Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: S0yYV5CEkJ/FtJpWbto1jiTRuILX92S3Qk7NdTUyNB0=
Subject key identifier: 5F:57:A3:B8:34:1D:22:61:F7:0D:B0:A6:C6:76:44:52:E7:2F:B7:3E
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 019A7112F28B1F57912817BDC47F1AEA304E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 1089
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: HHnJS5TxJvtQXV7csK1khQScKyiy/rqqvOh9+bje6pw=)
2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f2:8b:1f:57:91:28:17:bd:c4:7f:1a:ea:30:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=5f57a3b8341d2261f70db0a6c6764452e72fb73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:2b:7e:33:5c:d2:16:86:09:b5:54:0e:2a:
91:89:a7:35:0e:65:2d:94:dc:53:5a:96:c9:4c:54:
c0:27:d1:8f:59:70:09:1c:49:bb:fd:77:1e:d4:86:
76:08:47:6f:b2:0b:06:d4:d4:b2:32:a0:a4:c0:b1:
5c:74:c2:fc:1f:7b:0f:c5:9e:9c:00:e9:cc:bb:34:
e2:02:f0:f3:fd:df:4a:b3:2a:11:0b:9b:39:8a:47:
7b:55:7a:f1:57:4a:45:1b:a2:02:7a:24:8c:d8:e8:
2e:12:27:d1:c1:11:4d:89:b1:1b:4e:40:03:36:62:
4a:af:45:25:3b:17:2c:f3:1c:13:f0:f5:aa:de:47:
a3:ef:25:d5:22:bc:26:da:87:7f:36:b4:c1:77:71:
72:6f:8c:b3:c3:de:a6:78:c6:82:ac:99:a9:d3:af:
3f:32:70:4c:9c:7e:b1:6c:2a:90:75:6e:a1:1b:ab:
13:b2:1b:93:af:0e:60:ff:e5:43:56:06:9a:0b:72:
76:d0:cb:0a:54:af:4e:93:f0:b4:9a:74:a0:c3:a0:
d9:49:22:fb:61:aa:d8:27:53:43:4f:65:e2:30:21:
ca:2c:53:bf:a2:9f:c4:0a:f3:1b:9c:98:40:9d:5b:
e9:e9:be:fe:bb:e3:ab:0d:96:06:ce:7d:18:85:3d:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:57:A3:B8:34:1D:22:61:F7:0D:B0:A6:C6:76:44:52:E7:2F:B7:3E
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ae:58:e7:17:ce:04:27:f0:54:c0:d5:bd:4d:9a:26:a2:1d:
bb:16:63:05:21:ab:49:f1:7c:0d:16:37:87:87:96:77:92:de:
41:41:a2:89:4b:6e:9b:64:8b:c2:26:9f:68:56:2d:33:ca:60:
6b:03:d2:8c:a7:2f:d2:cc:39:25:c3:7d:50:f5:53:e5:37:20:
d0:48:1e:60:b7:25:c8:01:f7:08:c7:d4:4d:6c:1e:7a:76:c4:
20:77:39:e1:cd:28:51:b8:cc:1f:a3:bc:ba:40:26:7a:67:88:
56:60:70:72:d0:01:2f:05:ca:aa:2f:b8:76:88:5e:d7:9c:19:
8b:f6:ac:6e:b6:97:a3:dc:a0:29:08:6f:a5:a4:65:2f:d7:8a:
6c:1c:c5:fd:ad:fa:02:9b:39:c5:ae:31:dc:ce:78:9d:e8:13:
c0:60:d2:b3:9b:50:4c:bb:d9:52:98:4e:7e:32:3e:41:26:c0:
b7:cd:a3:4d:67:12:56:56:49:e4:12:55:be:68:6d:36:e9:05:
4a:2c:96:d7:55:be:24:c7:68:47:22:ce:0f:f9:3e:7f:3e:0d:
8b:3a:1d:cb:ad:40:ee:21:8d:81:e8:b1:12:35:95:45:ba:1b:
21:0e:04:d3:dd:68:e3:b3:25:ee:19:e1:59:c1:02:6c:82:e3:
de:ec:7c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEvKLH1eRKBe9xH8a6jBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2
ODI0ZjEwHhcNMjUxMTExMDQwMDU4WhcNMjUxMTEyMDQwMDU4WjAzMTEwLwYDVQQD
Eyg1ZjU3YTNiODM0MWQyMjYxZjcwZGIwYTZjNjc2NDQ1MmU3MmZiNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaorfjNc0haGCbVUDiqRiac1DmUt
lNxTWpbJTFTAJ9GPWXAJHEm7/Xce1IZ2CEdvsgsG1NSyMqCkwLFcdML8H3sPxZ6c
AOnMuzTiAvDz/d9KsyoRC5s5ikd7VXrxV0pFG6ICeiSM2OguEifRwRFNibEbTkAD
NmJKr0UlOxcs8xwT8PWq3kej7yXVIrwm2od/NrTBd3Fyb4yzw96meMaCrJmp068/
MnBMnH6xbCqQdW6hG6sTshuTrw5g/+VDVgaaC3J20MsKVK9Ok/C0mnSgw6DZSSL7
YarYJ1NDT2XiMCHKLFO/op/ECvMbnJhAnVvp6b7+u+OrDZYGzn0YhT2kbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9Xo7g0HSJh9w2wpsZ2RFLnL7c+MB8GA1UdIwQY
MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt
MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh
LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAca5Y5xfO
BCfwVMDVvU2aJqIduxZjBSGrSfF8DRY3h4eWd5LeQUGiiUtum2SLwiafaFYtM8pg
awPSjKcv0sw5JcN9UPVT5Tcg0EgeYLclyAH3CMfUTWweenbEIHc54c0oUbjMH6O8
ukAmemeIVmBwctABLwXKqi+4dohe15wZi/asbraXo9ygKQhvpaRlL9eKbBzF/a36
Aps5xa4x3M54negTwGDSs5tQTLvZUphOfjI+QSbAt82jTWcSVlZJ5BJVvmhtNukF
SiyW11W+JMdoRyLOD/k+fz4Nizody61A7iGNgeixEjWVRbobIQ4E091o47Ml7hnh
WcECbILj3ux8JQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:26 2025 by rpki-client