Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: XEuDQLd/r/lx1LSqabzxlJZzOg5BwZtqeUVAPVNRydU=
Subject key identifier: B4:B9:52:C6:64:5D:EF:50:E8:98:B3:0A:8F:AA:D7:B6:68:CB:EC:42
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019A1EACF38CF50595DACE26257DCF2461CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 15AA
Signing time: Sun 26 Oct 2025 04:00:42 +0000
Manifest this update: Sun 26 Oct 2025 04:00:42 +0000
Manifest next update: Mon 27 Oct 2025 04:00:42 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: hl8vz/ZUl6sRdaZjSd5SOpMr/kMC1UufcXXM2z9IW74=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:f3:8c:f5:05:95:da:ce:26:25:7d:cf:24:61:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Oct 26 04:00:42 2025 GMT
Not After : Oct 27 04:00:42 2025 GMT
Subject: CN=b4b952c6645def50e898b30a8faad7b668cbec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:74:1c:28:ce:da:8a:3a:66:98:96:1c:66:5d:
c6:9c:14:44:d0:a7:b9:3f:0a:81:00:49:39:d9:35:
b5:fe:06:a8:ab:a7:74:01:8f:4b:2e:28:7e:9e:98:
5b:19:95:d3:47:be:9f:53:7e:37:b1:13:d6:60:45:
30:99:6b:f1:bb:0f:91:63:ee:44:54:8a:a3:14:50:
87:f3:e9:e4:d0:4e:c1:8e:22:e9:00:49:c5:f1:25:
e4:a9:b7:dd:2d:b9:82:32:b2:b5:62:a6:fb:10:6d:
0d:01:f0:02:b1:e4:e9:42:88:b6:ce:a4:ec:33:7e:
1f:63:28:fe:ed:eb:cb:8e:28:2f:42:7a:1e:68:3d:
8c:47:c0:35:5c:ea:3a:d3:c3:ce:9d:2b:f4:fa:3c:
d8:29:c9:7d:c5:2b:77:15:f3:e6:3b:4c:24:f3:de:
a1:52:e7:7f:16:c8:3e:1a:d8:ba:31:84:bb:6e:8f:
28:30:aa:47:51:6c:bc:e3:4c:fc:78:27:52:4e:a8:
5b:d2:10:02:36:23:4a:ef:18:a3:8b:ed:a5:60:71:
a8:9f:fb:10:a3:99:c2:b7:b7:21:95:da:0a:98:75:
8d:fd:0c:04:16:6c:9d:b0:09:86:d0:56:b7:89:4f:
02:aa:7e:0d:37:cb:c0:c3:2e:03:c2:87:b5:90:c7:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:52:C6:64:5D:EF:50:E8:98:B3:0A:8F:AA:D7:B6:68:CB:EC:42
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:06:f8:05:2c:85:ee:8e:f1:54:ec:e9:c0:61:9f:e5:79:6b:
61:88:60:80:77:7a:72:fc:b8:eb:49:59:f2:d1:a8:8f:82:57:
b7:21:37:e1:a8:28:4c:f8:00:14:6c:b0:2c:e8:37:bd:82:0b:
87:7e:0c:75:47:57:c2:bb:14:6d:b0:ec:8c:8d:42:4f:24:d6:
37:05:70:c1:d5:89:6e:66:4c:1a:a6:eb:3d:44:c4:2b:90:6b:
26:dc:44:1e:8d:bb:25:11:37:32:6d:dc:53:13:6d:d0:46:bc:
b2:5a:22:67:d8:e9:d3:2f:80:94:1f:8b:ea:38:cf:df:6f:dd:
c5:d1:9b:fc:f5:74:08:7c:00:e8:83:c6:dd:d3:4e:af:49:3a:
88:bb:d9:3a:1c:de:f7:c1:df:8a:6b:5c:fb:e0:1e:b3:07:a9:
1a:67:67:e9:5a:98:f6:d1:04:07:a7:50:17:1a:36:da:36:ed:
a4:c8:a2:6e:33:e9:d3:7f:ed:8d:f5:39:32:6b:87:55:65:b5:
76:c9:d3:81:83:9d:40:5a:e1:fb:bc:ef:51:5d:a1:a7:84:48:
c3:3a:3a:cf:f9:10:4c:c2:fe:d9:90:25:f7:a6:21:1b:19:41:
1e:a5:9c:46:cf:fc:5f:cf:1a:b2:12:25:8c:70:bf:32:e2:93:
dc:70:a6:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerPOM9QWV2s4mJX3PJGHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDViM2FmMDA2NDk4MWU5NmJiNWUyN2Q4ZjA0ZDg2ZTYz
MDZjZmEwHhcNMjUxMDI2MDQwMDQyWhcNMjUxMDI3MDQwMDQyWjAzMTEwLwYDVQQD
EyhiNGI5NTJjNjY0NWRlZjUwZTg5OGIzMGE4ZmFhZDdiNjY4Y2JlYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nQcKM7aijpmmJYcZl3GnBRE0Ke5
PwqBAEk52TW1/gaoq6d0AY9LLih+nphbGZXTR76fU343sRPWYEUwmWvxuw+RY+5E
VIqjFFCH8+nk0E7BjiLpAEnF8SXkqbfdLbmCMrK1Yqb7EG0NAfACseTpQoi2zqTs
M34fYyj+7evLjigvQnoeaD2MR8A1XOo608POnSv0+jzYKcl9xSt3FfPmO0wk896h
Uud/Fsg+Gti6MYS7bo8oMKpHUWy840z8eCdSTqhb0hACNiNK7xiji+2lYHGon/sQ
o5nCt7chldoKmHWN/QwEFmydsAmG0Fa3iU8Cqn4NN8vAwy4Dwoe1kMftrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS5UsZkXe9Q6JizCo+q17Zoy+xCMB8GA1UdIwQY
MBaAFO7Vs68AZJgelrteJ9jwTYbmMGz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAt
MDMwYWNkM2FlMzM2LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAtMDMwYWNkM2FlMzM2
LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwb4BSyF
7o7xVOzpwGGf5XlrYYhggHd6cvy460lZ8tGoj4JXtyE34agoTPgAFGywLOg3vYIL
h34MdUdXwrsUbbDsjI1CTyTWNwVwwdWJbmZMGqbrPUTEK5BrJtxEHo27JRE3Mm3c
UxNt0Ea8sloiZ9jp0y+AlB+L6jjP32/dxdGb/PV0CHwA6IPG3dNOr0k6iLvZOhze
98Hfimtc++AeswepGmdn6VqY9tEEB6dQFxo22jbtpMiibjPp03/tjfU5MmuHVWW1
dsnTgYOdQFrh+7zvUV2hp4RIwzo6z/kQTML+2ZAl96YhGxlBHqWcRs/8X88ashIl
jHC/MuKT3HCmLw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:09:17 2025 by rpki-client