Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File: 7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier: fvto4r7/BSRcsiJA8Mhcri9dDVq7uIUpDjDdRkssDfw=
Subject key identifier: FB:E0:51:E4:C1:05:42:04:89:C5:23:C0:B4:8B:48:79:61:A5:A1:71
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer: /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial: 019A72939D3E2B1512787DAD259BB835D4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number: 0C8F
Signing time: Tue 11 Nov 2025 11:01:07 +0000
Manifest this update: Tue 11 Nov 2025 11:01:07 +0000
Manifest next update: Wed 12 Nov 2025 11:01:07 +0000
Files and hashes: 1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: VieSldbpHxVhXfmlNwqKzFYahl9JQhcmsQkOey/H7YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9d:3e:2b:15:12:78:7d:ad:25:9b:b8:35:d4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Validity
Not Before: Nov 11 11:01:07 2025 GMT
Not After : Nov 12 11:01:07 2025 GMT
Subject: CN=fbe051e4c105420489c523c0b48b487961a5a171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:bb:c7:5c:cb:e9:4d:73:c2:40:d1:7a:03:
75:be:0c:7e:52:09:aa:f1:ee:73:a2:86:62:3b:3e:
e4:72:82:64:8c:69:3f:e4:18:38:ce:81:a9:d2:3d:
55:a9:ca:1c:8b:62:c1:41:d0:0e:fb:d8:9e:b5:29:
d7:35:fe:7a:53:6b:8e:90:3e:c1:71:7f:63:42:ce:
0f:22:8c:e6:6d:c0:99:a3:f3:ea:a6:14:f1:c8:f1:
07:d9:49:2d:9c:14:6e:28:02:7c:08:51:bc:ff:13:
88:9d:aa:95:d4:c6:55:6d:61:13:70:9e:02:ad:0e:
d1:c7:fb:14:0e:b0:a9:d7:e1:ea:67:48:c2:0a:b0:
00:b1:b0:90:03:a0:82:d7:0a:a1:24:f8:9d:b4:02:
2c:dd:e4:de:66:59:51:3c:01:8e:5d:85:e5:26:46:
9e:52:da:6c:79:8b:f0:fe:a6:1f:be:af:e6:d1:92:
cf:f1:aa:a4:3d:b0:18:c3:8d:6c:ab:4f:63:63:09:
a9:3a:18:4d:f1:35:1a:5f:c0:5c:48:07:c4:37:71:
60:2c:15:c8:cc:3e:23:ba:36:0c:a9:a2:44:03:f5:
43:a6:9e:6a:59:fa:18:03:d1:7f:50:22:c2:3a:31:
1c:77:e4:0a:4b:29:32:d2:40:7d:10:f5:dc:cc:e3:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:51:E4:C1:05:42:04:89:C5:23:C0:B4:8B:48:79:61:A5:A1:71
X509v3 Authority Key Identifier:
keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a8:ad:92:25:76:a4:84:af:2d:ad:eb:e7:1c:3c:86:3a:5d:
a7:41:f3:3d:5a:71:e0:4c:c7:b9:6b:09:21:5c:8a:f5:54:7f:
f8:20:b2:89:d8:ef:10:c3:f0:00:29:74:ae:56:8e:21:39:72:
0c:ce:52:04:b8:03:7d:66:14:76:ab:72:ec:40:cf:91:b9:2b:
b3:bb:04:d3:5e:ca:e8:6f:2a:f4:99:78:30:45:83:92:8e:d4:
65:bb:f6:93:2e:07:83:1e:94:70:91:57:35:a1:03:4c:0e:e4:
61:95:da:ee:22:78:1a:6a:73:22:8f:26:b3:c1:d0:03:aa:35:
e9:a0:95:47:cc:b4:a9:a3:2d:c0:7e:04:a2:02:00:58:13:c8:
78:7e:9e:d0:05:7a:28:2d:91:66:c0:96:e5:73:ad:3f:2e:98:
e1:85:7c:af:a7:97:31:b4:1b:c7:e2:21:9a:91:9b:67:92:d2:
e9:08:5d:aa:f7:1a:b0:7c:f9:41:d7:c0:e1:60:9c:bd:45:f5:
6c:b5:a2:b3:33:0d:60:3d:c4:ee:3a:d8:9a:0c:cf:87:db:cf:
a2:4d:3d:ce:8a:58:ad:88:2e:79:4c:d6:c3:82:16:54:65:c8:
6d:c7:71:f5:61:a1:4a:21:b3:53:a9:40:b5:7c:b6:5f:70:c6:
95:6a:75:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk50+KxUSeH2tJZu4NdT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDllOGMzYjVkZGJlZTk4Y2Q3ZmVlYTBkZmY4Yzc2MjVi
ODVhOWQwHhcNMjUxMTExMTEwMTA3WhcNMjUxMTEyMTEwMTA3WjAzMTEwLwYDVQQD
EyhmYmUwNTFlNGMxMDU0MjA0ODljNTIzYzBiNDhiNDg3OTYxYTVhMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC+7x1zL6U1zwkDRegN1vgx+Ugmq
8e5zooZiOz7kcoJkjGk/5Bg4zoGp0j1Vqcoci2LBQdAO+9ietSnXNf56U2uOkD7B
cX9jQs4PIozmbcCZo/PqphTxyPEH2UktnBRuKAJ8CFG8/xOInaqV1MZVbWETcJ4C
rQ7Rx/sUDrCp1+HqZ0jCCrAAsbCQA6CC1wqhJPidtAIs3eTeZllRPAGOXYXlJkae
UtpseYvw/qYfvq/m0ZLP8aqkPbAYw41sq09jYwmpOhhN8TUaX8BcSAfEN3FgLBXI
zD4jujYMqaJEA/VDpp5qWfoYA9F/UCLCOjEcd+QKSyky0kB9EPXczOP/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvgUeTBBUIEicUjwLSLSHlhpaFxMB8GA1UdIwQY
MBaAFO3Z6MO13b7pjNf+6g3/jHYluFqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hZGE3Y2YtOTFlMi00ZTM4LTk2ZmMt
YTI4NmVhMTFkMTAwLzEvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hZGE3Y2YtOTFlMi00ZTM4LTk2ZmMtYTI4NmVhMTFkMTAw
LzEvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKitkiV2
pISvLa3r5xw8hjpdp0HzPVpx4EzHuWsJIVyK9VR/+CCyidjvEMPwACl0rlaOITly
DM5SBLgDfWYUdqty7EDPkbkrs7sE017K6G8q9Jl4MEWDko7UZbv2ky4Hgx6UcJFX
NaEDTA7kYZXa7iJ4GmpzIo8ms8HQA6o16aCVR8y0qaMtwH4EogIAWBPIeH6e0AV6
KC2RZsCW5XOtPy6Y4YV8r6eXMbQbx+IhmpGbZ5LS6QhdqvcasHz5QdfA4WCcvUX1
bLWiszMNYD3E7jrYmgzPh9vPok09zopYrYgueUzWw4IWVGXIbcdx9WGhSiGzU6lA
tXy2X3DGlWp1Uw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:42 2025 by rpki-client