Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: cVtqVOG63bwkLjMPoI7S6KGSxA/YqiFqb5IyXwnZIz8=
Subject key identifier: 2F:49:98:0C:D0:87:15:5B:A7:9D:C4:48:16:98:7D:B0:C7:51:6A:DD
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 019A71EEA5810877EF8209BD27955FC8C5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 0BE9
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: ETVPLHc_dvqJDflGIPJgHzJaWt8.roa (hash: Jimm5bhH1qmUZnAAKaN20vij/bbKy4j6GEesqJVn7gk=)
2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: YuxwyRbM9lzi7p1e7Sh+hKdX8atq/W5dEKwz10TETqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a5:81:08:77:ef:82:09:bd:27:95:5f:c8:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=2f49980cd087155ba79dc44816987db0c7516add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:d8:7c:55:dd:7c:87:da:2d:17:17:91:62:
8e:38:71:98:79:21:ad:20:ed:c0:bd:90:c7:99:7b:
df:5b:96:01:95:71:b3:00:7f:66:72:01:15:60:95:
49:9c:b6:7d:ca:f8:52:bd:f5:c0:c7:15:75:d7:d7:
66:c9:36:70:cd:10:2a:a7:0f:f1:74:b8:c0:af:ab:
55:0d:df:bb:ee:a5:0a:db:60:fd:27:aa:c0:4e:1d:
fc:3a:80:a3:c9:27:15:14:7c:32:cf:99:81:80:7c:
9e:4b:8a:8e:90:f6:3d:ab:c6:de:d2:f1:b7:68:0e:
8d:8b:2f:0d:9d:31:60:3a:9c:ef:08:fd:db:2e:8b:
23:bf:1c:d7:0c:5e:94:64:57:0d:9e:36:fd:29:30:
58:93:69:6c:f9:e3:86:ea:1d:e9:23:8e:e9:70:32:
53:8a:d7:b4:ed:20:f0:8c:c9:30:41:57:34:da:4f:
5f:3b:e2:81:2b:ab:cf:1c:85:bb:d7:a0:07:c0:44:
2c:03:54:3d:94:bd:69:02:e8:85:c7:09:e7:0d:10:
5e:68:63:4e:88:17:50:ff:78:05:25:54:68:85:c0:
da:4a:1d:26:4b:ff:ec:58:70:2d:67:01:18:70:af:
ea:43:37:1f:ad:61:72:3a:42:82:d3:60:7c:8f:03:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:49:98:0C:D0:87:15:5B:A7:9D:C4:48:16:98:7D:B0:C7:51:6A:DD
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:0b:7f:c2:94:0b:47:f8:66:8b:3c:ac:58:a0:25:24:9e:
b5:c0:4d:46:4d:6a:1c:02:c2:a4:64:07:2f:ea:dc:64:bc:0a:
1e:66:e4:3f:33:15:8f:47:a5:fe:7c:09:1a:e5:ba:1f:a0:12:
62:e7:f7:9b:ef:80:93:f7:37:70:86:f3:05:bd:7c:ac:44:88:
43:8a:b9:25:48:c7:92:8e:b4:7d:91:8f:0b:55:26:9b:47:70:
e6:45:3b:09:76:49:9b:1e:ae:52:84:a4:c2:f4:2e:dd:f5:b2:
77:6f:49:da:30:40:d8:48:4f:8d:de:d6:19:d3:c7:0c:ee:60:
54:b7:f1:05:33:94:79:af:98:af:d6:12:e3:e8:8f:a1:44:38:
23:4c:a2:95:09:ce:eb:ec:26:c2:97:95:0b:e6:f5:d7:69:5e:
aa:39:07:8f:9e:21:97:5f:aa:ed:9a:1d:a2:99:1a:9a:ab:9a:
48:b1:8c:27:ea:2e:9f:39:68:40:15:34:e3:28:f3:cf:83:9b:
2f:f6:b5:0f:8e:b7:48:0a:1b:d4:0d:ff:fd:a6:66:10:72:2b:
d9:dc:8a:78:c8:8a:29:3c:a0:2f:7a:58:16:3d:b5:93:fe:8f:
cd:c4:8b:db:df:74:5e:07:0e:6f:37:12:ca:db:10:33:6b:ab:
8c:be:3c:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qWBCHfvggm9J5VfyMW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjkzMTM3NTNiYzA5MzFhZjQzOTNkYmRhMDA5YjBmZjQ1
ZWM3YzIwHhcNMjUxMTExMDgwMDU2WhcNMjUxMTEyMDgwMDU2WjAzMTEwLwYDVQQD
EygyZjQ5OTgwY2QwODcxNTViYTc5ZGM0NDgxNjk4N2RiMGM3NTE2YWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAjYfFXdfIfaLRcXkWKOOHGYeSGt
IO3AvZDHmXvfW5YBlXGzAH9mcgEVYJVJnLZ9yvhSvfXAxxV119dmyTZwzRAqpw/x
dLjAr6tVDd+77qUK22D9J6rATh38OoCjyScVFHwyz5mBgHyeS4qOkPY9q8be0vG3
aA6Niy8NnTFgOpzvCP3bLosjvxzXDF6UZFcNnjb9KTBYk2ls+eOG6h3pI47pcDJT
ite07SDwjMkwQVc02k9fO+KBK6vPHIW716AHwEQsA1Q9lL1pAuiFxwnnDRBeaGNO
iBdQ/3gFJVRohcDaSh0mS//sWHAtZwEYcK/qQzcfrWFyOkKC02B8jwPEdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9JmAzQhxVbp53ESBaYfbDHUWrdMB8GA1UdIwQY
MBaAFIe5MTdTvAkxr0OT29oAmw/0XsfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODIt
N2Q2ODM2NmI1OWI3LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODItN2Q2ODM2NmI1OWI3
LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgy4Lf8KU
C0f4Zos8rFigJSSetcBNRk1qHALCpGQHL+rcZLwKHmbkPzMVj0el/nwJGuW6H6AS
Yuf3m++Ak/c3cIbzBb18rESIQ4q5JUjHko60fZGPC1Umm0dw5kU7CXZJmx6uUoSk
wvQu3fWyd29J2jBA2EhPjd7WGdPHDO5gVLfxBTOUea+Yr9YS4+iPoUQ4I0yilQnO
6+wmwpeVC+b112leqjkHj54hl1+q7ZodopkamquaSLGMJ+ounzloQBU04yjzz4Ob
L/a1D463SAob1A3//aZmEHIr2dyKeMiKKTygL3pYFj21k/6PzcSL2990XgcObzcS
ytsQM2urjL48Ig==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client