Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier: tScf6tcY7Wr3T6AelxbCwE7PFRVobhG3zxbtIs22VdA=
Subject key identifier: 9E:B7:4E:8D:69:99:9D:A7:3B:FA:4F:03:09:4A:61:9F:7B:CA:B1:BF
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial: 019A7113144AE32AD34C69DBB8185F563404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: vgpKrpFXcKp6SjHvqr8q/qEykmpRS9kA1hnhpUrgKoA=)
2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:14:4a:e3:2a:d3:4c:69:db:b8:18:5f:56:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=9eb74e8d69999da73bfa4f03094a619f7bcab1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:09:e5:cf:81:d5:df:fb:0a:50:70:42:02:
c1:90:31:28:3f:be:66:d9:32:5d:e8:98:9c:ea:32:
f5:e0:14:0c:8a:00:e4:b4:a1:4b:a3:dd:16:b5:cc:
9b:08:10:bd:19:ec:ac:48:af:d4:2f:ec:e8:96:5c:
6a:57:05:91:bb:40:81:fd:82:6d:c7:eb:0a:6c:a2:
a5:1b:40:48:f4:cc:0b:d5:0f:34:a8:a8:0b:bb:26:
d6:5b:2e:94:7a:06:f5:0c:1d:8c:2c:f3:1f:f8:73:
f4:1f:c4:59:28:76:a6:b4:9a:d0:3f:b1:59:43:88:
8b:d0:0d:96:b0:a0:db:97:74:2a:b7:6b:b7:8a:f8:
6b:0e:28:91:62:d1:35:5a:24:de:5f:c7:40:11:e4:
f7:a3:9c:8b:7c:d4:e3:ce:ae:80:f2:a5:29:e3:c6:
fa:90:69:30:82:90:0c:d4:90:ea:ae:0d:b1:28:2a:
c9:6b:4a:1e:29:22:4f:83:ae:f3:3d:63:ad:86:ab:
ae:98:34:58:a7:a5:5e:e0:d0:23:63:86:ba:78:24:
d3:cb:e3:92:8d:2e:cd:35:e1:6e:43:a6:c7:55:f7:
60:dc:f1:17:15:ab:53:66:38:80:da:88:97:7f:8e:
42:dc:a0:9a:b6:fa:3b:bd:b7:01:53:31:22:0e:ea:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B7:4E:8D:69:99:9D:A7:3B:FA:4F:03:09:4A:61:9F:7B:CA:B1:BF
X509v3 Authority Key Identifier:
keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:04:a9:cd:2e:1b:82:ef:8c:cc:f0:17:5c:d6:a3:47:12:5d:
f2:4a:fa:09:cf:d2:fc:bd:b9:7f:12:e8:96:ec:2c:af:af:33:
72:b0:33:e5:18:9e:17:53:f8:63:7c:d2:ab:f4:8c:a1:ef:9b:
5e:5f:82:c3:14:64:f8:ab:4f:53:5a:0d:ae:c0:ca:00:ce:8b:
db:54:38:8d:1c:68:43:5f:cc:1a:91:38:7c:48:9e:b0:19:cd:
86:e1:e2:f1:67:86:2d:c1:bb:88:a3:aa:41:dd:d2:0d:08:98:
35:15:37:33:a9:7c:c1:73:ea:78:52:cd:09:56:c8:bb:b3:2f:
bc:1e:d8:a6:17:66:fc:f4:b8:fc:62:9a:b0:94:d3:86:cb:df:
b4:19:ca:ec:ed:e0:db:c6:0c:03:86:97:39:fc:09:82:e1:5d:
05:71:9a:10:f8:17:a8:85:42:ce:1b:01:8f:29:1a:51:84:8c:
d4:8c:b6:cc:3d:3d:3b:56:fa:31:00:93:4c:c7:e4:da:86:3c:
06:08:bf:66:41:c7:4c:5b:2d:5c:ee:a5:f9:05:23:90:29:7a:
61:da:0f:32:a1:76:3a:21:98:62:ea:80:13:29:37:30:d4:71:
99:39:89:10:a3:fb:1b:5f:e8:ca:9c:09:72:58:96:cc:21:65:
da:80:29:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxExRK4yrTTGnbuBhfVjQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlN2EyNjRkYmNjZDc1YWE4NmNkMzYxYzZkMzY2YmQ4OGM5
MGRhMjMwHhcNMjUxMTExMDQwMTA2WhcNMjUxMTEyMDQwMTA2WjAzMTEwLwYDVQQD
Eyg5ZWI3NGU4ZDY5OTk5ZGE3M2JmYTRmMDMwOTRhNjE5ZjdiY2FiMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue8J5c+B1d/7ClBwQgLBkDEoP75m
2TJd6Jic6jL14BQMigDktKFLo90WtcybCBC9GeysSK/UL+zollxqVwWRu0CB/YJt
x+sKbKKlG0BI9MwL1Q80qKgLuybWWy6Uegb1DB2MLPMf+HP0H8RZKHamtJrQP7FZ
Q4iL0A2WsKDbl3Qqt2u3ivhrDiiRYtE1WiTeX8dAEeT3o5yLfNTjzq6A8qUp48b6
kGkwgpAM1JDqrg2xKCrJa0oeKSJPg67zPWOthquumDRYp6Ve4NAjY4a6eCTTy+OS
jS7NNeFuQ6bHVfdg3PEXFatTZjiA2oiXf45C3KCatvo7vbcBUzEiDurbOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ63To1pmZ2nO/pPAwlKYZ97yrG/MB8GA1UdIwQY
MBaAFO56Jk28zXWqhs02HG02a9iMkNojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMt
MzE3ZTgyMGRmY2RiLzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMtMzE3ZTgyMGRmY2Ri
LzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgSpzS4b
gu+MzPAXXNajRxJd8kr6Cc/S/L25fxLoluwsr68zcrAz5RieF1P4Y3zSq/SMoe+b
Xl+CwxRk+KtPU1oNrsDKAM6L21Q4jRxoQ1/MGpE4fEiesBnNhuHi8WeGLcG7iKOq
Qd3SDQiYNRU3M6l8wXPqeFLNCVbIu7MvvB7Yphdm/PS4/GKasJTThsvftBnK7O3g
28YMA4aXOfwJguFdBXGaEPgXqIVCzhsBjykaUYSM1Iy2zD09O1b6MQCTTMfk2oY8
Bgi/ZkHHTFstXO6l+QUjkCl6YdoPMqF2OiGYYuqAEyk3MNRxmTmJEKP7G1/oypwJ
cliWzCFl2oApUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:49 2025 by rpki-client