Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier: zHwxIuIjWTcyRwuICRouY97SbQ4No+YKnjP9g99Xqro=
Subject key identifier: 1E:41:9C:5A:68:B9:DE:EB:67:24:01:E7:9C:73:AF:E5:D1:04:F6:CD
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial: 019A7293F1BC85CAF8DBA94C804D1AB72023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number: 0462
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: TMuBtT9c4mB8zLL9Ey+yUiS8xCms2U9RwQLDq0ELDTk=)
2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f1:bc:85:ca:f8:db:a9:4c:80:4d:1a:b7:20:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=1e419c5a68b9deeb672401e79c73afe5d104f6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:cc:ec:44:1d:c4:b1:64:21:bd:9a:2a:41:
66:5a:d1:40:44:72:9c:c0:fc:bb:df:21:c8:d7:6d:
33:71:f0:38:51:05:d9:05:e5:51:41:1f:b5:0d:92:
72:54:1b:d4:a3:d9:5c:c8:bd:b0:c4:29:11:07:f7:
73:7e:75:be:9f:57:ea:a7:ac:3d:0b:bd:6f:4d:a2:
aa:f7:0b:09:03:62:48:5d:c0:61:77:c3:dd:d1:4a:
9d:a3:d2:8f:32:35:b9:ae:b4:37:b7:da:1a:6f:40:
53:f3:e1:3a:f7:fb:7a:17:38:c9:1a:e0:56:3d:07:
06:f3:47:2a:00:41:e0:26:76:14:fc:52:75:d4:b1:
7c:4c:a4:96:73:c5:93:e7:46:28:e1:d5:88:19:85:
7e:e1:4d:70:4f:a4:15:d5:a5:95:af:d1:0a:b8:6b:
6c:a1:5e:9d:32:93:24:f0:88:60:08:11:01:94:fb:
9b:cd:1a:c2:ea:1f:28:03:01:f2:e3:ce:e1:54:f1:
f1:15:e6:35:73:3d:ee:83:82:f5:49:15:68:29:39:
de:b4:e6:aa:76:d0:36:16:8a:67:a3:d1:be:0c:41:
fa:e1:c4:64:35:3e:7d:50:c3:5c:8d:d0:be:f0:69:
4c:92:42:9c:54:fc:e5:cd:e0:e0:f2:28:4f:ad:83:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:41:9C:5A:68:B9:DE:EB:67:24:01:E7:9C:73:AF:E5:D1:04:F6:CD
X509v3 Authority Key Identifier:
keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:fd:49:33:c4:19:83:69:86:4b:75:3b:70:e1:7c:2e:bf:44:
03:2b:d3:e8:7d:3b:18:88:25:37:34:08:bc:39:d9:6c:89:7d:
05:39:34:a4:54:28:dd:75:cd:7f:7f:18:37:68:f1:7a:39:ca:
7a:e3:65:65:e2:be:32:10:b1:55:50:43:4f:69:77:02:fc:12:
7d:10:fd:48:08:55:9d:c3:d2:7a:c6:7c:79:5e:38:1d:4b:be:
f0:ec:b5:f4:1d:95:5b:2c:3e:7c:43:07:2c:d9:a5:02:18:cd:
3d:69:4e:3a:a6:f6:3a:fe:18:05:db:78:73:66:69:b5:2d:76:
2d:14:13:55:37:69:77:53:6f:e7:37:06:cb:f9:bc:68:91:27:
cd:b1:26:98:6b:6c:7f:4a:51:8c:cc:ab:47:06:a7:87:24:ac:
22:bf:1e:9a:86:d0:01:b2:da:16:c8:52:7d:16:e2:68:d3:c3:
11:ad:fc:5f:32:48:d1:ea:47:5d:b0:fb:dd:0f:0a:0a:28:24:
e2:16:a3:e0:45:ca:8d:c5:be:c9:ed:af:58:89:70:b2:2d:e4:
44:1e:4d:19:63:32:cc:fe:b8:41:57:d6:d6:24:61:27:6c:b3:
3b:ff:c0:7c:84:16:31:cc:ba:d9:9f:57:06:a6:c7:3a:d8:ea:
02:4c:31:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk/G8hcr426lMgE0atyAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjdiYjc1ODhiODJkNzBkOGNiNzNkNGU0NTE3N2Y2N2Vj
ZWYyMTMwHhcNMjUxMTExMTEwMTI5WhcNMjUxMTEyMTEwMTI5WjAzMTEwLwYDVQQD
EygxZTQxOWM1YTY4YjlkZWViNjcyNDAxZTc5YzczYWZlNWQxMDRmNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhzM7EQdxLFkIb2aKkFmWtFARHKc
wPy73yHI120zcfA4UQXZBeVRQR+1DZJyVBvUo9lcyL2wxCkRB/dzfnW+n1fqp6w9
C71vTaKq9wsJA2JIXcBhd8Pd0Uqdo9KPMjW5rrQ3t9oab0BT8+E69/t6FzjJGuBW
PQcG80cqAEHgJnYU/FJ11LF8TKSWc8WT50Yo4dWIGYV+4U1wT6QV1aWVr9EKuGts
oV6dMpMk8IhgCBEBlPubzRrC6h8oAwHy487hVPHxFeY1cz3ug4L1SRVoKTnetOaq
dtA2Fopno9G+DEH64cRkNT59UMNcjdC+8GlMkkKcVPzlzeDg8ihPrYPntQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5BnFpoud7rZyQB55xzr+XRBPbNMB8GA1UdIwQY
MBaAFO1nu3WIuC1w2Mtz1ORRd/Z+zvITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5Yjkt
MWI2MGRmMjUyY2E3LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5YjktMWI2MGRmMjUyY2E3
LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0/1JM8QZ
g2mGS3U7cOF8Lr9EAyvT6H07GIglNzQIvDnZbIl9BTk0pFQo3XXNf38YN2jxejnK
euNlZeK+MhCxVVBDT2l3AvwSfRD9SAhVncPSesZ8eV44HUu+8Oy19B2VWyw+fEMH
LNmlAhjNPWlOOqb2Ov4YBdt4c2ZptS12LRQTVTdpd1Nv5zcGy/m8aJEnzbEmmGts
f0pRjMyrRwanhySsIr8emobQAbLaFshSfRbiaNPDEa38XzJI0epHXbD73Q8KCigk
4haj4EXKjcW+ye2vWIlwsi3kRB5NGWMyzP64QVfW1iRhJ2yzO//AfIQWMcy62Z9X
BqbHOtjqAkwxTg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:30 2025 by rpki-client