Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: kg3nMzdZJSNU2kQdDAaMSy5U9Pia9ISlgwwTBATt064=
Subject key identifier: F8:7D:A3:10:A1:A2:97:D5:DF:B7:8A:CA:11:4D:27:8A:29:82:1C:5F
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019A2EFBDB55CCBC0C25512A82B431C2A1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1188
Signing time: Wed 29 Oct 2025 08:00:48 +0000
Manifest this update: Wed 29 Oct 2025 08:00:48 +0000
Manifest next update: Thu 30 Oct 2025 08:00:48 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: C5UNPsEwHyu/5MaauHzqqQdTW61jZUnH0kUNLjRhnQw=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 07:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:db:55:cc:bc:0c:25:51:2a:82:b4:31:c2:a1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Oct 29 08:00:48 2025 GMT
Not After : Oct 30 08:00:48 2025 GMT
Subject: CN=f87da310a1a297d5dfb78aca114d278a29821c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:89:fa:f6:eb:cd:43:02:7b:74:e8:29:66:
dc:4a:d5:ac:a1:18:b0:ef:f2:e2:bf:e6:b3:a5:26:
38:2a:c6:1f:49:a7:5a:06:5d:8c:cd:e2:77:49:4f:
a3:ac:f0:ef:ef:d9:63:20:98:6b:a0:0b:32:21:11:
04:bd:84:7e:e5:5a:7b:73:b0:e9:3b:1a:7a:40:38:
f8:38:21:19:8f:72:63:2f:8c:4e:76:1b:82:c0:4d:
48:6e:0d:ff:88:95:ac:a7:14:44:55:18:16:a5:2d:
3f:c1:55:4d:11:8c:dc:1c:0c:78:bd:9b:f3:82:e2:
b2:ee:43:3a:b2:8a:50:cf:ae:68:09:96:02:05:d5:
b4:36:f6:58:ac:2b:56:45:33:88:f6:d7:a4:07:76:
6b:f8:87:75:7b:d1:4f:e2:c0:4a:7f:15:fa:cd:bc:
42:aa:99:ba:22:22:22:6c:ca:0d:ab:0e:21:43:5f:
46:9f:55:b2:bd:19:6e:a3:74:09:02:b9:96:be:cb:
44:66:42:14:33:dc:4b:4a:aa:d4:b1:bb:e0:87:53:
ac:3e:24:38:99:eb:f0:33:e7:99:8d:9f:c6:12:eb:
e3:78:a7:f3:57:0e:91:1c:e6:2e:09:9f:a3:00:d7:
a1:5e:22:f5:6d:12:ea:42:e4:a1:cc:65:4b:ad:e9:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:A3:10:A1:A2:97:D5:DF:B7:8A:CA:11:4D:27:8A:29:82:1C:5F
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d8:94:48:00:a1:8e:98:ec:5e:94:24:39:6f:49:d5:53:a5:
62:e3:79:ff:54:ff:df:89:ed:51:ba:e9:9e:be:b8:2a:52:19:
41:f7:3a:5a:ba:9c:71:0a:49:18:6d:cf:e8:8d:20:4b:03:08:
5c:a9:a5:9d:4a:d9:4d:c9:40:65:ea:09:74:7f:69:a8:ca:06:
58:67:91:c9:f1:9b:7f:11:d9:45:e1:61:82:49:6c:4f:39:26:
00:c8:1a:6e:52:c5:d3:2c:8e:47:a7:d4:ea:3e:14:af:a2:f3:
fc:a4:31:6b:bf:cc:d3:d5:87:0f:e2:d6:c2:6d:7d:fa:c5:8f:
48:5f:08:9b:53:73:7c:7d:fc:1a:43:79:52:05:b5:4b:00:60:
95:f2:ad:82:88:04:1d:3f:63:21:d3:09:d5:58:c7:32:40:3b:
1e:cc:cb:e8:a1:08:9a:01:39:6f:d6:eb:b4:f5:6d:b7:c4:52:
98:09:46:cc:74:5a:67:21:41:cb:ed:4e:57:36:6b:37:d8:e6:
8b:b3:03:83:f7:2b:7e:6a:63:56:a2:7b:a3:73:22:97:66:2a:
18:0c:ad:75:ec:c0:ca:50:95:8d:01:e6:41:12:f3:8a:40:bc:
10:ef:66:21:c5:c4:49:0a:fc:cc:1c:8b:f8:34:7b:b4:16:91:
de:30:16:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZou+9tVzLwMJVEqgrQxwqHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz
N2I0ZDAwHhcNMjUxMDI5MDgwMDQ4WhcNMjUxMDMwMDgwMDQ4WjAzMTEwLwYDVQQD
EyhmODdkYTMxMGExYTI5N2Q1ZGZiNzhhY2ExMTRkMjc4YTI5ODIxYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbKJ+vbrzUMCe3ToKWbcStWsoRiw
7/Liv+azpSY4KsYfSadaBl2MzeJ3SU+jrPDv79ljIJhroAsyIREEvYR+5Vp7c7Dp
Oxp6QDj4OCEZj3JjL4xOdhuCwE1Ibg3/iJWspxREVRgWpS0/wVVNEYzcHAx4vZvz
guKy7kM6sopQz65oCZYCBdW0NvZYrCtWRTOI9tekB3Zr+Id1e9FP4sBKfxX6zbxC
qpm6IiIibMoNqw4hQ19Gn1WyvRluo3QJArmWvstEZkIUM9xLSqrUsbvgh1OsPiQ4
mevwM+eZjZ/GEuvjeKfzVw6RHOYuCZ+jANehXiL1bRLqQuShzGVLrek3wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh9oxChopfV37eKyhFNJ4opghxfMB8GA1UdIwQY
MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt
MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl
LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdiUSACh
jpjsXpQkOW9J1VOlYuN5/1T/34ntUbrpnr64KlIZQfc6WrqccQpJGG3P6I0gSwMI
XKmlnUrZTclAZeoJdH9pqMoGWGeRyfGbfxHZReFhgklsTzkmAMgablLF0yyOR6fU
6j4Ur6Lz/KQxa7/M09WHD+LWwm19+sWPSF8Im1NzfH38GkN5UgW1SwBglfKtgogE
HT9jIdMJ1VjHMkA7HszL6KEImgE5b9brtPVtt8RSmAlGzHRaZyFBy+1OVzZrN9jm
i7MDg/crfmpjVqJ7o3Mil2YqGAytdezAylCVjQHmQRLzikC8EO9mIcXESQr8zByL
+DR7tBaR3jAWYA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:51:12 2025 by rpki-client