Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: IHfmBvYGme/toWbbBmyQaiZtWSiXcuge+RjYAUYSQts=
Subject key identifier: 14:F7:64:DD:F2:34:C8:6C:C9:8B:96:5A:AC:6A:D4:DA:1F:D9:46:15
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019A71B8638D7D9BA6197DD9B67A65CDF224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0992
Signing time: Tue 11 Nov 2025 07:01:40 +0000
Manifest this update: Tue 11 Nov 2025 07:01:40 +0000
Manifest next update: Wed 12 Nov 2025 07:01:40 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: 75OP6hH2qWg7pUo15TNm2FQY4vmDeW1QMnhLiavXQ7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:63:8d:7d:9b:a6:19:7d:d9:b6:7a:65:cd:f2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Nov 11 07:01:40 2025 GMT
Not After : Nov 12 07:01:40 2025 GMT
Subject: CN=14f764ddf234c86cc98b965aac6ad4da1fd94615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:da:12:38:e6:5a:59:db:f4:f1:a0:ef:a2:
71:3c:ee:a6:6d:c1:1b:4b:b9:a0:a3:94:7e:a2:d2:
9a:ee:4d:66:8b:39:72:a6:27:fe:85:1a:a7:4d:ba:
5b:c6:12:a4:c4:30:d4:b4:fd:ca:46:9a:26:08:70:
15:cf:fa:73:ff:bd:87:84:f0:98:b0:37:a7:58:fa:
3e:a7:0a:69:02:e1:31:81:b3:76:6e:e0:05:ad:f6:
9f:d7:c5:f9:6c:e3:50:6c:a8:6c:07:d7:ff:89:17:
11:31:eb:d5:2b:25:93:30:ec:9e:36:44:ab:d1:c8:
ef:5d:ab:79:3c:44:21:c4:bf:da:8a:c5:5f:c3:4e:
2e:c9:ee:e2:d8:3f:90:9e:f8:ee:82:e6:18:66:1e:
45:45:ea:03:aa:c8:5f:24:9c:ed:61:2a:f9:8b:c8:
8d:e1:f2:76:ce:29:5b:d0:8d:f8:e5:a9:d3:5c:78:
e2:d9:69:1a:18:c3:0a:9f:9f:8e:8b:38:9a:e4:0d:
c2:a1:a9:43:e4:92:44:1f:c6:84:82:88:a2:2b:86:
88:79:5b:81:ad:2d:bb:85:96:1e:99:a7:53:1d:66:
fe:93:2a:5a:2b:3b:49:5b:57:1c:84:ee:f1:a3:7c:
7c:d2:b6:90:af:01:52:62:3a:05:bd:96:46:88:ab:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:64:DD:F2:34:C8:6C:C9:8B:96:5A:AC:6A:D4:DA:1F:D9:46:15
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:17:f2:31:99:93:5c:a0:47:27:10:e9:7b:dc:8c:7c:62:fa:
42:3a:8b:1b:49:22:51:a8:df:52:87:24:ca:df:47:83:ad:6b:
15:e6:24:7e:48:1d:a5:bc:ec:c3:15:41:b5:20:47:da:88:c2:
c3:8b:83:63:06:17:8e:b9:67:6e:92:e0:e6:46:93:4a:92:3a:
23:f4:ff:72:d2:50:56:b2:6e:a1:8a:b4:62:5e:84:e4:d1:3e:
fc:9e:22:e0:8d:23:b8:08:08:ad:ad:bc:b2:bf:2b:54:1b:bf:
c8:25:63:95:2e:99:87:69:b7:ca:30:ac:7a:3d:05:68:e8:9a:
2a:b8:b2:62:92:fa:1c:bd:42:28:46:fd:37:e2:6e:1d:25:46:
7a:16:69:39:10:44:42:46:56:39:52:73:23:b8:35:0e:84:67:
d1:29:b9:1a:14:eb:04:c0:89:e3:fd:d9:2a:55:cf:ae:d1:80:
3c:5c:87:e2:bb:fc:23:77:c2:9d:d8:43:8a:68:87:af:d7:7c:
22:dc:eb:96:fb:50:0c:2b:37:32:54:e0:e5:9e:0c:01:aa:95:
61:6d:ed:ad:68:ec:34:5e:bd:66:39:52:b3:f0:bc:1f:02:cc:
ec:df:35:83:d7:49:6c:50:cf:1a:a6:14:4a:63:49:e8:45:1b:
6c:58:f3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuGONfZumGX3ZtnplzfIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjUxMTExMDcwMTQwWhcNMjUxMTEyMDcwMTQwWjAzMTEwLwYDVQQD
EygxNGY3NjRkZGYyMzRjODZjYzk4Yjk2NWFhYzZhZDRkYTFmZDk0NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PbaEjjmWlnb9PGg76JxPO6mbcEb
S7mgo5R+otKa7k1mizlypif+hRqnTbpbxhKkxDDUtP3KRpomCHAVz/pz/72HhPCY
sDenWPo+pwppAuExgbN2buAFrfaf18X5bONQbKhsB9f/iRcRMevVKyWTMOyeNkSr
0cjvXat5PEQhxL/aisVfw04uye7i2D+QnvjuguYYZh5FReoDqshfJJztYSr5i8iN
4fJ2zilb0I345anTXHji2WkaGMMKn5+Oizia5A3CoalD5JJEH8aEgoiiK4aIeVuB
rS27hZYemadTHWb+kypaKztJW1cchO7xo3x80raQrwFSYjoFvZZGiKtNTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT3ZN3yNMhsyYuWWqxq1Nof2UYVMB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0RfyMZmT
XKBHJxDpe9yMfGL6QjqLG0kiUajfUockyt9Hg61rFeYkfkgdpbzswxVBtSBH2ojC
w4uDYwYXjrlnbpLg5kaTSpI6I/T/ctJQVrJuoYq0Yl6E5NE+/J4i4I0juAgIra28
sr8rVBu/yCVjlS6Zh2m3yjCsej0FaOiaKriyYpL6HL1CKEb9N+JuHSVGehZpORBE
QkZWOVJzI7g1DoRn0Sm5GhTrBMCJ4/3ZKlXPrtGAPFyH4rv8I3fCndhDimiHr9d8
ItzrlvtQDCs3MlTg5Z4MAaqVYW3trWjsNF69ZjlSs/C8HwLM7N81g9dJbFDPGqYU
SmNJ6EUbbFjzyQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:48 2025 by rpki-client