Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File: 7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier: SQd67mWMmafn2RjzpCkKoKYytUfRimkK7C728mx7nnY=
Subject key identifier: A7:E1:77:39:9F:CB:B9:77:2B:65:99:A3:73:3C:98:B4:06:E7:82:89
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer: /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial: 019A73A5E1556686A8A1C03522EB3AEC19C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number: 0865
Signing time: Tue 11 Nov 2025 16:00:42 +0000
Manifest this update: Tue 11 Nov 2025 16:00:42 +0000
Manifest next update: Wed 12 Nov 2025 16:00:42 +0000
Files and hashes: 1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: xCY8KXRSnoZdoXpT2cpiKxCYrYAhZHk723WCyqJxmKc=)
2: kF-CXYhPs4TYflqMBcCGyzwLA7o.roa (hash: gnSWn3nUIqjsFFoH6d5rK0RwdbfhLh+8DTBzXarX5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a5:e1:55:66:86:a8:a1:c0:35:22:eb:3a:ec:19:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Validity
Not Before: Nov 11 16:00:42 2025 GMT
Not After : Nov 12 16:00:42 2025 GMT
Subject: CN=a7e177399fcbb9772b6599a3733c98b406e78289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:f6:ae:c6:86:40:94:5b:7c:80:e2:3b:6a:
49:d7:f5:42:b9:4f:6b:49:ca:73:2f:aa:db:c6:62:
94:e3:48:7f:98:98:3c:f3:c0:a1:ec:45:a0:19:88:
ad:98:9d:36:de:c8:44:c6:41:eb:cb:07:ad:1a:52:
02:c1:79:70:87:3a:0f:61:31:0d:94:34:50:72:cc:
75:af:c4:14:42:ef:b6:ce:ec:3b:59:f1:2c:c8:3a:
e7:88:32:8e:81:df:b8:cc:a6:d7:25:f5:9e:3b:29:
ab:91:3f:65:ba:0d:ae:1d:37:11:94:8b:83:1f:c4:
85:b9:5d:06:89:22:28:8e:70:28:e3:53:39:02:cf:
e5:ad:61:ac:10:e6:ae:7b:75:9f:fd:28:06:1f:4d:
35:26:5c:95:45:66:38:78:ab:ab:6e:10:97:74:b1:
2e:97:0a:35:6a:4a:47:51:b8:d3:aa:b3:f4:41:67:
3a:ad:78:8e:17:7f:43:af:42:42:78:c3:ea:0e:aa:
69:fb:a0:8e:f6:66:55:3c:53:50:de:55:f2:52:16:
60:c0:04:91:3c:af:18:40:62:c3:72:38:d3:26:4b:
0e:1d:c1:61:6a:2b:37:46:91:46:9b:f6:e1:0e:50:
df:47:f2:ac:63:ac:56:42:ea:da:24:8d:6c:18:c5:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:77:39:9F:CB:B9:77:2B:65:99:A3:73:3C:98:B4:06:E7:82:89
X509v3 Authority Key Identifier:
keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:24:88:69:d8:ce:f1:38:2a:43:fb:bb:f8:cf:9a:bf:2f:aa:
69:70:e3:1a:ad:8c:17:17:fa:2b:c9:c5:ba:8a:94:d8:88:08:
b6:ce:ed:63:c9:e8:c3:8d:e2:5b:86:41:21:7d:09:c0:23:40:
3e:c5:6b:ba:aa:8f:23:be:a1:99:de:4d:06:d6:09:ef:67:c7:
b2:c8:5b:a5:d7:dd:e4:d1:bd:a3:89:6c:c8:49:d7:64:66:ea:
96:74:a6:eb:00:74:75:1c:63:22:a1:5e:03:de:8e:1b:b7:1a:
d3:9e:6d:d0:60:e0:7f:6b:85:fc:83:64:02:91:07:c2:6f:02:
9e:1f:4f:a9:f6:2f:4d:ca:74:95:0d:55:5b:6a:f8:1f:9d:a8:
41:36:2d:0f:59:c6:6a:85:c3:bd:de:8f:2d:41:ec:3d:93:87:
06:94:91:10:30:1a:88:d2:09:90:e5:1d:2b:55:0b:ab:ad:96:
bf:d1:85:d4:ec:82:70:9f:41:a3:6f:0d:57:49:aa:15:3a:01:
e6:7d:d1:b4:37:39:6b:e7:27:3c:8d:e9:b1:f1:9b:67:65:e2:
36:17:99:c9:9b:74:8f:f3:ed:3f:82:6c:d0:b6:21:a9:fc:d0:
f2:8f:cf:ad:59:d9:88:e1:a5:b8:76:f7:c2:60:fd:42:6d:e0:
2a:bf:ca:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzpeFVZoaoocA1Ius67BnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZWI0NDI0YWJkODZkNmVmNDhkYjllNzY0NmY1MzljNmQx
MGM4ODYwHhcNMjUxMTExMTYwMDQyWhcNMjUxMTEyMTYwMDQyWjAzMTEwLwYDVQQD
EyhhN2UxNzczOTlmY2JiOTc3MmI2NTk5YTM3MzNjOThiNDA2ZTc4Mjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFn2rsaGQJRbfIDiO2pJ1/VCuU9r
ScpzL6rbxmKU40h/mJg888Ch7EWgGYitmJ023shExkHrywetGlICwXlwhzoPYTEN
lDRQcsx1r8QUQu+2zuw7WfEsyDrniDKOgd+4zKbXJfWeOymrkT9lug2uHTcRlIuD
H8SFuV0GiSIojnAo41M5As/lrWGsEOaue3Wf/SgGH001JlyVRWY4eKurbhCXdLEu
lwo1akpHUbjTqrP0QWc6rXiOF39Dr0JCeMPqDqpp+6CO9mZVPFNQ3lXyUhZgwASR
PK8YQGLDcjjTJksOHcFhais3RpFGm/bhDlDfR/KsY6xWQuraJI1sGMVmaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfhdzmfy7l3K2WZo3M8mLQG54KJMB8GA1UdIwQY
MBaAFO3rRCSr2G1u9I2552RvU5xtEMiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81MWIzMWEtN2U1MC00YTFlLTlmNjkt
MTZkM2EwZWE0OWFlLzEvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi81MWIzMWEtN2U1MC00YTFlLTlmNjktMTZkM2EwZWE0OWFl
LzEvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCSIadjO
8TgqQ/u7+M+avy+qaXDjGq2MFxf6K8nFuoqU2IgIts7tY8now43iW4ZBIX0JwCNA
PsVruqqPI76hmd5NBtYJ72fHsshbpdfd5NG9o4lsyEnXZGbqlnSm6wB0dRxjIqFe
A96OG7ca055t0GDgf2uF/INkApEHwm8Cnh9PqfYvTcp0lQ1VW2r4H52oQTYtD1nG
aoXDvd6PLUHsPZOHBpSREDAaiNIJkOUdK1ULq62Wv9GF1OyCcJ9Bo28NV0mqFToB
5n3RtDc5a+cnPI3psfGbZ2XiNheZyZt0j/PtP4Js0LYhqfzQ8o/PrVnZiOGluHb3
wmD9Qm3gKr/KjA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:54 2025 by rpki-client