Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: LrkmpXAU6+FYdeyctrLZDf8KpKDSevrxH5p7VyTsr8Y=
Subject key identifier: 0E:1C:21:FA:2B:B8:96:33:1A:31:8A:AC:B4:89:81:A4:3D:77:81:66
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 019A70A4FCA88E82A06454408E5FE1046BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 02:00:52 +0000
Manifest this update: Tue 11 Nov 2025 02:00:52 +0000
Manifest next update: Wed 12 Nov 2025 02:00:52 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: bNNA9HCiQJ2P5AcR0iO0IsQH5WjCTitIAej+zxGqisY=)
2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:fc:a8:8e:82:a0:64:54:40:8e:5f:e1:04:6b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Nov 11 02:00:52 2025 GMT
Not After : Nov 12 02:00:52 2025 GMT
Subject: CN=0e1c21fa2bb896331a318aacb48981a43d778166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:e1:a6:ab:69:c1:8f:00:80:0a:5a:d3:fd:
db:99:46:ff:01:a0:9c:87:d6:41:8c:29:b7:78:82:
ee:9d:96:f1:fd:5f:17:9b:1f:ff:59:54:0e:54:ab:
8f:cf:78:3f:da:9c:03:51:ef:da:f4:ae:da:9a:2c:
3e:ce:fd:ec:2d:dd:dd:5d:e5:f6:cb:74:60:08:93:
ac:8d:5a:cb:f6:26:9b:36:9e:4c:77:97:41:9a:23:
f8:5c:9a:ca:49:19:a4:5c:1f:d4:4a:72:3b:d0:0d:
08:96:b2:19:a3:a7:42:e1:4a:d0:d5:d2:23:84:89:
2d:34:33:1e:c5:dd:08:d9:72:ee:9f:c9:dd:4a:af:
a8:a9:42:3d:2d:d2:a7:34:63:cd:a3:0a:5a:4b:c6:
78:fd:22:5a:ee:31:a3:78:ee:48:34:1b:57:8d:5c:
87:78:5b:31:50:92:7b:66:11:4f:48:74:52:f6:2a:
d5:34:b9:3e:11:b1:80:92:2a:a0:68:91:c0:72:df:
8d:95:4b:98:4c:a5:7d:c0:e7:89:83:06:0a:06:dc:
14:fa:cb:91:f4:e7:8d:11:6e:02:e2:46:4d:c7:6f:
0a:a9:cc:97:dc:ab:3b:6b:9e:f3:c1:81:a3:d0:60:
a3:13:70:a8:45:74:5a:c0:03:55:e4:0b:70:30:a0:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:21:FA:2B:B8:96:33:1A:31:8A:AC:B4:89:81:A4:3D:77:81:66
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:29:ee:f4:03:06:5e:3b:12:70:f0:52:fa:ca:0d:c0:bf:81:
85:95:a8:5b:83:37:e7:93:be:a0:cf:9e:26:2f:90:29:b8:46:
07:58:cf:c8:b9:f7:38:9d:4d:2a:a5:8f:1c:f1:bc:c1:18:f8:
0f:b4:5c:df:f6:9c:5e:98:72:93:8e:0b:11:9f:40:89:2a:72:
6b:c2:d0:35:74:88:45:bb:75:8c:2d:05:02:af:71:e2:a1:22:
c7:ec:02:50:77:d5:94:dc:ad:c2:a9:36:74:62:ed:31:ad:f4:
d7:c3:6a:f3:9a:e4:09:7a:e4:f0:f7:e0:37:9f:24:8a:95:c5:
13:41:34:32:29:ce:af:b3:5b:0c:10:82:6c:21:aa:8d:54:95:
84:80:a8:76:34:38:81:c2:a3:5f:34:72:27:25:fc:42:50:ce:
69:e3:76:e6:c0:32:ec:87:66:4f:8c:9e:59:9b:79:2e:86:69:
46:e1:e0:8d:c0:b5:47:95:5a:36:c4:90:0c:84:4a:7f:31:cb:
e1:8b:e3:25:a0:d6:74:61:cf:98:b7:36:98:3d:a6:c9:56:2a:
be:98:fe:3c:f2:55:f4:85:2c:6a:0c:8b:e8:0d:87:1b:49:8e:
a1:d3:49:2c:1b:77:bd:9a:af:cb:34:7e:5c:dc:32:ad:d9:f1:
89:a3:02:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpPyojoKgZFRAjl/hBGvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWUyMjU2MTRjNjVjZTJjZjUyNzVlYjQ2NDMzNDM5NWMw
NmY0MzAwHhcNMjUxMTExMDIwMDUyWhcNMjUxMTEyMDIwMDUyWjAzMTEwLwYDVQQD
EygwZTFjMjFmYTJiYjg5NjMzMWEzMThhYWNiNDg5ODFhNDNkNzc4MTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG7hpqtpwY8AgApa0/3bmUb/AaCc
h9ZBjCm3eILunZbx/V8Xmx//WVQOVKuPz3g/2pwDUe/a9K7amiw+zv3sLd3dXeX2
y3RgCJOsjVrL9iabNp5Md5dBmiP4XJrKSRmkXB/USnI70A0IlrIZo6dC4UrQ1dIj
hIktNDMexd0I2XLun8ndSq+oqUI9LdKnNGPNowpaS8Z4/SJa7jGjeO5INBtXjVyH
eFsxUJJ7ZhFPSHRS9irVNLk+EbGAkiqgaJHAct+NlUuYTKV9wOeJgwYKBtwU+suR
9OeNEW4C4kZNx28KqcyX3Ks7a57zwYGj0GCjE3CoRXRawANV5AtwMKCqowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4cIforuJYzGjGKrLSJgaQ9d4FmMB8GA1UdIwQY
MBaAFO8eIlYUxlziz1J160ZDNDlcBvQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYt
MTFmOTUyNjhlYTc0LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYtMTFmOTUyNjhlYTc0
LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCnu9AMG
XjsScPBS+soNwL+BhZWoW4M355O+oM+eJi+QKbhGB1jPyLn3OJ1NKqWPHPG8wRj4
D7Rc3/acXphyk44LEZ9AiSpya8LQNXSIRbt1jC0FAq9x4qEix+wCUHfVlNytwqk2
dGLtMa3018Nq85rkCXrk8PfgN58kipXFE0E0MinOr7NbDBCCbCGqjVSVhICodjQ4
gcKjXzRyJyX8QlDOaeN25sAy7IdmT4yeWZt5LoZpRuHgjcC1R5VaNsSQDIRKfzHL
4YvjJaDWdGHPmLc2mD2myVYqvpj+PPJV9IUsagyL6A2HG0mOodNJLBt3vZqvyzR+
XNwyrdnxiaMCLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:44 2025 by rpki-client