Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
File: 7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft (raw, json)
Hash identifier: 9LPoySWUaFIaNOAyGz+bniMwRKn0moq1dAx1WwifujU=
Subject key identifier: 7C:A1:4B:7F:C6:AD:4F:24:3F:1B:45:DA:94:FC:12:BB:84:D4:CC:67
Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
Certificate issuer: /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Certificate serial: 019A72936365081B83E4F2BCFE8C854DAB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
Manifest number: 167A
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: 7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl (hash: oihlfBb7p+kekSIuwNVHtTPAfQkflx91Ei3EnFQut1s=)
2: mVLFfpsCTZXmz1USSK13lw0lI4E.roa (hash: MFOelRyO21tS7ErEnP3ifMi3vY1sgM39x3qUbFKHhSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:63:65:08:1b:83:e4:f2:bc:fe:8c:85:4d:ab:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=7ca14b7fc6ad4f243f1b45da94fc12bb84d4cc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:9a:da:32:ef:97:01:8a:ed:e2:22:e5:85:
9d:07:f6:7a:d1:c2:36:74:01:db:18:51:d9:e0:1a:
09:68:ee:4e:29:6e:99:b5:73:0f:67:6c:70:0f:e9:
8b:16:92:45:4f:ea:21:17:fe:6b:cf:69:85:72:07:
ee:a2:04:91:68:fb:36:1b:69:5b:5f:19:c8:b9:a1:
9d:84:22:5d:04:93:01:ca:e2:e4:09:a3:e8:10:b9:
cf:be:d5:61:64:10:d1:0d:4b:fe:5d:7a:fc:f9:7e:
2b:fd:bf:a1:6d:85:12:fa:51:78:c1:de:c8:0f:c9:
c6:79:fa:f7:60:93:69:01:cd:ec:f7:3b:9c:11:3a:
32:57:31:8c:d6:bd:04:09:7e:33:8a:b5:0f:86:55:
a5:3c:95:05:f6:17:9d:ce:68:3d:89:e3:63:db:41:
f7:19:35:4d:5f:04:a7:3a:df:84:1d:cd:44:e8:aa:
e4:0d:6d:24:29:c6:5f:25:8e:d8:cf:45:2e:f4:06:
9b:1c:80:37:03:87:fd:c9:6c:3f:88:68:23:52:05:
d2:7a:5f:64:c3:40:4e:e1:c0:30:d6:d4:f3:0d:44:
a8:a8:59:9b:e7:2f:e0:d3:61:9d:c1:9e:59:d7:79:
5e:88:c5:2f:d3:5b:3c:7d:70:8c:73:c3:bb:89:20:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:4B:7F:C6:AD:4F:24:3F:1B:45:DA:94:FC:12:BB:84:D4:CC:67
X509v3 Authority Key Identifier:
keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:44:31:44:ae:07:b1:ca:8a:36:8f:cc:a0:07:d8:98:1b:09:
ce:4a:32:54:4b:29:e7:fa:2a:ed:e4:e1:10:50:22:6f:10:30:
0c:ec:c3:5c:74:72:78:b4:8a:5d:91:f1:e6:26:2b:e7:3d:35:
36:c1:67:05:d0:05:bb:56:08:36:55:1b:38:ba:a0:1f:11:33:
27:9f:38:02:a9:1c:1d:b8:bf:63:98:c6:e1:a5:45:c8:7e:b3:
ac:c1:21:ea:c4:82:35:7c:31:e4:96:97:d5:e9:18:5a:64:8a:
a8:6f:cd:85:39:72:e3:ac:11:09:cd:98:ef:4c:63:25:65:ff:
75:e3:d4:56:49:c4:f8:c7:39:48:8b:6e:d5:1e:fa:65:9e:e0:
ad:ca:a9:99:41:7a:6f:e4:03:e9:b2:ee:ec:26:6e:21:62:1e:
df:cc:2a:c8:63:4e:20:c8:a5:e7:e7:42:8a:d4:5a:d9:8e:e5:
7d:92:bf:c7:31:fb:12:27:df:85:62:67:f4:e1:80:6b:fb:fb:
7f:78:8c:de:ad:df:7d:6c:b0:fd:d4:cd:59:ef:83:48:83:c8:
34:d6:ba:88:0b:a9:a4:d4:a7:10:b8:85:0f:87:d0:f1:24:90:
51:c6:82:a0:04:db:b5:53:42:e1:0c:9a:86:9d:0b:96:17:33:
ad:18:df:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk2NlCBuD5PK8/oyFTassMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZTAxOTc0NzQzYTNiM2EyOGY3YTY0ZTJkODcxYmYxZTVl
NWY2ZTUwHhcNMjUxMTExMTEwMDUyWhcNMjUxMTEyMTEwMDUyWjAzMTEwLwYDVQQD
Eyg3Y2ExNGI3ZmM2YWQ0ZjI0M2YxYjQ1ZGE5NGZjMTJiYjg0ZDRjYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzua2jLvlwGK7eIi5YWdB/Z60cI2
dAHbGFHZ4BoJaO5OKW6ZtXMPZ2xwD+mLFpJFT+ohF/5rz2mFcgfuogSRaPs2G2lb
XxnIuaGdhCJdBJMByuLkCaPoELnPvtVhZBDRDUv+XXr8+X4r/b+hbYUS+lF4wd7I
D8nGefr3YJNpAc3s9zucEToyVzGM1r0ECX4zirUPhlWlPJUF9hedzmg9ieNj20H3
GTVNXwSnOt+EHc1E6KrkDW0kKcZfJY7Yz0Uu9AabHIA3A4f9yWw/iGgjUgXSel9k
w0BO4cAw1tTzDUSoqFmb5y/g02GdwZ5Z13leiMUv01s8fXCMc8O7iSAjNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyhS3/GrU8kPxtF2pT8EruE1MxnMB8GA1UdIwQY
MBaAFO/gGXR0Ojs6KPemTi2HG/Hl5fblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1BWmRIUTZPem9vOTZaT0xZY2I4ZVhsOXVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NDM4YjctMzlhMi00Yzk1LWFmMWEt
Y2RiMWZkYzlkNTdkLzEvNy1BWmRIUTZPem9vOTZaT0xZY2I4ZVhsOXVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NDM4YjctMzlhMi00Yzk1LWFmMWEtY2RiMWZkYzlkNTdk
LzEvNy1BWmRIUTZPem9vOTZaT0xZY2I4ZVhsOXVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUQxRK4H
scqKNo/MoAfYmBsJzkoyVEsp5/oq7eThEFAibxAwDOzDXHRyeLSKXZHx5iYr5z01
NsFnBdAFu1YINlUbOLqgHxEzJ584AqkcHbi/Y5jG4aVFyH6zrMEh6sSCNXwx5JaX
1ekYWmSKqG/NhTly46wRCc2Y70xjJWX/dePUVknE+Mc5SItu1R76ZZ7grcqpmUF6
b+QD6bLu7CZuIWIe38wqyGNOIMil5+dCitRa2Y7lfZK/xzH7EiffhWJn9OGAa/v7
f3iM3q3ffWyw/dTNWe+DSIPINNa6iAuppNSnELiFD4fQ8SSQUcaCoATbtVNC4Qya
hp0LlhczrRjfww==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:10 2025 by rpki-client