Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier: BkNshBRwhlQnKcvVy2RyhtJzde1o+yC0rFas93vwDmw=
Subject key identifier: 7E:26:F3:C8:33:18:0B:2F:7B:08:EE:83:B7:D0:59:E4:64:CD:88:CD
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 019A722588CB87D04F2E096AD22E0B0528B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number: 1264
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: RFSk70xV+zisPulFrRPzGNM4ctbF+f2hQfg9r+DecxM=)
2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:88:cb:87:d0:4f:2e:09:6a:d2:2e:0b:05:28:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=7e26f3c833180b2f7b08ee83b7d059e464cd88cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:63:d9:2f:5e:da:d1:c6:3a:2d:2a:fc:e5:
b5:ce:87:70:13:3b:64:b2:2a:fd:da:78:1a:a5:bc:
3f:71:cc:6d:98:30:ab:25:78:e2:ca:d3:50:9f:c4:
60:6d:2e:9b:da:c4:d6:ef:e2:d1:c7:db:15:48:66:
9d:50:dd:46:6f:47:f2:0a:94:f1:44:6f:13:82:f5:
bb:7a:f5:5b:27:75:3b:1b:63:07:c2:05:83:8d:20:
26:f4:07:54:45:4a:ad:49:66:dd:bb:f3:f9:10:ce:
1b:f2:ca:3e:ac:2a:02:8b:45:f0:e1:e9:77:b0:4d:
de:99:48:ea:2e:c6:79:54:e0:3d:6d:25:05:02:cb:
b9:35:25:02:9a:50:e6:91:16:04:f1:50:26:a9:32:
cf:7c:dd:90:ce:5c:e6:23:a9:34:20:2a:19:88:4a:
93:20:e1:d7:31:a7:0e:83:45:cc:62:a1:70:cd:96:
5a:b0:e7:b4:32:60:02:be:e1:23:ba:8a:ed:5a:d0:
db:98:f5:4e:d7:1c:b0:27:0b:36:4d:68:00:96:23:
df:39:aa:8e:c0:ea:10:ca:2a:65:99:b6:73:69:ab:
16:20:95:0e:bc:6d:32:36:cd:4e:6f:fc:e1:7c:fa:
5d:98:4e:67:26:f5:77:b5:b7:14:3e:f8:92:f2:68:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:26:F3:C8:33:18:0B:2F:7B:08:EE:83:B7:D0:59:E4:64:CD:88:CD
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:60:e5:9a:7f:8d:e3:b1:81:81:f7:7a:bf:40:e8:d6:1d:
7f:ad:58:ff:8b:3b:10:d5:67:15:a8:cd:69:92:c1:a6:c7:5b:
1f:66:0e:99:fb:fe:09:91:a3:af:4f:cb:b6:a2:8d:48:4b:4e:
4e:1a:b1:2c:3b:9d:7a:c8:7a:d8:6e:ab:95:2c:34:35:36:c2:
46:be:a4:76:61:1d:94:29:c0:11:1a:3d:56:a3:ab:f2:b1:11:
04:dd:61:9e:52:4e:4f:23:44:84:6f:a6:02:27:b5:bd:8d:5c:
19:bf:42:cb:96:b5:9a:08:ee:24:46:60:98:43:4b:db:b5:c3:
a2:ad:e6:4c:6d:ff:35:88:8b:78:36:8a:77:a3:fd:9e:a3:e5:
12:b1:d2:d0:75:64:aa:fe:28:57:d3:4a:26:8f:aa:9a:54:46:
0a:97:ca:07:fb:e2:3d:22:9c:51:17:8f:e5:b6:75:22:75:9e:
18:aa:62:0a:af:eb:b3:f0:e7:43:bd:0b:3b:fb:b1:ee:45:d0:
19:e0:9b:2c:c7:71:b7:90:dc:c8:be:3e:b5:08:f8:b0:c2:46:
35:a3:c5:53:b9:cc:64:b8:2a:20:ef:82:3c:08:ce:8a:0e:ca:
49:a9:87:fc:3d:61:6c:0c:e2:41:3c:ee:fb:a9:44:70:1a:69:
5d:4f:95:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJYjLh9BPLglq0i4LBSi2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOGZmOTZlYWUyZDQ0OGVjNzg0OWQxNzNiNTUyZjE1ZjBm
NzA0YzEwHhcNMjUxMTExMDkwMDUzWhcNMjUxMTEyMDkwMDUzWjAzMTEwLwYDVQQD
Eyg3ZTI2ZjNjODMzMTgwYjJmN2IwOGVlODNiN2QwNTllNDY0Y2Q4OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bZj2S9e2tHGOi0q/OW1zodwEztk
sir92ngapbw/ccxtmDCrJXjiytNQn8RgbS6b2sTW7+LRx9sVSGadUN1Gb0fyCpTx
RG8TgvW7evVbJ3U7G2MHwgWDjSAm9AdURUqtSWbdu/P5EM4b8so+rCoCi0Xw4el3
sE3emUjqLsZ5VOA9bSUFAsu5NSUCmlDmkRYE8VAmqTLPfN2QzlzmI6k0ICoZiEqT
IOHXMacOg0XMYqFwzZZasOe0MmACvuEjuortWtDbmPVO1xywJws2TWgAliPfOaqO
wOoQyiplmbZzaasWIJUOvG0yNs1Ob/zhfPpdmE5nJvV3tbcUPviS8mim0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4m88gzGAsvewjug7fQWeRkzYjNMB8GA1UdIwQY
MBaAFOyP+W6uLUSOx4SdFztVLxXw9wTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMt
NmYxYzk3NGU4NjM3LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMtNmYxYzk3NGU4NjM3
LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyJg5Zp/
jeOxgYH3er9A6NYdf61Y/4s7ENVnFajNaZLBpsdbH2YOmfv+CZGjr0/LtqKNSEtO
ThqxLDudesh62G6rlSw0NTbCRr6kdmEdlCnAERo9VqOr8rERBN1hnlJOTyNEhG+m
Aie1vY1cGb9Cy5a1mgjuJEZgmENL27XDoq3mTG3/NYiLeDaKd6P9nqPlErHS0HVk
qv4oV9NKJo+qmlRGCpfKB/viPSKcUReP5bZ1InWeGKpiCq/rs/DnQ70LO/ux7kXQ
GeCbLMdxt5DcyL4+tQj4sMJGNaPFU7nMZLgqIO+CPAjOig7KSamH/D1hbAziQTzu
+6lEcBppXU+V6Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:27:01 2025 by rpki-client