Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: OCvlB1Jozhzu63CP5XQq+3rLNbn+Rk5Y3EyVLZ1GmNM=
Subject key identifier: 9D:98:28:77:19:94:C3:D1:CF:80:F0:46:CC:1E:44:2E:E3:4E:99:1E
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019A50E2BDEA769601D0D50D5198C7693A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0E95
Signing time: Tue 04 Nov 2025 22:00:28 +0000
Manifest this update: Tue 04 Nov 2025 22:00:28 +0000
Manifest next update: Wed 05 Nov 2025 22:00:28 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: ard2uBS+KpeRKkFV/DLeqDYi/bV0bRFRO76WZN1JLCo=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:bd:ea:76:96:01:d0:d5:0d:51:98:c7:69:3a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Nov 4 22:00:28 2025 GMT
Not After : Nov 5 22:00:28 2025 GMT
Subject: CN=9d9828771994c3d1cf80f046cc1e442ee34e991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:15:ec:e8:0d:82:5e:b1:93:b7:b9:c5:af:8b:
35:26:e5:09:3d:55:1f:77:c2:e6:93:31:f1:bf:6a:
2d:e2:02:fb:47:93:e0:c7:ca:55:ea:7a:56:c4:89:
41:61:87:a5:08:7a:ec:50:e9:40:9c:27:57:7e:6f:
ed:d6:de:70:a3:87:17:c2:16:39:78:d5:59:b5:da:
e4:dd:6e:8e:fe:bd:6f:fd:ab:84:d8:98:b5:f5:61:
88:fb:55:6b:e9:22:9b:ca:ca:50:41:9e:ae:90:52:
c8:e5:55:b9:ee:f0:b4:15:f4:78:80:a4:bd:87:df:
80:8d:66:71:c2:9e:65:df:6c:9a:ea:57:ae:fc:c6:
fd:73:4f:a6:fb:ff:e0:85:38:e9:ce:3e:8a:97:65:
4e:24:3c:fc:4e:19:ca:24:63:4c:c3:12:c3:ab:1e:
51:f9:5f:5a:6b:16:bd:f9:31:84:a8:e4:50:d9:ff:
25:62:e9:20:d3:80:17:c5:de:f4:bd:5c:6f:f7:ff:
8f:e8:46:18:9c:73:4f:23:4e:34:9c:ac:88:75:e7:
ef:be:36:15:c6:0a:3b:c2:1c:b3:56:2b:d7:2f:38:
90:de:52:14:1d:80:3a:51:ce:0c:43:e7:13:19:be:
77:e9:82:34:c7:ea:c5:c6:14:db:dc:85:e7:46:8f:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:98:28:77:19:94:C3:D1:CF:80:F0:46:CC:1E:44:2E:E3:4E:99:1E
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e2:32:34:40:e3:8b:d9:d9:57:2d:b0:e4:e9:4c:7d:dd:54:
bc:be:2a:0e:00:7d:5d:3e:74:61:40:3b:82:e0:a4:cc:14:aa:
3c:75:15:b8:42:c4:5b:49:a4:f2:1c:4f:68:c9:18:05:b3:9c:
a4:a4:69:3f:6d:f8:f9:51:e0:85:a1:6a:0a:00:20:e5:d1:2d:
d4:d9:c4:b8:8f:32:d8:4b:cd:76:c2:2d:bd:1a:d1:66:de:e5:
1d:b7:0f:3b:c9:fb:72:41:38:71:53:95:52:68:5d:1d:7d:03:
2a:ed:c2:d3:6d:d7:e6:2a:98:56:71:f1:af:2f:c9:8e:08:f9:
ae:5c:dc:56:60:1f:4d:f7:0c:54:32:97:2a:59:a5:4f:54:0c:
a9:21:32:7e:7a:06:b0:64:55:10:70:7c:13:15:19:e8:fa:37:
46:a8:45:f4:96:b8:b7:de:a5:24:eb:32:e7:f4:4f:e4:b9:96:
4f:fb:9f:f9:a0:98:85:81:0e:0f:15:eb:00:a2:e0:a6:52:a8:
4e:60:5e:8a:77:23:e7:d1:a1:36:f2:e0:b6:18:1d:3d:84:0b:
c4:49:8c:76:13:a0:95:75:cd:7b:2d:57:fc:19:a9:24:eb:5f:
90:05:63:a4:27:90:b9:47:ac:b2:52:92:7e:09:74:4f:76:66:
b1:03:de:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4r3qdpYB0NUNUZjHaTp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0
MGE1ODgwHhcNMjUxMTA0MjIwMDI4WhcNMjUxMTA1MjIwMDI4WjAzMTEwLwYDVQQD
Eyg5ZDk4Mjg3NzE5OTRjM2QxY2Y4MGYwNDZjYzFlNDQyZWUzNGU5OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xXs6A2CXrGTt7nFr4s1JuUJPVUf
d8LmkzHxv2ot4gL7R5Pgx8pV6npWxIlBYYelCHrsUOlAnCdXfm/t1t5wo4cXwhY5
eNVZtdrk3W6O/r1v/auE2Ji19WGI+1Vr6SKbyspQQZ6ukFLI5VW57vC0FfR4gKS9
h9+AjWZxwp5l32ya6leu/Mb9c0+m+//ghTjpzj6Kl2VOJDz8ThnKJGNMwxLDqx5R
+V9aaxa9+TGEqORQ2f8lYukg04AXxd70vVxv9/+P6EYYnHNPI040nKyIdefvvjYV
xgo7whyzVivXLziQ3lIUHYA6Uc4MQ+cTGb536YI0x+rFxhTb3IXnRo8MswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2YKHcZlMPRz4DwRsweRC7jTpkeMB8GA1UdIwQY
MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt
MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz
LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOIyNEDj
i9nZVy2w5OlMfd1UvL4qDgB9XT50YUA7guCkzBSqPHUVuELEW0mk8hxPaMkYBbOc
pKRpP234+VHghaFqCgAg5dEt1NnEuI8y2EvNdsItvRrRZt7lHbcPO8n7ckE4cVOV
UmhdHX0DKu3C023X5iqYVnHxry/Jjgj5rlzcVmAfTfcMVDKXKlmlT1QMqSEyfnoG
sGRVEHB8ExUZ6Po3RqhF9Ja4t96lJOsy5/RP5LmWT/uf+aCYhYEODxXrAKLgplKo
TmBeincj59GhNvLgthgdPYQLxEmMdhOglXXNey1X/BmpJOtfkAVjpCeQuUesslKS
fgl0T3ZmsQPeJg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:46 2025 by rpki-client