Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: MSr2/b8Cst31iZkJJQN6vbgfStSohxkHx6f/llDfEso=
Subject key identifier: D1:BF:E0:CB:08:B2:C6:EC:2E:77:BB:60:89:43:FD:85:6E:C5:EA:98
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 019A210938915E29B6F03CECA88FCFEFAC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 15:00:43 +0000
Manifest this update: Sun 26 Oct 2025 15:00:43 +0000
Manifest next update: Mon 27 Oct 2025 15:00:43 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: YQXLd8ghQ3RRi72KiMTRb1lv1fABzF8tELjtghke3uM=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:38:91:5e:29:b6:f0:3c:ec:a8:8f:cf:ef:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Oct 26 15:00:43 2025 GMT
Not After : Oct 27 15:00:43 2025 GMT
Subject: CN=d1bfe0cb08b2c6ec2e77bb608943fd856ec5ea98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:12:fa:98:03:cf:ab:9a:26:01:71:bb:ab:
ce:52:78:e1:4f:68:64:f4:b4:88:0f:ea:79:53:05:
91:be:b8:da:98:5a:cf:79:f5:9b:a2:7d:53:a7:4e:
a0:3d:f2:70:b4:90:7e:24:67:ec:e3:59:24:d2:19:
a7:20:a2:a5:16:6e:11:e8:94:d6:03:69:8f:8a:7f:
44:39:6e:73:45:10:47:39:4b:6e:2b:bd:fe:57:7e:
18:0d:c7:90:e7:dd:52:2b:e1:9d:f1:1d:ce:06:d4:
74:5e:2a:78:50:5f:b4:be:6c:bb:c0:51:fb:67:1f:
c8:71:fe:29:dc:c4:8b:dd:16:1b:f8:aa:c8:d6:a4:
ab:09:4b:9f:cc:14:a8:e4:8d:04:2e:60:1e:36:6a:
69:2f:9b:89:01:81:19:4f:56:a4:74:d2:b0:c0:40:
11:43:4c:67:a0:9f:5a:dc:aa:32:93:c6:fe:2e:91:
a2:9f:47:09:82:9a:d2:14:2d:df:67:96:e9:09:43:
a4:0c:03:9c:e7:b3:a2:2a:5d:30:f0:7f:ab:11:14:
22:07:5d:a4:f6:74:d4:5a:f5:23:bb:bd:c2:fd:ff:
9a:cd:dc:58:6d:d3:3a:6a:11:dc:af:c4:43:9c:95:
9e:d5:03:3c:57:52:f6:bd:bd:17:b3:9a:10:e2:d0:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BF:E0:CB:08:B2:C6:EC:2E:77:BB:60:89:43:FD:85:6E:C5:EA:98
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:84:13:1b:ed:70:42:32:ac:d4:7f:5b:61:b0:c3:00:c5:
7a:9b:8c:c9:6d:5c:32:f5:4e:ec:6c:c3:0e:43:c5:12:75:e9:
44:82:c1:98:f3:d0:42:c4:d5:25:f2:af:9a:90:69:02:c8:53:
ca:0d:fb:31:38:b8:67:46:54:6b:9a:2f:14:2e:3e:c8:57:5a:
d5:05:b1:50:c7:c1:0e:d0:04:9c:c9:b5:46:00:8f:68:9e:bb:
c8:3e:05:d6:c4:b4:bd:8e:06:a3:53:c8:b6:54:89:87:2b:2d:
da:d3:35:8e:e4:4b:30:2a:27:ff:13:fe:a3:e0:9b:ab:7b:72:
bf:2c:c6:77:95:b7:1f:7a:af:ce:bd:4a:5a:7c:4f:10:ba:2b:
88:72:61:39:5e:d9:62:01:c6:a0:af:2a:e1:77:4e:41:bb:cc:
0c:78:28:90:fd:65:71:04:80:da:c7:7a:dd:8e:d1:57:cc:3c:
ca:89:ba:3c:4b:3f:a6:17:a1:a1:19:c0:c2:2c:cd:49:32:2a:
6c:63:d9:14:e9:d7:a5:7b:12:4e:30:29:16:e6:6d:c3:fd:ea:
3e:09:16:5f:a7:4a:f1:84:82:85:dc:49:00:8b:54:2a:ef:99:
5e:82:ba:90:f4:75:53:52:2f:49:97:70:2f:46:91:9a:98:c8:
94:4f:52:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCTiRXim28DzsqI/P76xtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw
ZmRlZWQwHhcNMjUxMDI2MTUwMDQzWhcNMjUxMDI3MTUwMDQzWjAzMTEwLwYDVQQD
EyhkMWJmZTBjYjA4YjJjNmVjMmU3N2JiNjA4OTQzZmQ4NTZlYzVlYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUsS+pgDz6uaJgFxu6vOUnjhT2hk
9LSID+p5UwWRvrjamFrPefWbon1Tp06gPfJwtJB+JGfs41kk0hmnIKKlFm4R6JTW
A2mPin9EOW5zRRBHOUtuK73+V34YDceQ591SK+Gd8R3OBtR0Xip4UF+0vmy7wFH7
Zx/Icf4p3MSL3RYb+KrI1qSrCUufzBSo5I0ELmAeNmppL5uJAYEZT1akdNKwwEAR
Q0xnoJ9a3Koyk8b+LpGin0cJgprSFC3fZ5bpCUOkDAOc57OiKl0w8H+rERQiB12k
9nTUWvUju73C/f+azdxYbdM6ahHcr8RDnJWe1QM8V1L2vb0Xs5oQ4tD1FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNG/4MsIssbsLne7YIlD/YVuxeqYMB8GA1UdIwQY
MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt
MzgxNGM1N2ZlOWJiLzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi
LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUKEExvt
cEIyrNR/W2GwwwDFepuMyW1cMvVO7GzDDkPFEnXpRILBmPPQQsTVJfKvmpBpAshT
yg37MTi4Z0ZUa5ovFC4+yFda1QWxUMfBDtAEnMm1RgCPaJ67yD4F1sS0vY4Go1PI
tlSJhyst2tM1juRLMCon/xP+o+Cbq3tyvyzGd5W3H3qvzr1KWnxPELoriHJhOV7Z
YgHGoK8q4XdOQbvMDHgokP1lcQSA2sd63Y7RV8w8yom6PEs/phehoRnAwizNSTIq
bGPZFOnXpXsSTjApFuZtw/3qPgkWX6dK8YSChdxJAItUKu+ZXoK6kPR1U1IvSZdw
L0aRmpjIlE9Slw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:37:39 2025 by rpki-client