Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: Pr4Zz7jCmLiutHcCL5jlyzvtgqtL8f2MG5+HTQB1gPs=
Subject key identifier: D5:B7:C9:26:1E:1B:EB:06:8A:4C:1F:4C:1B:7B:48:A2:F8:69:9B:39
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019A21E485ADB47A29AF92DBF96E47F8A8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 02D2
Signing time: Sun 26 Oct 2025 19:00:15 +0000
Manifest this update: Sun 26 Oct 2025 19:00:15 +0000
Manifest next update: Mon 27 Oct 2025 19:00:15 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: tlfrrDQ7x1frIx0rJLYEFX3xWDrxNGyKCG5UHTJ6ark=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:85:ad:b4:7a:29:af:92:db:f9:6e:47:f8:a8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Oct 26 19:00:15 2025 GMT
Not After : Oct 27 19:00:15 2025 GMT
Subject: CN=d5b7c9261e1beb068a4c1f4c1b7b48a2f8699b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:64:4d:58:46:87:e3:59:22:b4:3c:cc:aa:
66:8e:25:29:1a:4b:54:62:d5:b5:a6:0c:ba:53:4e:
32:2d:02:7e:ed:1b:76:49:be:4f:14:02:0b:01:c3:
b3:a8:58:76:74:df:55:23:68:3f:c8:d6:df:bd:a3:
03:77:42:1e:49:a1:b6:05:9d:e0:ee:96:01:34:32:
3d:12:c2:bf:05:72:2a:92:df:65:6e:75:8b:75:7d:
cb:51:e3:04:a4:81:1e:90:91:f6:bd:36:10:ab:77:
74:17:63:3c:f2:45:4f:2b:92:1e:3c:f7:61:7e:f0:
40:a7:ad:ee:39:c8:91:58:1d:b5:30:e4:4d:b1:cf:
94:4a:09:26:14:38:a0:5a:23:48:60:e2:ec:be:38:
8b:dc:e3:34:82:36:c4:b7:1e:62:e7:05:da:6f:2b:
5e:f2:fa:e4:cb:7d:86:a7:4b:90:ee:10:aa:5d:47:
9c:e3:3e:2d:9c:36:0c:6f:50:01:cf:b0:e0:48:6e:
d8:57:d5:3e:b4:a2:77:36:09:54:60:84:95:a5:ee:
65:24:85:d4:ee:c2:52:8d:6b:96:7c:91:64:9a:ca:
38:31:9d:58:2d:9f:3e:ba:26:17:aa:79:07:08:28:
40:45:17:dd:78:61:a0:4e:42:61:de:5f:24:36:69:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B7:C9:26:1E:1B:EB:06:8A:4C:1F:4C:1B:7B:48:A2:F8:69:9B:39
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:87:db:fd:b0:e2:11:59:67:9c:1d:b1:91:98:7f:23:ad:b9:
d1:dc:51:c6:4e:5b:5a:91:ca:c8:0a:a2:ff:2e:ce:bd:c9:31:
71:5d:d0:2e:0c:a8:04:ca:d5:ce:40:d2:03:7d:fd:aa:86:23:
40:79:35:d8:87:f7:18:0f:70:ef:38:6b:b4:c5:e3:5b:ca:c3:
4e:c6:b1:99:5c:14:7d:f8:ab:ef:5d:28:b1:5f:d5:fb:f3:52:
5c:aa:8f:95:f4:b8:46:5b:3c:a6:ec:f6:12:e5:78:1f:63:e1:
28:3c:31:fd:18:c4:c7:ed:85:58:3a:41:fa:8e:74:31:49:8e:
d4:d4:17:1c:8d:b2:43:7a:72:8b:b4:2f:53:c3:0e:ec:a1:37:
ab:57:bc:83:14:0d:65:c5:08:0c:2c:bf:1d:d0:02:7b:36:8a:
b6:de:85:52:be:e5:83:a3:67:5e:48:18:71:bd:3f:02:28:75:
57:91:71:00:e4:ed:27:c8:ec:3c:52:b8:e9:82:04:bd:9e:bd:
ff:b9:63:f9:4f:e5:89:e3:fa:87:06:db:87:8b:dc:0a:40:f4:
96:03:05:f6:c4:f8:0e:de:76:f1:b7:bd:9e:42:32:5e:f5:a3:
e2:98:72:5a:d5:5a:c8:29:be:6b:09:3f:a6:ed:1e:a3:ff:54:
cf:e1:0e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoh5IWttHopr5Lb+W5H+Ki0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWQ4NzhiODFhOTAyMzk0MGQ0ZWM4YzE3MmQwNGQ0YzI1
NTg2Y2EwHhcNMjUxMDI2MTkwMDE1WhcNMjUxMDI3MTkwMDE1WjAzMTEwLwYDVQQD
EyhkNWI3YzkyNjFlMWJlYjA2OGE0YzFmNGMxYjdiNDhhMmY4Njk5YjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH1kTVhGh+NZIrQ8zKpmjiUpGktU
YtW1pgy6U04yLQJ+7Rt2Sb5PFAILAcOzqFh2dN9VI2g/yNbfvaMDd0IeSaG2BZ3g
7pYBNDI9EsK/BXIqkt9lbnWLdX3LUeMEpIEekJH2vTYQq3d0F2M88kVPK5IePPdh
fvBAp63uOciRWB21MORNsc+USgkmFDigWiNIYOLsvjiL3OM0gjbEtx5i5wXabyte
8vrky32Gp0uQ7hCqXUec4z4tnDYMb1ABz7DgSG7YV9U+tKJ3NglUYISVpe5lJIXU
7sJSjWuWfJFkmso4MZ1YLZ8+uiYXqnkHCChARRfdeGGgTkJh3l8kNmlr4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW3ySYeG+sGikwfTBt7SKL4aZs5MB8GA1UdIwQY
MBaAFO7th4uBqQI5QNTsjBctBNTCVYbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDct
NTZjMzYyNGI4YjFiLzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDctNTZjMzYyNGI4YjFi
LzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4fb/bDi
EVlnnB2xkZh/I6250dxRxk5bWpHKyAqi/y7OvckxcV3QLgyoBMrVzkDSA339qoYj
QHk12If3GA9w7zhrtMXjW8rDTsaxmVwUffir710osV/V+/NSXKqPlfS4Rls8puz2
EuV4H2PhKDwx/RjEx+2FWDpB+o50MUmO1NQXHI2yQ3pyi7QvU8MO7KE3q1e8gxQN
ZcUIDCy/HdACezaKtt6FUr7lg6NnXkgYcb0/Aih1V5FxAOTtJ8jsPFK46YIEvZ69
/7lj+U/lieP6hwbbh4vcCkD0lgMF9sT4Dt528be9nkIyXvWj4phyWtVayCm+awk/
pu0eo/9Uz+EOBw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:25 2025 by rpki-client