Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: uazSFE/5moPSCosiA9BQWPOGoYBfUMSRCycN22yT7FU=
Subject key identifier: 15:1D:B7:D5:7D:20:A6:8E:AC:B5:43:03:5C:F1:1E:06:5D:35:A6:E6
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 019A71B88CCB47D7F8D8688AE4055ADB2C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 0995
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: +Xl+nQyYcDTzBDp8WD36McNn98OzX33qUJ370M2rhvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8c:cb:47:d7:f8:d8:68:8a:e4:05:5a:db:2c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=151db7d57d20a68eacb543035cf11e065d35a6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ac:4f:d9:e5:19:5f:9f:f6:44:f0:88:a2:91:
9e:d3:47:19:a9:d7:b7:57:38:f9:4c:ff:04:09:86:
16:bf:fa:52:50:e9:88:1b:4e:09:fb:77:05:a3:3d:
5e:69:bc:8b:ea:d5:54:17:c0:9e:17:55:76:b4:63:
82:7e:87:cc:f1:c9:6a:24:f8:71:32:13:b1:5d:02:
1b:2a:17:7e:f6:5b:29:ee:f8:28:fd:48:5f:a8:cf:
c9:a2:af:72:10:fe:0f:32:0f:14:3b:33:66:5c:38:
40:11:91:87:e0:9b:92:9b:df:6e:f2:86:65:e6:5b:
1c:4b:15:06:59:7a:4d:34:08:b4:d3:bd:99:9e:ad:
8b:2e:65:f2:bf:09:c5:80:0a:4a:0c:99:1f:61:df:
66:55:49:08:98:31:46:b0:0c:d7:d4:ad:4a:6f:3b:
d8:db:3b:57:96:d6:01:e7:ca:47:53:9e:40:fa:e0:
60:4c:2a:3e:e6:d9:88:82:7b:13:bb:dc:96:4d:82:
e4:5f:fe:9e:24:25:fd:94:8a:12:38:7b:03:eb:38:
93:55:12:27:8b:d2:e3:84:b4:ad:66:d4:41:d7:a4:
4c:64:98:1b:6a:9e:b7:c3:1a:26:67:f2:9a:a4:09:
0f:96:a2:96:74:3b:8f:bd:94:79:6c:60:98:4c:3b:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:B7:D5:7D:20:A6:8E:AC:B5:43:03:5C:F1:1E:06:5D:35:A6:E6
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:82:81:52:bb:de:af:7f:5c:83:05:3f:95:a6:64:a9:6c:8e:
3f:cc:ab:8a:33:dd:a1:a4:e6:3d:d5:4e:ee:3e:c0:86:12:8d:
25:cf:9c:07:93:b1:f7:ae:d7:d3:98:47:87:fc:59:25:93:ea:
a0:b7:fa:f7:61:ba:11:09:f3:24:e9:6c:89:e4:bc:61:57:09:
58:e1:42:15:f1:a5:d1:fd:d6:01:0a:16:7e:14:b2:32:7d:74:
ed:7c:c3:1a:e8:fe:c7:7e:22:d8:04:18:87:78:6b:e1:45:ed:
eb:4a:03:18:cf:29:3e:62:e1:4e:7e:bb:04:a9:4c:14:74:84:
fe:29:e7:f0:8e:98:19:4f:d1:66:fa:f6:ba:99:cc:8b:2f:60:
c9:9a:38:74:8b:45:16:77:76:ff:1e:62:c8:bc:9b:92:42:55:
c8:b6:1e:58:e6:91:28:2b:a9:e5:fc:f3:ae:a0:91:ca:0f:08:
65:34:f1:0f:f0:d4:90:2a:86:2c:85:67:44:8b:91:75:00:aa:
f5:bc:59:97:7b:1f:56:5a:24:fb:6b:2e:3e:9a:84:35:a6:74:
e2:8c:60:81:4c:91:bc:8d:4b:3b:3c:e2:7c:89:71:1a:6b:d6:
d8:50:8e:fc:95:6e:15:73:d5:3d:b3:c6:1d:ad:62:43:ee:30:
1b:49:7e:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIzLR9f42GiK5AVa2ywRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjA0NGMzNjNkNzg4ZTc0MzM0ZTEzNmUwM2NjN2ZkMWU0
OWEyMTYwHhcNMjUxMTExMDcwMTUxWhcNMjUxMTEyMDcwMTUxWjAzMTEwLwYDVQQD
EygxNTFkYjdkNTdkMjBhNjhlYWNiNTQzMDM1Y2YxMWUwNjVkMzVhNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qxP2eUZX5/2RPCIopGe00cZqde3
Vzj5TP8ECYYWv/pSUOmIG04J+3cFoz1eabyL6tVUF8CeF1V2tGOCfofM8clqJPhx
MhOxXQIbKhd+9lsp7vgo/UhfqM/Joq9yEP4PMg8UOzNmXDhAEZGH4JuSm99u8oZl
5lscSxUGWXpNNAi0072Znq2LLmXyvwnFgApKDJkfYd9mVUkImDFGsAzX1K1KbzvY
2ztXltYB58pHU55A+uBgTCo+5tmIgnsTu9yWTYLkX/6eJCX9lIoSOHsD6ziTVRIn
i9LjhLStZtRB16RMZJgbap63wxomZ/KapAkPlqKWdDuPvZR5bGCYTDvfmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUdt9V9IKaOrLVDA1zxHgZdNabmMB8GA1UdIwQY
MBaAFO3wRMNj14jnQzThNuA8x/0eSaIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zNDA0OTEtZDFkMi00MzJjLTk1NmQt
MmZlMTU5NGRkYzljLzEvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zNDA0OTEtZDFkMi00MzJjLTk1NmQtMmZlMTU5NGRkYzlj
LzEvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4KBUrve
r39cgwU/laZkqWyOP8yrijPdoaTmPdVO7j7AhhKNJc+cB5Ox967X05hHh/xZJZPq
oLf692G6EQnzJOlsieS8YVcJWOFCFfGl0f3WAQoWfhSyMn107XzDGuj+x34i2AQY
h3hr4UXt60oDGM8pPmLhTn67BKlMFHSE/inn8I6YGU/RZvr2upnMiy9gyZo4dItF
Fnd2/x5iyLybkkJVyLYeWOaRKCup5fzzrqCRyg8IZTTxD/DUkCqGLIVnRIuRdQCq
9bxZl3sfVlok+2suPpqENaZ04oxggUyRvI1LOzzifIlxGmvW2FCO/JVuFXPVPbPG
Ha1iQ+4wG0l+HA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:15 2025 by rpki-client