Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: jVkio0V8hh7b0wSzbP8am5OL9wgFjFgSTFAgQo/9nAY=
Subject key identifier: BD:98:22:24:34:6C:DB:D6:DA:55:17:1D:CA:4D:19:55:EA:05:62:25
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 019A706E2AD9DD7275B2CD77D962F6B1F547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 01:00:59 +0000
Manifest this update: Tue 11 Nov 2025 01:00:59 +0000
Manifest next update: Wed 12 Nov 2025 01:00:59 +0000
Files and hashes: 1: 4_25V1XttJ1qw5vFtRBIGOQ28e4.roa (hash: jrFE5OHsnZSV8YIte/QlrxAa0XpS7lb+A+yiq4ZHdDE=)
2: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: mkn+YxsXbIHpsM0IvzHivfTNBLf5O3nlCbyd9tNxG9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2a:d9:dd:72:75:b2:cd:77:d9:62:f6:b1:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Nov 11 01:00:59 2025 GMT
Not After : Nov 12 01:00:59 2025 GMT
Subject: CN=bd982224346cdbd6da55171dca4d1955ea056225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:85:3f:5b:7d:8d:1c:fd:c1:6a:aa:63:41:
aa:12:3f:68:38:fa:26:58:78:14:74:68:93:b5:ef:
b8:94:86:12:72:3c:88:ba:e1:ff:58:19:a4:fa:66:
e6:63:04:ec:00:42:7f:77:f6:40:c2:e5:fe:49:31:
fb:cd:b3:96:f3:82:c6:7b:51:7e:41:e1:36:e8:5e:
83:fc:d4:32:7a:23:fe:85:8e:e9:9d:26:b5:fe:a9:
41:65:0f:eb:4e:d7:95:3d:10:6d:55:e5:a5:93:de:
de:05:4a:9a:01:6f:6c:eb:90:07:10:e0:3d:68:fd:
c5:9c:23:eb:a0:e8:49:1e:73:da:0a:38:f5:4d:e0:
63:b5:21:dd:70:ff:7b:7b:c5:86:1e:dd:c1:f2:6b:
f8:51:35:d4:e9:f2:9f:7e:67:33:1f:7b:c7:dc:0e:
93:23:90:1a:30:db:ac:3a:1b:bf:c1:27:83:7c:6f:
33:c9:9b:0c:1f:80:5a:14:f7:a7:2b:8b:39:04:0f:
80:4e:c8:39:41:71:73:ca:ae:cc:6b:d6:a3:8f:55:
22:3d:8a:f5:62:7e:c2:6b:f4:a2:e8:15:20:2f:9d:
d5:09:ca:4a:50:b4:f1:23:32:40:8f:e5:53:8a:99:
79:32:62:2b:9c:61:07:9e:8f:8f:33:44:4d:02:60:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:98:22:24:34:6C:DB:D6:DA:55:17:1D:CA:4D:19:55:EA:05:62:25
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d0:7e:2e:56:04:c3:0b:56:1c:38:f0:85:0c:42:60:19:bf:
65:1d:7f:5b:7c:d6:99:3a:0d:a0:9f:44:7e:00:4c:bf:fd:0f:
48:c2:3d:7d:d0:a7:d2:c9:e7:8e:fe:4b:e6:be:9d:ef:ca:46:
58:15:7f:41:96:72:a3:2c:22:b7:08:35:36:21:22:38:c3:9b:
74:2c:e8:59:62:0c:d3:b4:44:97:e7:19:c7:19:05:7c:b6:18:
9b:92:35:84:f1:0d:88:7e:1a:21:09:b4:8e:a6:60:2c:36:6e:
6e:f6:4f:33:27:9a:62:d2:91:6e:f6:43:a6:03:15:76:f7:07:
c9:b0:fd:cd:ae:4b:3a:48:9c:5c:00:fa:2d:a3:12:2d:43:5d:
de:be:4c:e4:04:25:55:e0:de:cd:a7:20:19:a9:18:b5:23:b3:
f7:da:98:d3:a8:2f:27:2f:ac:6c:51:8d:7a:da:94:0d:34:1f:
ef:69:ce:eb:ea:52:a9:f5:e7:e2:05:cb:76:9e:c9:1e:5f:b5:
f7:c7:b2:23:4e:33:63:f3:59:56:a5:ff:8a:7e:d6:e1:e4:04:
06:82:f1:75:3a:70:b0:01:12:cb:05:71:fe:a9:0e:8a:33:d5:
d0:90:89:85:d1:8f:3a:8f:e7:90:7c:d9:6f:5d:66:8d:e9:41:
b9:66:d7:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbirZ3XJ1ss132WL2sfVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2
NTYzN2IwHhcNMjUxMTExMDEwMDU5WhcNMjUxMTEyMDEwMDU5WjAzMTEwLwYDVQQD
EyhiZDk4MjIyNDM0NmNkYmQ2ZGE1NTE3MWRjYTRkMTk1NWVhMDU2MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxeFP1t9jRz9wWqqY0GqEj9oOPom
WHgUdGiTte+4lIYScjyIuuH/WBmk+mbmYwTsAEJ/d/ZAwuX+STH7zbOW84LGe1F+
QeE26F6D/NQyeiP+hY7pnSa1/qlBZQ/rTteVPRBtVeWlk97eBUqaAW9s65AHEOA9
aP3FnCProOhJHnPaCjj1TeBjtSHdcP97e8WGHt3B8mv4UTXU6fKffmczH3vH3A6T
I5AaMNusOhu/wSeDfG8zyZsMH4BaFPenK4s5BA+ATsg5QXFzyq7Ma9ajj1UiPYr1
Yn7Ca/Si6BUgL53VCcpKULTxIzJAj+VTipl5MmIrnGEHno+PM0RNAmAdQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2YIiQ0bNvW2lUXHcpNGVXqBWIlMB8GA1UdIwQY
MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt
MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2
LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNB+LlYE
wwtWHDjwhQxCYBm/ZR1/W3zWmToNoJ9EfgBMv/0PSMI9fdCn0snnjv5L5r6d78pG
WBV/QZZyoywitwg1NiEiOMObdCzoWWIM07REl+cZxxkFfLYYm5I1hPENiH4aIQm0
jqZgLDZubvZPMyeaYtKRbvZDpgMVdvcHybD9za5LOkicXAD6LaMSLUNd3r5M5AQl
VeDezacgGakYtSOz99qY06gvJy+sbFGNetqUDTQf72nO6+pSqfXn4gXLdp7JHl+1
98eyI04zY/NZVqX/in7W4eQEBoLxdTpwsAESywVx/qkOijPV0JCJhdGPOo/nkHzZ
b11mjelBuWbXnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:55 2025 by rpki-client