Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json)
Hash identifier: /YaAL4wDVZsQM7TDJnee8c0T030Ws3Glj6bdBN8roZY=
Subject key identifier: F4:C5:63:D5:F0:04:62:23:B8:EA:77:F5:98:05:7D:22:0B:28:4D:DF
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 019A72266C4DA23B26C567211E3F54D358D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
Manifest number: B7
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: GvyGkOachzJk9DygDnTBnDm6D0g.roa (hash: 9DNBA079y1VayC4HCKQN0sFF5/u3/PsV+NDhAUJH7m4=)
2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: qF4GTIqf3bLIfRSMhnePziX2pSDTS3mehmpzNRpLQWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6c:4d:a2:3b:26:c5:67:21:1e:3f:54:d3:58:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=f4c563d5f0046223b8ea77f598057d220b284ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:a3:19:e0:85:47:9d:05:8c:d0:b1:78:19:
89:e7:9c:53:68:3b:eb:7f:42:01:1c:dc:e0:09:4b:
97:f9:d8:5c:62:22:a8:31:8f:e1:31:d3:55:9e:ea:
53:8a:8a:97:41:60:52:0c:52:e3:3e:ec:cf:e2:e0:
cf:13:c3:5b:f5:8e:da:52:3f:b9:df:b5:0e:6e:ed:
fc:67:1a:91:19:2c:79:af:b4:cf:3f:f6:c0:2a:b3:
bb:e6:c9:17:49:c3:3a:85:9d:09:3a:31:63:f7:aa:
fd:e6:07:d4:06:66:d9:9c:44:ae:64:91:8c:d2:ca:
6e:c4:6b:e4:a9:7c:63:7d:3a:17:54:3b:69:63:33:
fa:7b:12:a9:84:12:f3:55:d1:d1:c3:1b:28:1d:6c:
17:36:a1:ff:01:a2:bd:4d:11:67:47:d3:ad:d7:e1:
74:90:f1:2b:5a:55:d8:e7:a3:9b:3b:e8:76:fb:d1:
d7:89:b2:c6:fb:55:21:57:d3:d1:c8:70:7c:e8:54:
a4:59:4f:22:d1:c8:2e:4a:46:85:eb:9a:30:6d:06:
c4:6b:1e:cb:cc:79:61:28:9b:63:a8:a2:13:21:93:
52:15:06:ab:4d:90:36:46:77:fa:c3:94:7d:7c:d5:
f2:77:53:06:a1:f6:3f:7a:80:4c:5d:3c:33:79:59:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C5:63:D5:F0:04:62:23:B8:EA:77:F5:98:05:7D:22:0B:28:4D:DF
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:99:96:12:ca:98:6f:0f:6a:70:7d:56:38:55:32:18:4c:62:
ad:6e:5a:f2:c2:3d:c2:79:21:6d:c3:d9:c0:be:80:bf:fc:97:
70:bf:84:4c:83:49:1f:36:26:0f:9b:9e:8f:58:fe:9b:5a:37:
c7:72:47:8e:a0:30:56:5b:6d:21:62:4b:00:e7:40:43:71:a7:
2f:6c:4c:dd:9c:cf:0e:cc:0b:1d:fb:a8:95:3f:10:3e:81:dc:
32:9f:c9:43:ae:51:c1:29:92:d4:8f:c5:d5:ac:01:0b:25:b9:
18:ad:9c:b9:03:e1:f9:95:b2:ba:fb:d5:a4:f6:ef:e2:93:9b:
c3:4e:bd:c3:f0:5e:4f:c8:5a:94:28:81:b5:be:44:c3:6a:cd:
20:5c:70:07:d8:81:7e:35:5d:a4:26:17:44:0e:0c:28:82:2f:
e7:92:e8:fe:1c:ca:5a:fe:11:72:37:df:eb:ed:2d:05:3e:c3:
a6:2d:9e:0f:a8:52:80:5f:08:ca:8b:77:a2:e1:47:cb:91:d5:
71:37:56:62:df:1b:90:c3:a5:85:8d:a6:3a:3e:50:98:3b:07:
9c:93:c2:09:50:97:7a:08:09:46:88:f3:f8:6d:32:07:98:bc:
60:c7:98:04:2b:dc:8d:cd:92:0f:b2:74:ff:2b:3a:9a:84:0b:
09:89:0a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmxNojsmxWchHj9U01jQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NTEwNTRkZmJmZGFkMjJjNDllNmJiYWRhYjNhMThmNDJh
MWMzNjQwHhcNMjUxMTExMDkwMTUxWhcNMjUxMTEyMDkwMTUxWjAzMTEwLwYDVQQD
EyhmNGM1NjNkNWYwMDQ2MjIzYjhlYTc3ZjU5ODA1N2QyMjBiMjg0ZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWujGeCFR50FjNCxeBmJ55xTaDvr
f0IBHNzgCUuX+dhcYiKoMY/hMdNVnupTioqXQWBSDFLjPuzP4uDPE8Nb9Y7aUj+5
37UObu38ZxqRGSx5r7TPP/bAKrO75skXScM6hZ0JOjFj96r95gfUBmbZnESuZJGM
0spuxGvkqXxjfToXVDtpYzP6exKphBLzVdHRwxsoHWwXNqH/AaK9TRFnR9Ot1+F0
kPErWlXY56ObO+h2+9HXibLG+1UhV9PRyHB86FSkWU8i0cguSkaF65owbQbEax7L
zHlhKJtjqKITIZNSFQarTZA2Rnf6w5R9fNXyd1MGofY/eoBMXTwzeVnAUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTFY9XwBGIjuOp39ZgFfSILKE3fMB8GA1UdIwQY
MBaAFIdRBU37/a0ixJ5rutqzoY9CocNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMt
NzU3OWU4NWExYTQ5LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMtNzU3OWU4NWExYTQ5
LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZmWEsqY
bw9qcH1WOFUyGExirW5a8sI9wnkhbcPZwL6Av/yXcL+ETINJHzYmD5uej1j+m1o3
x3JHjqAwVlttIWJLAOdAQ3GnL2xM3ZzPDswLHfuolT8QPoHcMp/JQ65RwSmS1I/F
1awBCyW5GK2cuQPh+ZWyuvvVpPbv4pObw069w/BeT8halCiBtb5Ew2rNIFxwB9iB
fjVdpCYXRA4MKIIv55Lo/hzKWv4Rcjff6+0tBT7Dpi2eD6hSgF8Iyot3ouFHy5HV
cTdWYt8bkMOlhY2mOj5QmDsHnJPCCVCXeggJRojz+G0yB5i8YMeYBCvcjc2SD7J0
/ys6moQLCYkKgw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:38 2025 by rpki-client