Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: aRBPtrNb3lh6rCc3NcDayjHK5jro8c7KmnUX9vRpYUI=
Subject key identifier: A7:17:69:72:D3:9E:86:A2:87:2A:96:46:66:13:67:DB:E6:5F:D7:4D
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 019A0748E41FFDA5A4F8EAA727C53F1381DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 0487
Signing time: Tue 21 Oct 2025 15:00:08 +0000
Manifest this update: Tue 21 Oct 2025 15:00:08 +0000
Manifest next update: Wed 22 Oct 2025 15:00:08 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: IvkA8S6gqNgCISdei9W9Y/bFTRM6UFOJJoIhkf0j2+M=)
2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:48:e4:1f:fd:a5:a4:f8:ea:a7:27:c5:3f:13:81:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Oct 21 15:00:08 2025 GMT
Not After : Oct 22 15:00:08 2025 GMT
Subject: CN=a7176972d39e86a2872a9646661367dbe65fd74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:be:4d:14:79:0f:04:13:07:ca:29:1f:f3:
11:e9:ef:90:d4:12:7e:e5:ad:02:1f:b7:14:01:78:
95:9e:98:fd:9d:f3:61:fe:fe:d0:55:d9:a6:22:0b:
9a:02:be:33:f5:fe:2d:2f:a8:19:83:50:9b:8b:02:
85:47:07:55:38:cb:99:7c:c5:c4:e7:43:18:5b:37:
66:64:e2:36:f0:a9:94:56:54:bb:ad:05:97:0b:d0:
c8:cb:d5:fb:46:e6:3f:93:a1:3e:02:48:99:66:bd:
1d:ed:7b:7b:78:04:2b:34:d8:75:18:4e:4f:a0:62:
f2:99:f2:a1:90:f5:24:00:a9:a5:0c:f9:f3:fe:79:
71:81:23:1a:09:d3:d2:32:4a:bc:a1:bc:f7:55:29:
b3:72:25:c8:7e:76:7d:ee:96:f6:e4:e7:89:ca:d3:
05:e1:4c:1e:ac:9d:aa:f6:5f:b4:5a:34:0d:18:3c:
cd:93:b6:2d:a2:68:55:90:21:e0:6d:62:77:02:70:
d6:c4:b0:a2:1c:59:71:c0:8c:ed:b1:6c:40:74:50:
f1:28:13:d0:e4:e3:a6:07:4e:55:c4:50:4c:8f:e3:
4e:03:80:ca:aa:01:df:ad:73:f3:83:34:e0:15:ec:
15:a7:ec:60:7b:35:bf:64:68:04:a8:99:35:95:cd:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:69:72:D3:9E:86:A2:87:2A:96:46:66:13:67:DB:E6:5F:D7:4D
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f9:e3:a6:d2:2e:e5:32:20:2a:16:1d:ea:f5:19:98:10:1d:
88:fe:8d:04:ab:a7:3e:ee:d1:b9:9c:a1:4e:53:23:95:e8:09:
fb:ca:7d:f4:4d:44:72:3c:ac:59:54:ac:6e:f3:46:f2:26:1c:
56:ab:11:6d:06:97:1e:02:b1:32:a0:8a:1d:29:05:a6:2e:aa:
c6:16:0e:ec:32:c7:4a:67:7b:5a:4d:57:a8:d7:cf:92:87:e9:
c9:bb:92:ab:28:5d:c0:7c:62:ec:ac:2e:26:2a:48:61:60:42:
2f:77:a9:87:02:17:43:6c:dc:76:24:e4:30:21:0d:29:54:9a:
be:d9:e3:fa:44:db:ca:84:d7:34:5f:04:4f:c9:84:39:7d:11:
cd:ea:bb:e6:58:91:92:72:07:5c:55:a5:56:ee:f3:f5:68:9b:
c7:df:ff:78:c6:a8:e5:f6:8c:50:32:9c:2c:ab:f2:50:be:6c:
f3:12:a3:99:55:c3:83:d6:12:cb:b4:90:48:96:49:96:7b:30:
ad:9c:ef:90:2e:33:59:df:ff:a5:c3:70:85:dd:92:0e:4a:db:
9a:fa:4e:ce:dc:1e:d4:d9:81:52:c9:63:0a:3b:a1:48:91:79:
22:a0:aa:1c:cf:6c:a9:be:75:2a:82:77:b1:80:90:78:de:61:
13:cf:9e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHSOQf/aWk+OqnJ8U/E4HdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1
MzY5ZjYwHhcNMjUxMDIxMTUwMDA4WhcNMjUxMDIyMTUwMDA4WjAzMTEwLwYDVQQD
EyhhNzE3Njk3MmQzOWU4NmEyODcyYTk2NDY2NjEzNjdkYmU2NWZkNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP++TRR5DwQTB8opH/MR6e+Q1BJ+
5a0CH7cUAXiVnpj9nfNh/v7QVdmmIguaAr4z9f4tL6gZg1CbiwKFRwdVOMuZfMXE
50MYWzdmZOI28KmUVlS7rQWXC9DIy9X7RuY/k6E+AkiZZr0d7Xt7eAQrNNh1GE5P
oGLymfKhkPUkAKmlDPnz/nlxgSMaCdPSMkq8obz3VSmzciXIfnZ97pb25OeJytMF
4UwerJ2q9l+0WjQNGDzNk7YtomhVkCHgbWJ3AnDWxLCiHFlxwIztsWxAdFDxKBPQ
5OOmB05VxFBMj+NOA4DKqgHfrXPzgzTgFewVp+xgezW/ZGgEqJk1lc1cSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcXaXLTnoaihyqWRmYTZ9vmX9dNMB8GA1UdIwQY
MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt
MmY5MDU5YzRmM2E1LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1
LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPnjptIu
5TIgKhYd6vUZmBAdiP6NBKunPu7RuZyhTlMjlegJ+8p99E1EcjysWVSsbvNG8iYc
VqsRbQaXHgKxMqCKHSkFpi6qxhYO7DLHSmd7Wk1XqNfPkofpybuSqyhdwHxi7Kwu
JipIYWBCL3ephwIXQ2zcdiTkMCENKVSavtnj+kTbyoTXNF8ET8mEOX0Rzeq75liR
knIHXFWlVu7z9Wibx9//eMao5faMUDKcLKvyUL5s8xKjmVXDg9YSy7SQSJZJlnsw
rZzvkC4zWd//pcNwhd2SDkrbmvpOztwe1NmBUsljCjuhSJF5IqCqHM9sqb51KoJ3
sYCQeN5hE8+eGg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:42:46 2025 by rpki-client