Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: cC5LFSeMimg5s5HjxCkkgcHpna3QbOGRKoeqt61wOv4=
Subject key identifier: 13:EB:9A:7D:57:72:AF:91:97:5C:E9:D6:15:F7:2F:4A:B7:65:F5:3E
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 019A71B87972C3DF9A4F96A3E3ECAF4B99F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0944
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: jkqJmipgsUm14rPhWWee0Bb7dic8vWNO8DpkYVJ5fJE=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:79:72:c3:df:9a:4f:96:a3:e3:ec:af:4b:99:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=13eb9a7d5772af91975ce9d615f72f4ab765f53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:d8:46:6b:db:00:fa:2c:d4:7e:08:e4:e0:
91:e7:b3:87:9b:70:cd:c4:8f:d7:db:0b:2b:dc:2f:
ee:8c:94:a7:fd:e6:08:4e:ab:ea:60:ff:95:e3:40:
0b:07:ff:8a:26:bd:4a:4f:da:c8:e5:68:68:4f:f1:
d7:09:ce:99:b1:f6:dc:ff:7c:09:14:a7:a9:80:b4:
71:61:7a:26:2e:5d:10:80:8e:16:bc:21:11:16:89:
2a:dc:02:ba:70:48:a8:74:26:54:ee:d6:d7:e6:33:
ed:8d:cc:2c:ff:ea:f2:4e:cb:21:f2:99:d8:2b:ae:
d0:88:0a:37:1f:54:20:39:b1:20:c4:c8:a6:37:5d:
8f:74:a5:40:76:5c:e0:63:ad:2e:4c:0a:43:cc:f1:
ac:a7:9f:80:6f:8c:08:74:3f:2b:00:a0:c2:ab:4e:
0e:93:90:a6:18:9b:57:c4:51:03:f0:f2:68:2d:cf:
24:31:73:52:cb:9c:be:ec:4d:eb:f8:4f:57:ad:9e:
2f:aa:bc:27:d4:73:c8:36:4e:d9:83:3e:71:e8:2a:
c8:8d:49:7b:eb:85:d6:0e:e5:d1:8c:fd:65:5b:6e:
54:df:95:a6:a3:e2:9c:06:ba:da:37:e5:31:15:8c:
76:4c:e7:36:6e:42:6e:bf:9b:1e:9f:7d:2d:b5:62:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:9A:7D:57:72:AF:91:97:5C:E9:D6:15:F7:2F:4A:B7:65:F5:3E
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:55:4b:66:e9:28:ee:e5:d0:4e:e3:e3:00:78:1a:50:fd:31:
7a:f0:bc:cb:3a:25:48:a9:e9:fa:61:a9:39:35:98:a0:27:ea:
d6:58:d3:c5:73:66:52:30:7c:5d:9c:e3:f1:02:7d:78:4a:cf:
14:5f:0b:54:0e:be:33:23:dd:e2:0e:2b:96:3f:52:31:fa:29:
8b:88:6a:1c:55:62:33:89:4c:48:52:f6:d3:f0:6f:80:2b:45:
87:08:f3:ba:88:d8:89:6d:57:c2:32:2e:88:2b:00:97:57:5e:
87:94:66:c0:b1:77:fd:a8:d7:6d:7c:e5:e2:9f:65:f3:14:cd:
55:d3:98:d3:41:c2:0c:7e:e2:7e:f7:5c:6c:96:95:4f:6d:d5:
76:9f:d5:b9:63:c1:18:52:70:39:8a:b8:c9:5c:2f:2f:22:4b:
07:da:5b:5c:a3:a7:28:a6:21:68:07:56:21:97:da:60:8e:83:
0e:c0:06:68:41:d8:16:38:cb:46:e9:31:95:5c:87:00:05:d6:
98:52:2e:1d:d7:88:51:a8:73:cd:9c:fe:5d:ab:9c:3d:2a:22:
b2:b9:9f:73:ce:c0:0b:26:68:67:68:55:bb:7f:d3:43:fd:3b:
78:8c:83:fe:e4:7b:b4:da:82:10:8c:bb:2d:0a:b3:38:79:cb:
2f:97:37:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHlyw9+aT5aj4+yvS5n4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjBiMTdkZDg5YjM4NjQyNDk3MjhiOWZjMmVlYWU1MTBm
ZGU0ZmIwHhcNMjUxMTExMDcwMTQ2WhcNMjUxMTEyMDcwMTQ2WjAzMTEwLwYDVQQD
EygxM2ViOWE3ZDU3NzJhZjkxOTc1Y2U5ZDYxNWY3MmY0YWI3NjVmNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nrYRmvbAPos1H4I5OCR57OHm3DN
xI/X2wsr3C/ujJSn/eYITqvqYP+V40ALB/+KJr1KT9rI5WhoT/HXCc6Zsfbc/3wJ
FKepgLRxYXomLl0QgI4WvCERFokq3AK6cEiodCZU7tbX5jPtjcws/+ryTssh8pnY
K67QiAo3H1QgObEgxMimN12PdKVAdlzgY60uTApDzPGsp5+Ab4wIdD8rAKDCq04O
k5CmGJtXxFED8PJoLc8kMXNSy5y+7E3r+E9XrZ4vqrwn1HPINk7Zgz5x6CrIjUl7
64XWDuXRjP1lW25U35Wmo+KcBrraN+UxFYx2TOc2bkJuv5sen30ttWKPxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPrmn1Xcq+Rl1zp1hX3L0q3ZfU+MB8GA1UdIwQY
MBaAFIuwsX3YmzhkJJcoufwu6uUQ/eT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQt
ZTAxOTE5ZmNmZWRmLzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQtZTAxOTE5ZmNmZWRm
LzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1VLZuko
7uXQTuPjAHgaUP0xevC8yzolSKnp+mGpOTWYoCfq1ljTxXNmUjB8XZzj8QJ9eErP
FF8LVA6+MyPd4g4rlj9SMfopi4hqHFViM4lMSFL20/BvgCtFhwjzuojYiW1XwjIu
iCsAl1deh5RmwLF3/ajXbXzl4p9l8xTNVdOY00HCDH7ifvdcbJaVT23Vdp/VuWPB
GFJwOYq4yVwvLyJLB9pbXKOnKKYhaAdWIZfaYI6DDsAGaEHYFjjLRukxlVyHAAXW
mFIuHdeIUahzzZz+XaucPSoisrmfc87ACyZoZ2hVu3/TQ/07eIyD/uR7tNqCEIy7
LQqzOHnLL5c3cQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:47 2025 by rpki-client