:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:F2:78:2E:2E:23:98:55:1B:C5:8B:67:9E:26:D8:94:E4:6C:C8
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ed:ff:9f:01:3c:e3:51:ad:84:e4:60:6d:92:f8:54:54:25:
62:46:f7:fe:ab:e5:8a:44:44:44:1f:b3:bc:2f:f8:98:ba:40:
de:e8:76:cb:4a:32:07:f7:74:60:e7:a3:db:d3:35:f6:87:87:
3a:8e:f6:f3:8f:01:65:40:ac:ca:7a:83:68:2b:a0:bd:05:6d:
ef:4f:34:85:f8:28:88:5d:c9:11:a1:81:f8:6b:e7:9b:2a:0d:
8e:32:aa:c0:ee:94:13:4c:99:65:af:fa:b5:71:0b:d4:c4:4c:
c2:54:28:c7:26:96:12:59:14:b4:f8:50:8e:46:e4:15:b5:b6:
e1:cd:66:b9:ba:79:c1:6c:b2:ea:07:33:01:60:38:fe:29:39:
4d:52:69:9e:6f:e9:d0:27:69:37:e5:b5:80:07:26:08:d3:21:
29:61:a6:21:11:a3:28:ee:92:21:56:28:96:01:33:ab:4a:84:
ec:28:02:c2:32:59:20:e8:f8:bd:a6:b3:f6:7b:95:ac:5a:36:
a7:31:9e:39:c4:af:62:23:34:1a:72:c1:44:d1:5d:93:0c:aa:
0e:e7:a5:7f:f1:61:42:73:8d:b3:e8:1f:9e:34:49:5e:18:c1:
a4:c7:49:14:17:10:b4:40:39:19:67:a7:23:36:20:95:63:26:
0b:b5:9a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopMOIDfx+N1bnrYteKZq5tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmE4ZWMwM2VlYzNiY2ZjMzNjZjkwZjFmNGY4ZTdlOTAy
MzRlNjkwHhcNMjUxMDI4MDUwMTAwWhcNMjUxMDI5MDUwMTAwWjAzMTEwLwYDVQQD
EyhiOWZhZjI3ODJlMmUyMzk4NTUxYmM1OGI2NzllMjZkODk0ZTQ2Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol5JXz5QfZgCfYSIoDHY1L0UK2JG
cu1l7/vgmKGx7egIs9WM3qo9+XWZ1jqZBYOXlSMQsyZhR34zQbR3ey/BqiR9z64y
oK1cNPHP61ksOC+NcGRBTI3s77eg2TpVh6iX3mIMa+lMxUJLZatIW0NVBQO6u6Yk
1beIJQ+ZPdyXKgv4gDG+kdQbwxMNpGnRG9NC6mTr5Bnk93AJVhOhQ0mLmZOs+HRj
0EXCEnxl8Ev57qyRVd/3vRDimr6gNtFqAF9IPoIlB4tbW3p1uLei5056Kjgq9sSp
DtxRyR/FZfwv1y2XJH051SqEqPTfnr0xTAfwCe0eSNujrYjMrn9dcL77EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn68nguLiOYVRvFi2eeJtiU5GzIMB8GA1UdIwQY
MBaAFO8qjsA+7DvPwzz5Dx9Pjn6QI05pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUt
MDVjMDY3OTZlOTM4LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUtMDVjMDY3OTZlOTM4
LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+3/nwE8
41GthORgbZL4VFQlYkb3/qvlikRERB+zvC/4mLpA3uh2y0oyB/d0YOej29M19oeH
Oo72848BZUCsynqDaCugvQVt7080hfgoiF3JEaGB+GvnmyoNjjKqwO6UE0yZZa/6
tXEL1MRMwlQoxyaWElkUtPhQjkbkFbW24c1mubp5wWyy6gczAWA4/ik5TVJpnm/p
0CdpN+W1gAcmCNMhKWGmIRGjKO6SIVYolgEzq0qE7CgCwjJZIOj4vaaz9nuVrFo2
pzGeOcSvYiM0GnLBRNFdkwyqDuelf/FhQnONs+gfnjRJXhjBpMdJFBcQtEA5GWen
IzYglWMmC7Wa9g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 09:23:28 2025 by rpki-client