Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: 72GfLdQOeZxfPpdbmee1oUe8Ti741XeKCTJzAdR0IXc=
Subject key identifier: B6:10:93:3F:4A:41:BC:AA:89:BB:03:26:87:C9:56:A4:F5:70:65:BA
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 019A71B88A566832C9E9CEF299BA990BDDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: 9QJf6nQoO3OR/rNf5BJV784MOCwmr0foWtooHLdGAT8=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8a:56:68:32:c9:e9:ce:f2:99:ba:99:0b:dd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=b610933f4a41bcaa89bb032687c956a4f57065ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:a8:4b:ae:42:ad:e0:c7:89:3d:b4:5e:ec:
d3:70:26:34:7c:57:b1:98:14:69:4b:7f:71:e4:db:
26:1e:b9:d4:60:4c:11:ba:5a:c6:47:96:78:0c:f1:
53:65:0a:91:57:37:86:71:a0:b1:7e:7d:3a:a2:32:
6d:95:9c:02:c5:be:27:44:2b:0f:2a:fc:ea:56:05:
20:ca:10:9d:7f:04:eb:55:7a:30:65:a8:30:88:b5:
da:82:75:40:c1:3d:dd:1c:89:cb:32:d1:d2:ef:79:
1a:47:7b:1a:d0:15:76:df:e2:f2:30:4f:42:a7:be:
01:4d:a6:dd:d6:f8:4b:b5:3f:ac:54:7e:4e:ad:9e:
9f:1d:13:17:5b:5f:a0:e3:01:e2:e0:8a:01:3d:f0:
6e:15:59:4f:eb:06:5e:61:97:a5:63:7a:e3:56:16:
e8:e4:40:13:23:77:0c:c8:06:4d:03:7e:81:6c:24:
ea:7a:c5:d8:01:5a:4f:ab:fe:23:2e:d6:bc:18:64:
8d:3a:dc:e6:37:ff:54:0e:ee:a4:72:43:f3:1a:24:
7c:55:84:15:4e:20:3c:bd:9a:7f:ab:ea:ab:60:16:
64:a8:22:2e:54:96:c7:8c:a7:3c:76:9b:4f:ec:f4:
2f:64:8c:cf:e8:0e:df:f6:90:21:52:88:08:df:67:
5e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:93:3F:4A:41:BC:AA:89:BB:03:26:87:C9:56:A4:F5:70:65:BA
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:dc:13:07:90:05:1d:d7:3b:b7:90:10:ef:0c:56:fd:7c:1f:
82:a0:5c:8d:54:22:16:95:3a:5f:97:1e:9c:55:3e:1f:5d:63:
34:7b:df:b6:16:f5:2b:7e:91:a1:65:b4:ec:ef:3b:3b:16:12:
0b:f4:b9:a3:a9:56:c7:fe:61:99:b4:fb:06:71:b6:8d:3d:d8:
bc:0e:dd:32:83:cd:e3:4a:dd:55:43:68:0f:ba:c8:72:bf:2c:
73:27:9f:64:34:f5:03:79:1d:b0:d6:d5:3f:52:12:5b:f9:4b:
4e:95:c5:2a:47:da:24:df:06:64:ff:ad:a7:26:26:1a:8d:11:
ef:83:09:a8:75:64:b3:dc:0b:24:01:23:bb:8c:97:7c:2a:e4:
c9:21:b4:3c:92:75:fc:5f:e5:c8:86:7f:39:96:bf:20:9b:08:
17:9c:ef:0e:48:b0:e7:57:23:5d:7b:9f:cf:35:57:81:6b:52:
d9:b2:f9:eb:8f:5f:d1:22:2d:43:d0:54:84:08:37:2a:8d:dc:
06:f0:f8:ae:57:3a:b8:3e:c2:39:50:ee:07:89:7d:47:c0:47:
85:6f:cd:51:aa:c3:b3:0c:9e:5c:c7:a9:3b:d5:b5:9b:2d:ae:
ba:2f:f4:45:83:ed:e6:fa:45:cf:3c:7a:4e:03:25:c9:0b:5d:
78:dd:9e:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIpWaDLJ6c7ymbqZC93MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOTU1MzNlZjQ3ZmQ5NGI4YzU1NGRmM2QyMjhlZWRjZDRj
YTAzODQwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
EyhiNjEwOTMzZjRhNDFiY2FhODliYjAzMjY4N2M5NTZhNGY1NzA2NWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4uoS65CreDHiT20XuzTcCY0fFex
mBRpS39x5NsmHrnUYEwRulrGR5Z4DPFTZQqRVzeGcaCxfn06ojJtlZwCxb4nRCsP
KvzqVgUgyhCdfwTrVXowZagwiLXagnVAwT3dHInLMtHS73kaR3sa0BV23+LyME9C
p74BTabd1vhLtT+sVH5OrZ6fHRMXW1+g4wHi4IoBPfBuFVlP6wZeYZelY3rjVhbo
5EATI3cMyAZNA36BbCTqesXYAVpPq/4jLta8GGSNOtzmN/9UDu6kckPzGiR8VYQV
TiA8vZp/q+qrYBZkqCIuVJbHjKc8dptP7PQvZIzP6A7f9pAhUogI32dekwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYQkz9KQbyqibsDJofJVqT1cGW6MB8GA1UdIwQY
MBaAFO2VUz70f9lLjFVN89Io7tzUygOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUt
MTRkYTc5ZDZjM2FhLzEvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83YTA0MjMtOWE5NS00MmMxLTgxZTUtMTRkYTc5ZDZjM2Fh
LzEvN1pWVFB2Ul8yVXVNVlUzejBpanUzTlRLQTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENwTB5AF
Hdc7t5AQ7wxW/XwfgqBcjVQiFpU6X5cenFU+H11jNHvfthb1K36RoWW07O87OxYS
C/S5o6lWx/5hmbT7BnG2jT3YvA7dMoPN40rdVUNoD7rIcr8scyefZDT1A3kdsNbV
P1ISW/lLTpXFKkfaJN8GZP+tpyYmGo0R74MJqHVks9wLJAEju4yXfCrkySG0PJJ1
/F/lyIZ/OZa/IJsIF5zvDkiw51cjXXufzzVXgWtS2bL5649f0SItQ9BUhAg3Ko3c
BvD4rlc6uD7COVDuB4l9R8BHhW/NUarDswyeXMepO9W1my2uui/0RYPt5vpFzzx6
TgMlyQtdeN2eBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:21 2025 by rpki-client