Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: BAQmADS111pcykj+auI78D3Xc85OSvnoYJWGh1xFNoo=
Subject key identifier: 40:C8:5F:63:CC:2E:F9:79:C8:BB:AD:80:AC:BB:15:5C:70:D4:B8:5E
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 019A2108E669852B5B665E897EAFFC89D2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 1335
Signing time: Sun 26 Oct 2025 15:00:22 +0000
Manifest this update: Sun 26 Oct 2025 15:00:22 +0000
Manifest next update: Mon 27 Oct 2025 15:00:22 +0000
Files and hashes: 1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: Q9adWMDyv5OlVrqsJUW2QV5STrGMUKH7sWYSW2RpdGI=)
2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:e6:69:85:2b:5b:66:5e:89:7e:af:fc:89:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Oct 26 15:00:22 2025 GMT
Not After : Oct 27 15:00:22 2025 GMT
Subject: CN=40c85f63cc2ef979c8bbad80acbb155c70d4b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:2c:12:fd:57:89:b6:ed:02:4d:a5:3e:d6:
da:09:bb:ac:26:4c:a8:30:dd:a6:67:3a:4a:ee:22:
fd:d9:6d:b2:bd:d9:0a:b2:7b:a7:d8:01:f2:e9:5d:
c1:84:42:da:eb:06:eb:63:1c:03:62:ea:08:cf:84:
bd:93:4e:0a:41:81:4f:2b:c5:3f:d9:ae:92:42:b5:
34:59:96:51:cd:64:0a:09:a2:55:20:35:ac:c2:97:
2c:59:e6:f1:6f:63:66:42:88:81:a6:55:bb:bd:48:
42:a1:da:d4:b4:75:b9:8f:b7:b3:4d:4b:2a:5c:b7:
79:03:c5:a2:7c:86:b9:7b:a9:ec:5e:c2:67:c1:27:
32:e3:23:dd:c3:96:56:80:8f:c7:7d:d5:ee:70:25:
3a:4a:77:e0:94:bb:d7:68:21:89:da:e0:60:1d:ca:
aa:24:44:d1:d7:9b:92:64:1b:ee:03:6e:87:bb:d4:
e6:20:39:68:21:45:9e:7e:cf:3c:5f:16:86:01:ce:
24:43:b1:4e:a9:22:33:62:a8:04:25:3e:ba:0f:ab:
c3:74:68:f6:34:4a:d4:c5:1a:0a:0f:e7:ec:79:11:
80:eb:17:43:40:aa:bb:ff:b3:23:f5:73:d7:84:e2:
fd:a6:ec:da:5b:1b:d6:37:b2:80:39:2b:f4:fd:60:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C8:5F:63:CC:2E:F9:79:C8:BB:AD:80:AC:BB:15:5C:70:D4:B8:5E
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:70:87:6c:15:f7:f3:a7:09:b7:ce:1a:f8:75:ef:cf:8d:97:
92:70:a8:0f:fc:5d:24:8b:0f:fe:75:61:a5:81:37:c0:e0:3f:
83:16:08:59:8f:74:39:44:25:b0:9f:9e:30:f8:f5:7c:c1:5a:
5c:93:52:92:fc:c3:02:f1:16:c5:8a:84:22:cd:8a:cd:10:7f:
d2:e8:51:00:9a:06:b3:f4:b5:a5:31:56:71:98:df:72:7e:e5:
cc:4d:76:f7:37:c8:89:bf:b2:ec:58:20:3d:c0:33:d2:0d:20:
0b:25:30:54:e2:6b:1d:41:97:31:db:92:7f:fc:7f:08:8e:f9:
73:bb:43:fd:92:a2:20:f3:f7:60:5c:68:22:5c:8e:92:7b:48:
a9:91:b8:65:be:01:29:e8:b4:49:20:b7:e1:d5:11:34:58:25:
76:1d:28:5c:02:ea:1d:17:e0:2e:7a:10:a5:c3:24:7f:ac:3e:
be:0a:a1:b7:6f:de:5b:17:8a:40:76:3f:26:53:54:d8:cb:fe:
f8:f1:c0:e9:ba:8e:06:47:18:ee:a8:ac:a1:51:42:f3:ce:08:
45:20:bd:64:e9:d2:1c:42:63:29:dc:95:1f:93:7c:bd:3e:3a:
33:91:ee:3f:5d:b7:a4:75:8a:b4:56:e0:22:d3:09:0b:6a:02:
b1:b2:41:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCOZphStbZl6Jfq/8idLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzU0M2FhMDAzNzNlOWU0ZDEwZTY0YzgzZDM3NzliMzc4
ODg4YzEwHhcNMjUxMDI2MTUwMDIyWhcNMjUxMDI3MTUwMDIyWjAzMTEwLwYDVQQD
Eyg0MGM4NWY2M2NjMmVmOTc5YzhiYmFkODBhY2JiMTU1YzcwZDRiODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9MsEv1XibbtAk2lPtbaCbusJkyo
MN2mZzpK7iL92W2yvdkKsnun2AHy6V3BhELa6wbrYxwDYuoIz4S9k04KQYFPK8U/
2a6SQrU0WZZRzWQKCaJVIDWswpcsWebxb2NmQoiBplW7vUhCodrUtHW5j7ezTUsq
XLd5A8WifIa5e6nsXsJnwScy4yPdw5ZWgI/HfdXucCU6SnfglLvXaCGJ2uBgHcqq
JETR15uSZBvuA26Hu9TmIDloIUWefs88XxaGAc4kQ7FOqSIzYqgEJT66D6vDdGj2
NErUxRoKD+fseRGA6xdDQKq7/7Mj9XPXhOL9puzaWxvWN7KAOSv0/WDjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDIX2PMLvl5yLutgKy7FVxw1LheMB8GA1UdIwQY
MBaAFOw1Q6oANz6eTRDmTIPTd5s3iIjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEt
NTZmNmVjYzFjMTIxLzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEtNTZmNmVjYzFjMTIx
LzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXCHbBX3
86cJt84a+HXvz42XknCoD/xdJIsP/nVhpYE3wOA/gxYIWY90OUQlsJ+eMPj1fMFa
XJNSkvzDAvEWxYqEIs2KzRB/0uhRAJoGs/S1pTFWcZjfcn7lzE129zfIib+y7Fgg
PcAz0g0gCyUwVOJrHUGXMduSf/x/CI75c7tD/ZKiIPP3YFxoIlyOkntIqZG4Zb4B
Kei0SSC34dURNFgldh0oXALqHRfgLnoQpcMkf6w+vgqht2/eWxeKQHY/JlNU2Mv+
+PHA6bqOBkcY7qisoVFC884IRSC9ZOnSHEJjKdyVH5N8vT46M5HuP123pHWKtFbg
ItMJC2oCsbJBuQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:42:04 2025 by rpki-client