Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
File: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft (raw, json)
Hash identifier: 5f2JOFKmYc5AkFd9XDdMV9b/1BrU1+IAKYPreuHISeI=
Subject key identifier: A4:06:5F:C7:AC:90:FE:6F:5E:50:37:40:69:DF:E1:A6:53:92:EA:A4
Authority key identifier: EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F
Certificate issuer: /CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
Certificate serial: 019A71EEC47395F1D7571E5EBC52327CD5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
Manifest number: 03FF
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl (hash: ptd5MOHMeR9NNEC2sjyK/STyGhRDPOHbpzYUyflcJEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c4:73:95:f1:d7:57:1e:5e:bc:52:32:7c:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=a4065fc7ac90fe6f5e50374069dfe1a65392eaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:4f:9f:87:1a:51:b9:10:5b:8d:db:b5:28:
68:3f:88:80:de:35:eb:0e:5e:b9:8e:1e:64:99:8f:
b5:85:d3:f0:ab:e1:56:13:36:77:dd:55:1c:f9:b8:
6a:28:8f:65:77:35:44:f4:ab:28:2a:7e:93:9f:37:
ef:c5:af:3e:99:b3:89:c9:06:96:0a:a3:94:8b:f5:
57:22:70:81:1d:25:66:c1:0a:32:df:be:a4:ae:f3:
16:66:ac:0f:d7:ef:d2:a5:ab:eb:9d:3c:ec:31:2f:
b8:24:39:ae:e7:d4:d1:54:46:62:b5:bb:c9:c6:9c:
75:c1:4f:63:46:a5:90:c0:68:60:14:3c:51:c0:57:
07:6f:97:24:62:bc:94:68:e8:f5:c3:db:94:9c:ce:
a7:28:ce:59:80:e9:ad:a2:1d:91:9f:fc:e9:10:76:
67:d9:96:b7:f7:58:46:0b:b2:c1:42:ec:41:5b:4c:
d4:bb:ef:a8:61:7a:f4:92:97:55:9d:37:88:84:2c:
54:90:e4:9a:1e:0a:10:d3:9e:9a:a5:d8:27:60:1a:
3d:c9:c4:9d:51:10:31:14:e7:5f:bf:b3:4b:91:e8:
6b:5f:5c:ff:47:b5:3f:9a:b2:ae:d4:ae:5d:6c:e0:
c8:fb:26:71:74:8a:1a:d2:16:9b:b2:5c:28:95:55:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:06:5F:C7:AC:90:FE:6F:5E:50:37:40:69:DF:E1:A6:53:92:EA:A4
X509v3 Authority Key Identifier:
keyid:EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:83:b3:98:55:84:87:74:02:48:b0:8c:5a:3c:11:38:38:
29:01:fe:6d:09:31:6b:6f:76:c4:db:f1:2b:a5:47:b5:10:c1:
73:6d:31:f6:5d:a4:f0:7d:46:b5:50:34:18:50:53:90:e1:b3:
4f:b4:4f:f1:a1:59:6e:1f:a6:de:fa:b3:a3:5c:5e:84:21:ef:
87:e2:2d:8a:f3:60:f5:86:a4:b1:33:b8:3b:fd:3a:a3:87:ef:
e3:7b:a1:a1:ca:0d:b3:cc:fc:a9:a0:d7:77:54:66:f0:c5:f2:
35:8b:71:6a:16:db:4f:19:9d:91:a9:47:2e:a8:e8:e6:f7:d0:
97:65:4b:5c:e7:0f:23:a5:5b:cd:25:b5:42:6e:73:c8:25:ca:
72:55:00:89:77:e7:e6:34:1b:ac:2b:01:43:8b:1e:d4:1e:2c:
71:fa:96:c0:98:21:ef:22:7b:23:4a:18:8d:67:ba:52:24:eb:
b6:7b:bc:d3:22:32:69:32:bc:aa:18:c5:eb:c8:b7:ec:31:8e:
ed:55:42:76:4e:d3:d1:74:a8:22:70:b1:67:3e:ed:94:2c:5a:
16:18:15:5f:5a:e7:bb:b6:e2:3b:df:d9:74:df:36:3d:0a:cd:
f9:34:70:fe:cd:c8:50:cf:59:f1:40:16:95:f9:bb:a2:42:f3:
85:22:7e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sRzlfHXVx5evFIyfNXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGZkMTNhZGNiOWM1NWVkOWNlZWZkMGQwZjZmOWI0MTY5
NTcyM2YwHhcNMjUxMTExMDgwMTA0WhcNMjUxMTEyMDgwMTA0WjAzMTEwLwYDVQQD
EyhhNDA2NWZjN2FjOTBmZTZmNWU1MDM3NDA2OWRmZTFhNjUzOTJlYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY9Pn4caUbkQW43btShoP4iA3jXr
Dl65jh5kmY+1hdPwq+FWEzZ33VUc+bhqKI9ldzVE9KsoKn6Tnzfvxa8+mbOJyQaW
CqOUi/VXInCBHSVmwQoy376krvMWZqwP1+/SpavrnTzsMS+4JDmu59TRVEZitbvJ
xpx1wU9jRqWQwGhgFDxRwFcHb5ckYryUaOj1w9uUnM6nKM5ZgOmtoh2Rn/zpEHZn
2Za391hGC7LBQuxBW0zUu++oYXr0kpdVnTeIhCxUkOSaHgoQ056apdgnYBo9ycSd
URAxFOdfv7NLkehrX1z/R7U/mrKu1K5dbODI+yZxdIoa0habslwolVVkJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQGX8eskP5vXlA3QGnf4aZTkuqkMB8GA1UdIwQY
MBaAFO8P0TrcucVe2c7v0ND2+bQWlXI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Nzk1Y2MtMzcwMC00YWEwLWExZWQt
YTZkOTRiZjI0NGI0LzEvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85Nzk1Y2MtMzcwMC00YWEwLWExZWQtYTZkOTRiZjI0NGI0
LzEvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdyDs5hV
hId0AkiwjFo8ETg4KQH+bQkxa292xNvxK6VHtRDBc20x9l2k8H1GtVA0GFBTkOGz
T7RP8aFZbh+m3vqzo1xehCHvh+ItivNg9YaksTO4O/06o4fv43uhocoNs8z8qaDX
d1Rm8MXyNYtxahbbTxmdkalHLqjo5vfQl2VLXOcPI6VbzSW1Qm5zyCXKclUAiXfn
5jQbrCsBQ4se1B4scfqWwJgh7yJ7I0oYjWe6UiTrtnu80yIyaTK8qhjF68i37DGO
7VVCdk7T0XSoInCxZz7tlCxaFhgVX1rnu7biO9/ZdN82PQrN+TRw/s3IUM9Z8UAW
lfm7okLzhSJ+5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:49 2025 by rpki-client