Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File: 7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier: l1MnExoejIJt1lvj1LjQ5lMP1lue/SkgybDOMReG4og=
Subject key identifier: 05:61:C5:FF:F1:FB:EF:1A:C5:97:20:E7:61:70:D0:41:44:1A:4E:F5
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial: 019A70DC8593CC44150A270AF779A8F31B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number: 10B6
Signing time: Tue 11 Nov 2025 03:01:31 +0000
Manifest this update: Tue 11 Nov 2025 03:01:31 +0000
Manifest next update: Wed 12 Nov 2025 03:01:31 +0000
Files and hashes: 1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: +KsP45yiq4R7TTuUh+vmgunT3omFRQHm3fCsDGbuVg8=)
2: YLm4c9_z6td3es7pEFKKfhsrqrQ.roa (hash: 3Gz8tlN20buPuiUO6QyV1TDNEzqFPjpr4haLDRM/ql0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:85:93:cc:44:15:0a:27:0a:f7:79:a8:f3:1b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Validity
Not Before: Nov 11 03:01:31 2025 GMT
Not After : Nov 12 03:01:31 2025 GMT
Subject: CN=0561c5fff1fbef1ac59720e76170d041441a4ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:e5:a1:28:d7:7b:09:4c:b5:91:ea:29:41:
29:7a:c2:30:10:21:82:7d:1b:f8:fb:cf:a5:09:fc:
ac:8c:ac:01:27:81:e5:70:79:52:c6:47:31:a0:56:
7b:54:66:4b:b4:f7:81:ef:06:8c:e4:46:da:73:92:
ac:7e:df:94:e5:d8:46:53:34:81:b6:22:e5:ee:da:
12:65:64:3b:06:c2:41:e3:8d:66:fe:bf:41:25:bf:
1c:de:5a:d5:6f:28:d2:a6:ec:4c:85:4c:27:64:96:
55:b7:ad:9f:d7:3c:72:a1:a6:b6:bf:71:21:83:fe:
05:0f:9d:31:d1:bb:cf:fc:8f:59:70:e6:92:71:d7:
e4:b6:fe:88:04:47:f1:68:62:76:47:a4:f5:cd:96:
a3:08:bf:0c:cd:8a:a3:5f:66:36:83:f1:e5:5e:29:
8d:69:e7:51:d5:d4:97:85:33:13:0f:40:c1:d1:25:
64:29:24:56:89:ce:69:7c:92:b3:6c:6a:bd:11:2c:
d0:e9:ab:dc:a2:b0:32:a1:c2:af:29:f7:ff:42:23:
7b:3b:e2:60:c9:a6:74:df:a9:9a:f9:30:a4:49:79:
f6:78:70:eb:9a:11:18:b5:f0:8c:87:60:e2:d9:74:
3f:3e:b1:7e:0e:b1:60:81:c0:d7:3a:7a:d3:89:6b:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:61:C5:FF:F1:FB:EF:1A:C5:97:20:E7:61:70:D0:41:44:1A:4E:F5
X509v3 Authority Key Identifier:
keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f0:09:51:18:97:c5:8d:cc:f4:09:cb:4f:cd:f9:b1:09:a9:
b1:9f:e3:08:0d:aa:ae:25:17:bd:08:74:5e:31:97:79:07:ed:
b4:89:52:09:de:ef:10:69:b9:7f:fc:d4:35:d2:d5:44:93:36:
06:4e:16:df:2e:88:a3:05:72:b7:1f:6e:a2:5c:4a:03:6e:5f:
79:1c:d7:f9:ba:47:8d:6b:d2:17:c8:2d:19:8f:95:bc:cd:5e:
46:f6:8e:3f:94:0d:ab:17:0e:4a:d9:5f:9b:bd:c5:85:c4:68:
22:d9:1e:dc:bd:e0:3b:e5:5f:e6:31:9a:1f:42:28:e2:73:70:
c6:8b:62:ef:06:bc:fb:c6:f0:0b:3c:28:0a:f0:64:f5:7c:b4:
1d:79:6b:0a:28:f1:c3:cc:5a:18:54:5a:0a:39:80:ce:6b:bc:
f4:66:bd:38:58:cf:e8:87:71:07:74:2d:8f:75:4c:63:95:8f:
f5:cb:f3:18:d6:64:07:a6:1d:5f:e6:f4:92:5e:a1:bc:69:78:
3a:d4:45:9d:e7:ad:1e:29:0d:6e:8b:d6:bc:68:34:b3:31:d5:
d6:76:43:55:8b:1f:4e:c4:66:e4:4d:08:a0:d5:e1:2e:54:c1:
b9:27:2c:98:15:9e:60:ec:f0:af:4f:b8:f4:0c:f8:59:7b:e2:
d6:39:46:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3IWTzEQVCicK93mo8xucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTVlZDQ1N2Y3NDM4MmE4ZWQwYjdhZjY4NmUxYWRiMjkz
NTIyNTAwHhcNMjUxMTExMDMwMTMxWhcNMjUxMTEyMDMwMTMxWjAzMTEwLwYDVQQD
EygwNTYxYzVmZmYxZmJlZjFhYzU5NzIwZTc2MTcwZDA0MTQ0MWE0ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVXloSjXewlMtZHqKUEpesIwECGC
fRv4+8+lCfysjKwBJ4HlcHlSxkcxoFZ7VGZLtPeB7waM5Ebac5Ksft+U5dhGUzSB
tiLl7toSZWQ7BsJB441m/r9BJb8c3lrVbyjSpuxMhUwnZJZVt62f1zxyoaa2v3Eh
g/4FD50x0bvP/I9ZcOaScdfktv6IBEfxaGJ2R6T1zZajCL8MzYqjX2Y2g/HlXimN
aedR1dSXhTMTD0DB0SVkKSRWic5pfJKzbGq9ESzQ6avcorAyocKvKff/QiN7O+Jg
yaZ036ma+TCkSXn2eHDrmhEYtfCMh2Di2XQ/PrF+DrFggcDXOnrTiWsB4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVhxf/x++8axZcg52Fw0EFEGk71MB8GA1UdIwQY
MBaAFO3l7UV/dDgqjtC3r2huGtspNSJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGRjMzktN2Q5Yi00YjViLTg1OTMt
NWE1ODM4ODAwMjhhLzEvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNGRjMzktN2Q5Yi00YjViLTg1OTMtNWE1ODM4ODAwMjhh
LzEvN2VYdFJYOTBPQ3FPMExldmFHNGEyeWsxSWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyPAJURiX
xY3M9AnLT835sQmpsZ/jCA2qriUXvQh0XjGXeQfttIlSCd7vEGm5f/zUNdLVRJM2
Bk4W3y6IowVytx9uolxKA25feRzX+bpHjWvSF8gtGY+VvM1eRvaOP5QNqxcOStlf
m73FhcRoItke3L3gO+Vf5jGaH0Io4nNwxoti7wa8+8bwCzwoCvBk9Xy0HXlrCijx
w8xaGFRaCjmAzmu89Ga9OFjP6IdxB3Qtj3VMY5WP9cvzGNZkB6YdX+b0kl6hvGl4
OtRFneetHikNbovWvGg0szHV1nZDVYsfTsRm5E0IoNXhLlTBuScsmBWeYOzwr0+4
9Az4WXvi1jlGLA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:11 2025 by rpki-client