Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File: 7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier: UPyAuUODpyJkZ8Hj47BV+7zoWMmExVqezArthNK2MFI=
Subject key identifier: 8A:0E:F8:98:2E:91:64:FA:68:1B:35:6F:98:A3:A3:6B:43:6C:01:6C
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 019A085B89AA49A345F163B09699361C2E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 20:00:07 +0000
Manifest this update: Tue 21 Oct 2025 20:00:07 +0000
Manifest next update: Wed 22 Oct 2025 20:00:07 +0000
Files and hashes: 1: 1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa (hash: wuJzjrI9EaOKpfz53i0KZN8DZtLqoyJbku8WdDvpazs=)
2: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: SdoG0ArQojdUZGb3XNmFxKz7gqd1QjqPVN3aIrNqsGY=)
3: Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa (hash: cMc5/+uI8EwNJg30oKHwLh7pnaj9wAcQ3DWjnpzREXo=)
4: UAMozedMddnvbaHXdpt5f_TDvZE.roa (hash: C7OBU+9hOWyvCkQ42eXork8FUbOcNdFjL8raQWMxSpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:5b:89:aa:49:a3:45:f1:63:b0:96:99:36:1c:2e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Oct 21 20:00:07 2025 GMT
Not After : Oct 22 20:00:07 2025 GMT
Subject: CN=8a0ef8982e9164fa681b356f98a3a36b436c016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:68:42:d4:f3:9a:45:fc:4d:37:bf:ef:44:
5a:ee:3f:7f:d3:9b:58:24:a9:58:92:03:d0:bc:48:
5d:a7:8e:97:00:f3:cc:51:17:95:b0:bf:18:88:b4:
2d:53:6f:65:ab:78:f8:63:04:e0:a8:08:0c:b2:d9:
61:32:87:ad:18:dd:14:da:b4:21:ac:45:4f:38:c6:
35:56:84:dd:76:61:7a:81:68:a2:0a:d2:ad:9a:ad:
f8:f3:44:74:b1:c6:1c:f9:d1:87:04:fa:1c:85:8d:
c0:57:41:16:7f:f7:e2:8e:b2:6f:e9:37:54:67:d7:
94:a3:6b:a6:6c:18:9c:ec:a2:61:7e:0c:a2:bc:84:
30:d7:03:79:a7:17:b1:df:09:73:62:e6:be:4d:3c:
e0:0a:a3:1c:7b:8f:23:18:41:f5:0c:9c:a3:18:3d:
22:a9:41:24:c8:24:d9:e9:30:60:3a:08:e5:ec:e9:
8c:2f:25:8a:f5:05:84:94:93:ec:d8:33:ba:00:25:
08:e1:c2:f5:b4:b0:da:c5:e8:cc:34:69:16:03:3f:
3f:c7:42:dd:10:32:fc:d4:06:91:7a:e2:98:32:12:
f3:a5:da:2d:64:2a:96:f5:e3:81:20:dc:14:cb:1b:
1b:0c:62:61:81:2a:80:59:7e:43:cb:78:78:45:4d:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0E:F8:98:2E:91:64:FA:68:1B:35:6F:98:A3:A3:6B:43:6C:01:6C
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f2:19:3f:27:f4:23:fc:21:f1:b4:8a:20:68:82:f4:7e:b6:
11:d4:16:0e:e9:de:de:89:f1:be:8a:5d:cd:a1:6e:16:ff:29:
96:8f:5d:b6:21:61:f6:f8:e8:80:05:cd:73:b6:50:4c:97:56:
a5:03:b1:89:ac:8c:06:68:c7:09:68:23:7c:93:9f:bd:36:a6:
08:8a:8e:7d:ed:c0:7c:a4:95:5e:74:03:b3:11:d7:ba:fd:77:
88:03:56:c2:b0:60:fe:b0:40:b4:9f:a3:ac:69:98:f9:fe:a5:
b4:ca:10:6a:bd:11:34:fa:40:98:52:8d:51:29:3e:47:4e:3b:
d8:66:ac:6b:1b:5b:99:4f:28:97:ac:01:37:f1:33:5e:1e:cd:
49:70:6c:eb:01:5a:4f:57:a2:57:1b:a5:d2:84:63:2b:40:65:
44:ce:99:df:2e:03:e6:83:7f:c2:d0:f4:31:ff:a9:46:df:13:
63:f3:48:6c:a1:82:fe:63:e6:6e:4a:d7:f5:dd:3f:7b:7b:03:
72:d8:38:e4:84:f5:63:4f:ad:3d:36:98:e1:8c:7b:8c:5f:b4:
59:e8:a7:1d:5c:34:c5:5e:56:50:28:29:aa:dd:25:d1:92:63:
1c:39:9a:ca:cd:29:8d:9e:61:a2:f9:43:88:27:f2:e9:4b:96:
a8:8c:7f:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoIW4mqSaNF8WOwlpk2HC5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWYwMTg4MWI3M2M4ZTliNWQ5MjIzOTIyOWE2ZTUxMmVj
YTRlN2MwHhcNMjUxMDIxMjAwMDA3WhcNMjUxMDIyMjAwMDA3WjAzMTEwLwYDVQQD
Eyg4YTBlZjg5ODJlOTE2NGZhNjgxYjM1NmY5OGEzYTM2YjQzNmMwMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2hoQtTzmkX8TTe/70Ra7j9/05tY
JKlYkgPQvEhdp46XAPPMUReVsL8YiLQtU29lq3j4YwTgqAgMstlhMoetGN0U2rQh
rEVPOMY1VoTddmF6gWiiCtKtmq3480R0scYc+dGHBPochY3AV0EWf/fijrJv6TdU
Z9eUo2umbBic7KJhfgyivIQw1wN5pxex3wlzYua+TTzgCqMce48jGEH1DJyjGD0i
qUEkyCTZ6TBgOgjl7OmMLyWK9QWElJPs2DO6ACUI4cL1tLDaxejMNGkWAz8/x0Ld
EDL81AaReuKYMhLzpdotZCqW9eOBINwUyxsbDGJhgSqAWX5Dy3h4RU3cWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoO+JgukWT6aBs1b5ijo2tDbAFsMB8GA1UdIwQY
MBaAFO8fAYgbc8jptdkiOSKablEuyk58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYt
NTUxMzFjYzFlZmVhLzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYtNTUxMzFjYzFlZmVh
LzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvIZPyf0
I/wh8bSKIGiC9H62EdQWDune3onxvopdzaFuFv8plo9dtiFh9vjogAXNc7ZQTJdW
pQOxiayMBmjHCWgjfJOfvTamCIqOfe3AfKSVXnQDsxHXuv13iANWwrBg/rBAtJ+j
rGmY+f6ltMoQar0RNPpAmFKNUSk+R0472GasaxtbmU8ol6wBN/EzXh7NSXBs6wFa
T1eiVxul0oRjK0BlRM6Z3y4D5oN/wtD0Mf+pRt8TY/NIbKGC/mPmbkrX9d0/e3sD
ctg45IT1Y0+tPTaY4Yx7jF+0WeinHVw0xV5WUCgpqt0l0ZJjHDmays0pjZ5hovlD
iCfy6UuWqIx/1Q==
-----END CERTIFICATE-----
Generated at Wed Oct 22 06:56:21 2025 by rpki-client