Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: hvgW3ZyRQq/80K5s/hkuxHb7YK6r/MZVUQloNFr2f8U=
Subject key identifier: 8E:C5:EA:52:B8:EC:D4:14:B2:AA:FF:96:3E:0B:1F:82:87:53:13:A2
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 019A71B7D1AB0546EA0BC7AEBB2F2D61B53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: BFukIbxEF5IfS2/0HTTlSHh0fwiXHrjnwQBSS4Ha2GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d1:ab:05:46:ea:0b:c7:ae:bb:2f:2d:61:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=8ec5ea52b8ecd414b2aaff963e0b1f82875313a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:51:5c:d4:4e:fe:28:5a:be:ff:4e:22:54:
e5:03:73:5d:a3:2e:37:09:2a:f8:63:64:d0:b9:d9:
db:ef:fc:e6:3c:ff:c7:c4:00:ae:0b:9a:bc:ec:51:
a1:d4:6e:8e:fe:83:c7:3b:40:4d:6f:1c:fc:1a:e9:
00:e5:60:4b:47:86:49:ef:ee:9d:57:eb:bf:3f:14:
72:87:72:3f:0f:fd:80:81:06:83:d7:99:3e:86:ba:
36:e1:79:bd:19:d4:1b:4c:9a:13:b0:b2:97:b4:27:
a7:60:e4:59:55:b1:15:40:97:bc:c0:5b:de:64:02:
a8:fd:d4:10:98:fb:c2:e1:4f:f4:8e:85:5a:f5:c6:
6c:f4:e7:3a:fd:8e:ba:eb:4f:99:d2:95:8b:41:2f:
af:b4:91:0a:3d:bd:6d:58:d9:da:d5:01:59:9d:9b:
c0:36:40:d7:93:77:5b:d9:07:0b:77:71:4f:08:5d:
94:fe:01:05:d0:2f:0b:99:a7:9a:85:9d:aa:8c:43:
e8:1a:f6:b3:77:f2:30:e7:21:ef:32:3a:67:c9:23:
cc:47:84:40:9d:95:46:08:ad:13:34:aa:06:20:2a:
dd:ac:cb:89:2f:5f:40:c2:e5:34:cc:fb:f0:ca:4e:
9f:71:c2:0b:53:99:1e:0d:a9:72:28:29:2f:f5:a5:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C5:EA:52:B8:EC:D4:14:B2:AA:FF:96:3E:0B:1F:82:87:53:13:A2
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a6:af:4d:05:c8:6f:c0:d8:f6:79:b8:16:11:7c:0a:52:25:
4f:8a:81:95:d8:c2:33:19:2a:d7:5d:68:71:15:a0:41:e9:f8:
ca:d9:92:ab:96:c8:76:b2:6c:49:3a:2a:2d:0c:24:01:15:91:
b0:bd:59:08:7f:40:80:79:8c:ad:38:20:ea:36:f3:10:23:af:
33:b4:d5:b9:9d:f8:26:43:11:95:b3:27:e0:34:33:49:4b:ab:
c6:8f:a1:02:6b:19:72:69:a2:a9:1d:7f:16:21:da:81:2e:58:
2e:3f:d4:23:18:47:0d:e5:e2:c4:25:06:3a:41:3f:70:2e:e6:
10:62:25:cc:0c:7d:40:9a:47:84:ac:c2:e7:e9:58:b9:97:b7:
dc:3f:0f:e0:b3:44:1e:c1:39:de:81:2d:9c:a3:d4:ea:4e:22:
ba:11:cc:ff:3a:3a:84:d7:77:89:cc:a7:21:a2:41:9e:e1:a4:
52:09:fd:ca:52:fd:e8:f8:b9:0a:aa:ad:8d:bf:e5:44:2b:0e:
c1:3d:61:ad:53:b0:a7:06:30:d4:52:a3:fe:dc:fb:9f:92:7c:
80:98:31:75:bc:52:0a:09:13:ad:a2:47:f4:c3:9e:8f:05:a2:
ee:3f:af:d7:d7:05:2a:c8:34:4f:13:39:25:21:5d:44:29:34:
3d:f3:04:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9GrBUbqC8euuy8tYbU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGQ3NDZlODE3NDc2ZDU1NzhmYmNiZWQ1NzRkN2MxYWQy
NjQxZjEwHhcNMjUxMTExMDcwMTAzWhcNMjUxMTEyMDcwMTAzWjAzMTEwLwYDVQQD
Eyg4ZWM1ZWE1MmI4ZWNkNDE0YjJhYWZmOTYzZTBiMWY4Mjg3NTMxM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUZRXNRO/ihavv9OIlTlA3Ndoy43
CSr4Y2TQudnb7/zmPP/HxACuC5q87FGh1G6O/oPHO0BNbxz8GukA5WBLR4ZJ7+6d
V+u/PxRyh3I/D/2AgQaD15k+hro24Xm9GdQbTJoTsLKXtCenYORZVbEVQJe8wFve
ZAKo/dQQmPvC4U/0joVa9cZs9Oc6/Y6660+Z0pWLQS+vtJEKPb1tWNna1QFZnZvA
NkDXk3db2QcLd3FPCF2U/gEF0C8LmaeahZ2qjEPoGvazd/Iw5yHvMjpnySPMR4RA
nZVGCK0TNKoGICrdrMuJL19AwuU0zPvwyk6fccILU5keDalyKCkv9aXTmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7F6lK47NQUsqr/lj4LH4KHUxOiMB8GA1UdIwQY
MBaAFOzddG6BdHbVV4+8vtV018GtJkHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEt
MjM4MzNmZTAwOWFhLzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEtMjM4MzNmZTAwOWFh
LzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6avTQXI
b8DY9nm4FhF8ClIlT4qBldjCMxkq111ocRWgQen4ytmSq5bIdrJsSToqLQwkARWR
sL1ZCH9AgHmMrTgg6jbzECOvM7TVuZ34JkMRlbMn4DQzSUurxo+hAmsZcmmiqR1/
FiHagS5YLj/UIxhHDeXixCUGOkE/cC7mEGIlzAx9QJpHhKzC5+lYuZe33D8P4LNE
HsE53oEtnKPU6k4iuhHM/zo6hNd3icynIaJBnuGkUgn9ylL96Pi5Cqqtjb/lRCsO
wT1hrVOwpwYw1FKj/tz7n5J8gJgxdbxSCgkTraJH9MOejwWi7j+v19cFKsg0TxM5
JSFdRCk0PfME9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:33 2025 by rpki-client