Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: /+D0QZwuKWj3ZwI7ksy00vzTvYVCgnkxXSHq74XpB2s=
Subject key identifier: 92:31:B8:6E:1A:CE:E5:B2:A3:8D:CF:76:E6:96:41:AC:54:83:40:0F
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 019A228A5D1699C2703969B7EEE5B46A3502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:01:24 +0000
Manifest this update: Sun 26 Oct 2025 22:01:24 +0000
Manifest next update: Mon 27 Oct 2025 22:01:24 +0000
Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: 5zpnJAMGEvzu0OwXVMJpXoaReGhUbgktbuH52F/tLI0=)
4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:5d:16:99:c2:70:39:69:b7:ee:e5:b4:6a:35:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Oct 26 22:01:24 2025 GMT
Not After : Oct 27 22:01:24 2025 GMT
Subject: CN=9231b86e1acee5b2a38dcf76e69641ac5483400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:55:22:38:82:a1:59:dc:c6:77:18:94:58:
1e:eb:6d:8a:7f:93:79:4c:ea:68:8c:2f:2d:d8:e4:
10:6e:a3:51:0f:97:cf:b0:43:c8:c0:bf:a3:1b:9f:
30:52:e4:40:11:0c:87:cf:0f:09:fa:fc:aa:92:5e:
9c:5a:17:70:d0:4c:2a:ca:ef:86:e3:43:87:58:ec:
a8:d6:8e:71:d3:e6:d4:a8:fd:1d:76:b3:44:ae:5b:
f6:84:63:0c:3a:db:a1:3d:9d:20:2e:c9:4b:ba:4b:
20:64:2c:0b:1a:da:5b:ef:07:04:5e:7d:ef:52:72:
87:36:d1:5a:bf:81:93:67:82:b3:c9:82:ed:ab:27:
9b:46:08:68:7d:9d:92:38:03:e5:a6:85:4e:82:92:
d9:d5:0f:7c:80:ed:38:ff:af:5f:b1:4f:61:9a:1c:
82:68:35:01:94:98:9c:8b:74:53:aa:07:87:ba:43:
e2:20:52:5d:b0:a7:af:78:3a:53:a7:93:15:2a:76:
2d:f3:9b:7c:92:56:3e:fa:ed:4f:46:98:3f:f5:6c:
f4:01:0f:2b:81:f3:ae:f8:31:96:9a:dc:c6:c4:74:
45:a6:73:b3:3a:0a:3b:79:30:5b:63:0d:3a:25:4d:
73:86:45:0a:a2:6c:19:71:07:aa:5d:85:e0:b2:2b:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:B8:6E:1A:CE:E5:B2:A3:8D:CF:76:E6:96:41:AC:54:83:40:0F
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:44:08:ba:ed:9b:c7:3a:3f:05:8c:9f:20:cb:cb:25:d3:30:
3d:ed:28:af:17:3b:fe:2b:d2:85:0e:50:35:99:7a:0f:c4:1f:
6a:a3:65:82:b5:e9:94:d6:17:a2:36:14:ee:67:6f:70:af:07:
24:5a:6e:42:f7:14:e6:1f:1c:a0:d2:83:c4:cb:15:cc:3c:f6:
46:20:48:8a:2a:d2:24:3a:14:0e:28:1b:7e:b4:14:a7:d3:d0:
2f:df:ec:ec:67:ef:c4:a1:cd:b3:bf:27:50:59:30:df:c1:99:
fa:8e:2a:5a:d1:d8:7b:23:4a:bc:6f:4c:22:96:ed:ed:77:75:
db:d8:cd:39:4e:02:ed:f8:23:42:e2:35:90:d0:ec:cd:b5:c5:
4e:be:4b:0f:cc:80:d0:12:95:a1:99:f7:6e:c5:23:e4:fc:7e:
89:ef:5c:a3:fd:a0:e1:9c:19:53:79:cc:b0:a4:7a:c8:55:1b:
81:97:6f:55:67:d3:5f:52:29:00:40:8c:86:49:2e:fd:21:72:
de:b4:1c:9c:4f:f6:29:73:cf:fd:86:99:ce:ef:fa:91:18:d3:
6a:a0:34:9d:2f:20:66:2d:07:31:6d:06:cb:ed:44:15:71:c8:
72:29:77:75:be:d1:9f:20:c7:af:60:f1:83:47:11:b1:df:bd:
f2:28:dd:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiil0WmcJwOWm37uW0ajUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjVkMzE0NDBiZjc1ZDI1YzYwNmY3OTE1YzIzNmNhNjE0
NDY0YTIwHhcNMjUxMDI2MjIwMTI0WhcNMjUxMDI3MjIwMTI0WjAzMTEwLwYDVQQD
Eyg5MjMxYjg2ZTFhY2VlNWIyYTM4ZGNmNzZlNjk2NDFhYzU0ODM0MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZJVIjiCoVncxncYlFge622Kf5N5
TOpojC8t2OQQbqNRD5fPsEPIwL+jG58wUuRAEQyHzw8J+vyqkl6cWhdw0Ewqyu+G
40OHWOyo1o5x0+bUqP0ddrNErlv2hGMMOtuhPZ0gLslLuksgZCwLGtpb7wcEXn3v
UnKHNtFav4GTZ4KzyYLtqyebRghofZ2SOAPlpoVOgpLZ1Q98gO04/69fsU9hmhyC
aDUBlJici3RTqgeHukPiIFJdsKeveDpTp5MVKnYt85t8klY++u1PRpg/9Wz0AQ8r
gfOu+DGWmtzGxHRFpnOzOgo7eTBbYw06JU1zhkUKomwZcQeqXYXgsivsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIxuG4azuWyo43PduaWQaxUg0APMB8GA1UdIwQY
MBaAFOxl0xRAv3XSXGBveRXCNsphRGSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzkt
ZTI5NTg5ZTg5NjRhLzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzktZTI5NTg5ZTg5NjRh
LzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskQIuu2b
xzo/BYyfIMvLJdMwPe0orxc7/ivShQ5QNZl6D8QfaqNlgrXplNYXojYU7mdvcK8H
JFpuQvcU5h8coNKDxMsVzDz2RiBIiirSJDoUDigbfrQUp9PQL9/s7GfvxKHNs78n
UFkw38GZ+o4qWtHYeyNKvG9MIpbt7Xd129jNOU4C7fgjQuI1kNDszbXFTr5LD8yA
0BKVoZn3bsUj5Px+ie9co/2g4ZwZU3nMsKR6yFUbgZdvVWfTX1IpAECMhkku/SFy
3rQcnE/2KXPP/YaZzu/6kRjTaqA0nS8gZi0HMW0Gy+1EFXHIcil3db7RnyDHr2Dx
g0cRsd+98ijdDw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:24:38 2025 by rpki-client