Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier: gcBbyEHNmZhMInO6Lw6shvf7H7I8UGKReb79gOM1Ndg=
Subject key identifier: 49:24:C6:4F:E1:29:85:CC:58:CE:78:8E:7A:85:BB:CA:B1:3F:14:90
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial: 019A2553DA28E43951CD8BA0D73B1147198D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number: 1689
Signing time: Mon 27 Oct 2025 11:00:43 +0000
Manifest this update: Mon 27 Oct 2025 11:00:43 +0000
Manifest next update: Tue 28 Oct 2025 11:00:43 +0000
Files and hashes: 1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=)
2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: Ke2QQcNq3YMyuvCYTquGtzs/YKJnDmfMfEfuVW/y/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:da:28:e4:39:51:cd:8b:a0:d7:3b:11:47:19:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Validity
Not Before: Oct 27 11:00:43 2025 GMT
Not After : Oct 28 11:00:43 2025 GMT
Subject: CN=4924c64fe12985cc58ce788e7a85bbcab13f1490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:fe:d2:31:81:20:51:1b:77:88:57:14:1b:
33:82:28:1c:9d:0b:36:f3:fc:08:18:82:4d:72:27:
ad:9d:17:61:d9:64:ac:ca:7b:84:8b:d0:0a:df:38:
0b:43:b0:23:db:e8:95:3d:a9:93:53:72:23:6d:9b:
dd:e8:fd:93:74:bb:85:90:02:88:9a:9c:a6:fe:c9:
12:df:0d:1b:15:64:31:c5:11:f3:6e:33:b4:78:5f:
bd:6d:15:d7:27:2e:41:30:c8:ce:ff:8f:d6:52:a2:
c9:1f:76:b1:a9:95:db:fb:d6:d6:f3:4f:1d:40:ce:
8c:53:8c:29:88:86:cd:f6:5c:1b:65:07:4b:0d:06:
60:e9:ab:b4:c1:d9:0e:65:b0:9b:24:a8:dd:1a:e2:
d2:b1:d5:0f:9a:3e:07:6f:ba:0d:36:45:09:cc:23:
fa:27:82:33:12:ce:ae:fb:ac:b9:88:4b:88:d6:ea:
f4:1d:c7:0a:76:16:6a:78:fc:bc:a3:1b:c0:8b:56:
05:72:87:12:a5:29:ed:ea:50:8c:15:bb:4a:db:61:
f8:34:55:5e:26:46:e8:9c:e2:e3:fd:d3:f1:80:6c:
fc:76:4c:72:e4:d4:6e:da:ef:cf:bf:49:04:7c:79:
47:35:da:dc:f5:73:2a:7e:ff:1e:7e:f7:93:3f:82:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:C6:4F:E1:29:85:CC:58:CE:78:8E:7A:85:BB:CA:B1:3F:14:90
X509v3 Authority Key Identifier:
keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:85:c8:5c:11:3d:13:b3:21:9a:24:b6:a9:d8:db:91:4b:
a0:ba:de:4a:bf:63:55:b2:c4:f9:cc:40:d3:4d:40:76:bd:e7:
3d:c1:17:e8:f3:f5:7a:a7:80:4f:69:c6:fe:88:c9:8f:9e:cf:
68:ad:62:d9:27:b9:02:16:a4:9b:68:51:7b:9c:66:72:f9:d7:
23:1b:73:96:e4:da:ab:a9:55:79:cb:e4:d4:75:0e:70:22:19:
3d:3d:83:83:7e:f6:3a:32:15:c6:85:1c:09:94:d9:c9:04:1a:
d2:54:78:14:38:d4:b1:19:83:53:aa:b7:6c:2b:40:b8:a8:93:
6a:15:fa:e4:7a:63:bc:17:68:6b:d2:02:a2:dd:27:88:a8:87:
3d:89:57:36:30:85:19:e9:a7:ef:a5:69:6b:89:5d:71:eb:bd:
50:91:fc:24:93:1e:90:f3:08:24:54:7e:e5:e2:ac:e3:cf:0b:
2f:78:dc:41:fe:09:6f:5e:81:02:63:fa:71:8c:5d:21:e3:82:
5e:86:dd:60:ab:29:e2:30:f5:da:a1:e4:86:5d:c6:e6:5f:03:
e0:13:73:9f:de:ae:08:86:f6:31:08:82:56:59:ee:57:04:73:
23:bb:d6:77:e7:91:cb:b0:dc:cc:f4:85:19:5f:bb:cc:e6:b1:
70:da:86:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU9oo5DlRzYug1zsRRxmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWYwZWQxZTMwOTFlN2I1Yzk5Y2U0M2NhYzEwMzEwNTVi
MGYzODUwHhcNMjUxMDI3MTEwMDQzWhcNMjUxMDI4MTEwMDQzWjAzMTEwLwYDVQQD
Eyg0OTI0YzY0ZmUxMjk4NWNjNThjZTc4OGU3YTg1YmJjYWIxM2YxNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd/+0jGBIFEbd4hXFBszgigcnQs2
8/wIGIJNcietnRdh2WSsynuEi9AK3zgLQ7Aj2+iVPamTU3IjbZvd6P2TdLuFkAKI
mpym/skS3w0bFWQxxRHzbjO0eF+9bRXXJy5BMMjO/4/WUqLJH3axqZXb+9bW808d
QM6MU4wpiIbN9lwbZQdLDQZg6au0wdkOZbCbJKjdGuLSsdUPmj4Hb7oNNkUJzCP6
J4IzEs6u+6y5iEuI1ur0HccKdhZqePy8oxvAi1YFcocSpSnt6lCMFbtK22H4NFVe
JkbonOLj/dPxgGz8dkxy5NRu2u/Pv0kEfHlHNdrc9XMqfv8efveTP4KWfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkkxk/hKYXMWM54jnqFu8qxPxSQMB8GA1UdIwQY
MBaAFO2vDtHjCR57XJnOQ8rBAxBVsPOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2Yt
MTdhMWY4NmM2ODA0LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2YtMTdhMWY4NmM2ODA0
LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYGFyFwR
PROzIZoktqnY25FLoLreSr9jVbLE+cxA001Adr3nPcEX6PP1eqeAT2nG/ojJj57P
aK1i2Se5Ahakm2hRe5xmcvnXIxtzluTaq6lVecvk1HUOcCIZPT2Dg372OjIVxoUc
CZTZyQQa0lR4FDjUsRmDU6q3bCtAuKiTahX65HpjvBdoa9ICot0niKiHPYlXNjCF
Gemn76Vpa4ldceu9UJH8JJMekPMIJFR+5eKs488LL3jcQf4Jb16BAmP6cYxdIeOC
XobdYKsp4jD12qHkhl3G5l8D4BNzn96uCIb2MQiCVlnuVwRzI7vWd+eRy7DczPSF
GV+7zOaxcNqGBg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:12:39 2025 by rpki-client