Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: m66aSbsVPD5c7HJo6JgF26RqNkpIrZrc6Z5zB0/Sawk=
Subject key identifier: CC:99:E2:7A:B5:4C:C1:CC:A7:1D:FA:70:B9:78:06:64:CD:1F:59:0D
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 019A18E1DD6018726EC69622E7BAFFC9DABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 0467
Signing time: Sat 25 Oct 2025 01:00:46 +0000
Manifest this update: Sat 25 Oct 2025 01:00:46 +0000
Manifest next update: Sun 26 Oct 2025 01:00:46 +0000
Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: 0EwiwijR2CaZjz4xAzZswazrp/YClw7A+nlI/9pqou0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e1:dd:60:18:72:6e:c6:96:22:e7:ba:ff:c9:da:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Oct 25 01:00:46 2025 GMT
Not After : Oct 26 01:00:46 2025 GMT
Subject: CN=cc99e27ab54cc1cca71dfa70b9780664cd1f590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:22:5e:e5:dd:19:cd:6e:a2:ec:7c:0d:df:
ef:cc:c8:ab:09:e0:aa:35:72:6f:cf:05:a9:9d:84:
2a:8e:c7:68:fe:b1:53:39:9a:7f:10:34:89:c5:3c:
60:0f:8e:f2:42:c9:b1:10:45:07:0d:52:6f:59:3d:
66:85:3d:9f:c6:72:00:e2:7d:e9:07:7e:78:0f:23:
49:6e:08:8a:7c:47:a5:72:82:2f:3b:cb:d5:6f:85:
37:b3:cf:5f:34:7b:c3:8c:07:7a:7a:ee:77:59:18:
b7:91:80:dd:85:2a:c9:5b:be:d9:3c:6c:28:41:1d:
a9:b9:48:8b:24:68:cc:6e:68:b9:7a:8e:4f:d9:b5:
1a:f7:e5:b7:fa:61:8c:4c:4f:f7:c0:21:a5:c2:a3:
60:a3:10:ef:7b:e2:30:45:15:13:a9:66:7d:8b:81:
2d:cf:af:30:12:aa:c6:bd:c0:75:a0:ca:15:ec:20:
16:62:ae:16:1b:06:a1:f7:3c:d9:04:23:1c:56:56:
f8:61:0e:f2:e6:3b:e4:de:9c:11:94:33:4c:26:44:
91:8c:68:34:b9:d2:92:00:ed:2a:45:86:6d:95:7a:
37:38:1c:d6:5c:e0:34:f6:20:b4:0a:4e:98:1c:e6:
ba:0d:60:b0:a2:5a:d4:79:02:b6:28:a4:e6:78:b3:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:E2:7A:B5:4C:C1:CC:A7:1D:FA:70:B9:78:06:64:CD:1F:59:0D
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:44:cd:8b:20:50:c7:f0:16:5d:da:24:a5:c8:92:7b:bd:02:
c9:0f:1e:05:73:a0:4c:84:21:02:fa:87:2e:23:1e:1f:aa:b8:
c9:ca:43:45:41:4d:02:6b:76:5b:24:82:8a:45:c4:9b:69:47:
c1:23:78:92:a8:82:26:16:33:ef:57:fd:2f:3e:0a:17:84:d1:
ea:6a:1b:a4:d5:59:95:bb:71:7c:e1:55:2b:f0:6e:e9:8a:58:
e1:14:36:d1:f5:2f:b7:2e:30:c6:97:61:88:e6:76:cd:46:1e:
d0:ba:89:6d:46:c5:ff:99:36:70:b6:78:f8:2d:f6:b4:36:4f:
15:27:2d:80:8c:95:68:9b:87:be:ce:e1:c2:59:43:6f:3e:70:
a2:7d:9e:d9:9c:c3:6a:73:9e:c4:87:85:ec:60:fc:66:e1:c8:
4f:ec:4e:52:28:f3:ab:5e:e4:44:27:4e:b7:8c:cf:c2:18:4c:
7f:94:5b:62:7e:cf:f5:f2:51:0b:f1:29:a6:6d:64:a4:a3:07:
0e:87:6c:4d:61:03:33:e7:69:23:5c:5d:f1:56:37:a9:68:f0:
43:c1:5a:a5:44:77:2e:7c:a1:08:b6:ca:a2:5a:ef:91:e3:b6:
ef:49:f8:9b:d2:e5:7e:c7:a6:0f:02:ad:9c:5d:d2:43:ce:04:
d4:9c:cd:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoY4d1gGHJuxpYi57r/ydq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1
NTQ2Y2MwHhcNMjUxMDI1MDEwMDQ2WhcNMjUxMDI2MDEwMDQ2WjAzMTEwLwYDVQQD
EyhjYzk5ZTI3YWI1NGNjMWNjYTcxZGZhNzBiOTc4MDY2NGNkMWY1OTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6EiXuXdGc1uoux8Dd/vzMirCeCq
NXJvzwWpnYQqjsdo/rFTOZp/EDSJxTxgD47yQsmxEEUHDVJvWT1mhT2fxnIA4n3p
B354DyNJbgiKfEelcoIvO8vVb4U3s89fNHvDjAd6eu53WRi3kYDdhSrJW77ZPGwo
QR2puUiLJGjMbmi5eo5P2bUa9+W3+mGMTE/3wCGlwqNgoxDve+IwRRUTqWZ9i4Et
z68wEqrGvcB1oMoV7CAWYq4WGwah9zzZBCMcVlb4YQ7y5jvk3pwRlDNMJkSRjGg0
udKSAO0qRYZtlXo3OBzWXOA09iC0Ck6YHOa6DWCwolrUeQK2KKTmeLPSRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyZ4nq1TMHMpx36cLl4BmTNH1kNMB8GA1UdIwQY
MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt
NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1
LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUTNiyBQ
x/AWXdokpciSe70CyQ8eBXOgTIQhAvqHLiMeH6q4ycpDRUFNAmt2WySCikXEm2lH
wSN4kqiCJhYz71f9Lz4KF4TR6mobpNVZlbtxfOFVK/Bu6YpY4RQ20fUvty4wxpdh
iOZ2zUYe0LqJbUbF/5k2cLZ4+C32tDZPFSctgIyVaJuHvs7hwllDbz5won2e2ZzD
anOexIeF7GD8ZuHIT+xOUijzq17kRCdOt4zPwhhMf5RbYn7P9fJRC/Eppm1kpKMH
DodsTWEDM+dpI1xd8VY3qWjwQ8FapUR3LnyhCLbKolrvkeO270n4m9LlfsemDwKt
nF3SQ84E1JzNug==
-----END CERTIFICATE-----
Generated at Sat Oct 25 08:00:00 2025 by rpki-client