Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: lsVD/Mz02d3hz2p3CfXYjMHOxFw/wW6jm4KDv722fJw=
Subject key identifier: C2:B0:35:7E:19:AE:18:A1:9E:38:17:77:22:04:8B:5D:B4:82:42:6C
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019A7225DFDC8E1B9F0E7AEA5DBDC4AD8CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0BA1
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: 1PhoYjnFt+J7Hm3YHTCrmUBkhoEJcvn37hs8tW5EyOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:df:dc:8e:1b:9f:0e:7a:ea:5d:bd:c4:ad:8c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=c2b0357e19ae18a19e38177722048b5db482426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:fe:8b:c9:34:02:cd:7e:18:da:34:5a:d5:
a2:21:8e:50:fa:d2:99:20:0f:86:04:c7:d5:0c:3f:
73:72:61:d1:41:79:e8:0a:68:34:74:c6:d4:9e:a2:
a5:8e:59:38:75:be:40:95:8e:a3:51:28:0b:e4:a8:
a0:ec:7e:90:c7:58:ae:f2:7e:95:d5:02:57:ae:16:
5e:c9:2c:e1:41:16:3c:f0:88:fd:65:bb:83:62:6e:
83:19:d1:06:2e:6b:eb:64:0e:15:aa:a0:e7:77:d7:
8d:46:48:5d:3f:16:c3:db:1e:14:07:cd:16:78:33:
26:71:09:3c:82:a6:a8:12:f6:8e:79:a7:55:bb:c7:
d7:34:69:07:51:5a:61:4d:c9:4f:62:21:52:4a:43:
d3:40:63:d4:64:a0:70:70:9a:6b:fc:c3:a4:9a:76:
97:d6:3c:da:4e:8f:9c:ef:3a:04:46:be:6f:e9:02:
a8:85:61:9b:ce:f0:7c:92:5b:49:66:39:76:06:8d:
16:c1:26:d6:96:a0:2e:de:b2:7e:51:ff:bb:e1:26:
03:97:45:df:45:b2:69:1f:0b:7e:9b:d9:82:55:9f:
e8:25:ec:c5:85:db:fa:52:b8:1e:05:ea:2a:e4:be:
b2:7d:34:a0:5e:bd:72:33:97:26:dc:bd:27:e7:ca:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B0:35:7E:19:AE:18:A1:9E:38:17:77:22:04:8B:5D:B4:82:42:6C
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:1f:c1:75:98:76:cf:c7:e4:fa:6b:ca:df:78:59:f8:6a:
7c:87:8e:6b:12:55:d7:1d:23:f3:65:38:34:43:f6:40:ea:16:
bc:1e:25:2a:1b:f0:56:1d:ec:04:5c:a3:6d:4e:bf:35:1b:11:
03:76:34:34:42:5c:de:69:f0:52:52:35:73:64:1e:95:b0:70:
63:43:6c:0d:cb:6f:13:d9:d8:6f:b9:30:5c:a8:52:33:46:a3:
99:7a:b1:01:da:ff:2c:60:03:aa:50:b4:64:2b:44:23:35:76:
4f:56:06:d0:b0:f2:12:9e:92:22:90:f2:af:30:23:03:6b:fa:
fc:23:9b:30:06:15:9a:48:0c:4b:2b:1e:cf:9a:2e:1b:f3:d0:
83:74:db:41:84:41:dc:44:66:41:53:13:36:ca:35:0a:aa:91:
59:5e:93:26:dd:bf:fa:e7:b2:45:3a:0b:08:69:61:19:4f:8a:
52:5a:7e:5a:23:38:15:0b:eb:d0:12:56:35:5e:7b:c3:9b:c7:
9d:93:b0:c5:82:7b:4c:da:44:4f:f4:4f:2c:b7:38:f4:f3:5a:
25:b1:29:2e:11:38:cb:d1:e1:51:9d:20:03:6b:92:69:27:b3:
af:0b:70:39:c3:8f:26:c0:9d:2c:9a:55:3d:87:a2:1a:82:36:
07:54:0f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJd/cjhufDnrqXb3ErYz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmU0YTA5Njc3YjAwYmJjMzMzZjcxNjc4ZWFhODBhNzFi
NjJhNDgwHhcNMjUxMTExMDkwMTE1WhcNMjUxMTEyMDkwMTE1WjAzMTEwLwYDVQQD
EyhjMmIwMzU3ZTE5YWUxOGExOWUzODE3NzcyMjA0OGI1ZGI0ODI0MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g3+i8k0As1+GNo0WtWiIY5Q+tKZ
IA+GBMfVDD9zcmHRQXnoCmg0dMbUnqKljlk4db5AlY6jUSgL5Kig7H6Qx1iu8n6V
1QJXrhZeySzhQRY88Ij9ZbuDYm6DGdEGLmvrZA4VqqDnd9eNRkhdPxbD2x4UB80W
eDMmcQk8gqaoEvaOeadVu8fXNGkHUVphTclPYiFSSkPTQGPUZKBwcJpr/MOkmnaX
1jzaTo+c7zoERr5v6QKohWGbzvB8kltJZjl2Bo0WwSbWlqAu3rJ+Uf+74SYDl0Xf
RbJpHwt+m9mCVZ/oJezFhdv6UrgeBeoq5L6yfTSgXr1yM5cm3L0n58oT2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKwNX4ZrhihnjgXdyIEi120gkJsMB8GA1UdIwQY
MBaAFOz+SglnewC7wzP3FnjqqApxtipIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEt
ZWQ5MzAyZmVkZGNiLzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEtZWQ5MzAyZmVkZGNi
LzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX54fwXWY
ds/H5Ppryt94WfhqfIeOaxJV1x0j82U4NEP2QOoWvB4lKhvwVh3sBFyjbU6/NRsR
A3Y0NEJc3mnwUlI1c2QelbBwY0NsDctvE9nYb7kwXKhSM0ajmXqxAdr/LGADqlC0
ZCtEIzV2T1YG0LDyEp6SIpDyrzAjA2v6/CObMAYVmkgMSysez5ouG/PQg3TbQYRB
3ERmQVMTNso1CqqRWV6TJt2/+ueyRToLCGlhGU+KUlp+WiM4FQvr0BJWNV57w5vH
nZOwxYJ7TNpET/RPLLc49PNaJbEpLhE4y9HhUZ0gA2uSaSezrwtwOcOPJsCdLJpV
PYeiGoI2B1QPQA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:33 2025 by rpki-client