Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: 5+pzP2/kLbtTGn3Zl0ulApksz8unbg9b4qH/tIkSFuk=
Subject key identifier: 81:8A:27:FF:71:D0:B7:50:70:18:DE:1C:BB:33:70:1C:B9:8F:F1:51
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 019A7293AB9ED89D17FDC0FB4E3B4E95B6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: pco8J+zafa1xjy3231ZUaDKymm17dLaNL34nZ0dk9FU=)
2: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (hash: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ab:9e:d8:9d:17:fd:c0:fb:4e:3b:4e:95:b6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=818a27ff71d0b7507018de1cbb33701cb98ff151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:52:08:a6:d5:8e:ea:44:32:d0:8e:d5:24:5f:
9e:14:3a:f7:52:1c:52:9c:50:3f:71:17:c0:6a:a5:
9c:b3:58:bc:b4:bb:4e:36:94:05:8e:1d:bd:2c:a9:
1c:f0:65:dc:75:e2:ec:bb:fd:6b:d7:35:09:27:da:
31:ee:4f:f3:bd:d5:37:63:9a:6d:b5:a6:ac:17:37:
0a:f6:9b:65:4f:a2:01:03:43:44:7d:5e:32:65:5f:
61:0b:f1:76:0c:3c:65:42:72:90:23:a7:bc:10:b3:
1c:e9:55:c2:54:ed:59:ca:6a:43:9b:2e:f2:97:4c:
30:17:5f:55:3b:ba:9d:cb:9b:f3:f0:e9:9a:ae:d6:
01:47:20:a5:cc:a4:13:46:98:f0:5c:a7:b7:12:43:
b1:3f:1c:19:36:6f:ca:cb:f7:56:42:16:3a:dc:0f:
98:02:d0:3e:d3:8b:d8:96:5d:e0:e9:af:4c:99:14:
23:db:a0:d6:6d:80:09:1e:49:a6:e5:3b:5f:3d:76:
a1:e5:7d:24:73:96:a0:c8:4a:5e:ef:96:e7:ad:01:
dc:e8:cd:ef:f9:e3:09:45:b3:0a:e8:4a:8d:3a:54:
30:d4:2e:52:97:0f:09:22:42:64:e8:59:a2:2b:a0:
43:a0:f7:72:85:83:a9:11:a7:f6:f4:fc:90:1a:cc:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:27:FF:71:D0:B7:50:70:18:DE:1C:BB:33:70:1C:B9:8F:F1:51
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:0d:70:01:7e:40:8a:3a:19:ba:2d:f6:59:e5:c3:5d:b8:
3c:9e:54:a2:b6:ef:ac:e6:17:8c:dc:2f:72:64:1a:72:ef:65:
8b:16:41:82:9f:a2:6f:1f:e1:16:4b:36:49:6b:26:28:c3:1c:
25:85:2d:5a:78:a9:e5:ca:de:98:fd:b0:3b:06:38:21:13:51:
0a:1c:86:e4:f4:55:e5:d5:c9:b7:ce:9e:35:c2:00:f7:93:cf:
c2:8e:6f:0b:87:ff:ef:da:1a:61:07:0d:d5:da:ec:c6:32:59:
cc:cf:25:e9:fa:6d:ac:e9:40:d0:dc:54:e0:6a:4b:35:99:79:
2b:8d:e6:89:67:27:02:08:0b:b7:9d:4b:08:0a:98:b6:01:32:
80:8b:6e:85:90:09:20:0c:7d:44:ff:c1:f8:f4:d0:80:14:11:
1b:46:9f:99:80:3b:a4:57:5e:86:38:57:03:88:ac:84:49:ec:
36:d1:a1:2a:d5:29:bf:d1:9f:62:d5:d9:37:cf:e5:20:61:2f:
04:36:b8:e8:fd:93:1c:48:54:e2:ba:a6:01:32:68:b1:3f:89:
f9:e8:de:59:c3:a9:de:5b:ca:01:bc:ec:32:e1:b1:7e:13:8a:
dd:88:5f:a5:ff:5a:83:e8:4a:0e:ee:66:76:32:1e:dc:39:16:
2c:54:d5:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk6ue2J0X/cD7TjtOlbbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj
M2M5OTAwHhcNMjUxMTExMTEwMTExWhcNMjUxMTEyMTEwMTExWjAzMTEwLwYDVQQD
Eyg4MThhMjdmZjcxZDBiNzUwNzAxOGRlMWNiYjMzNzAxY2I5OGZmMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FIIptWO6kQy0I7VJF+eFDr3UhxS
nFA/cRfAaqWcs1i8tLtONpQFjh29LKkc8GXcdeLsu/1r1zUJJ9ox7k/zvdU3Y5pt
taasFzcK9ptlT6IBA0NEfV4yZV9hC/F2DDxlQnKQI6e8ELMc6VXCVO1ZympDmy7y
l0wwF19VO7qdy5vz8OmartYBRyClzKQTRpjwXKe3EkOxPxwZNm/Ky/dWQhY63A+Y
AtA+04vYll3g6a9MmRQj26DWbYAJHkmm5TtfPXah5X0kc5agyEpe75bnrQHc6M3v
+eMJRbMK6EqNOlQw1C5Slw8JIkJk6FmiK6BDoPdyhYOpEaf29PyQGswYhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGKJ/9x0LdQcBjeHLszcBy5j/FRMB8GA1UdIwQY
MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt
OGE4NjVmZDYyMWM4LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4
LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW4NcAF+
QIo6Gbot9lnlw124PJ5UorbvrOYXjNwvcmQacu9lixZBgp+ibx/hFks2SWsmKMMc
JYUtWnip5cremP2wOwY4IRNRChyG5PRV5dXJt86eNcIA95PPwo5vC4f/79oaYQcN
1drsxjJZzM8l6fptrOlA0NxU4GpLNZl5K43miWcnAggLt51LCAqYtgEygItuhZAJ
IAx9RP/B+PTQgBQRG0afmYA7pFdehjhXA4ishEnsNtGhKtUpv9GfYtXZN8/lIGEv
BDa46P2THEhU4rqmATJosT+J+ejeWcOp3lvKAbzsMuGxfhOK3Yhfpf9ag+hKDu5m
djIe3DkWLFTVLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:18 2025 by rpki-client