Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: 6c8CMyugE48TARzB4vAcnz8C1NT7Yhysy9EnmgoyXJc=
Subject key identifier: A8:9F:B3:21:A7:9D:59:C8:40:C7:DF:00:F5:5E:71:50:DA:1E:62:04
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 0199FBB3625D1029844148805963B5A86D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 0481
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: yULsIxcbJ4Yp7lkKuuUNbsPeJJR5A4mBBIZsquZZnik=)
2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:62:5d:10:29:84:41:48:80:59:63:b5:a8:6d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=a89fb321a79d59c840c7df00f55e7150da1e6204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:f8:2e:ae:e5:ac:ed:0c:44:bc:2d:e3:fe:
e5:ca:32:e5:1e:23:4e:85:a8:6f:74:e4:f1:b6:25:
d8:f1:dd:9e:b3:b9:52:49:1c:12:c8:b7:78:e6:a0:
92:f6:6a:49:0c:aa:43:94:1d:b3:6e:6e:ed:8c:a2:
6f:7f:11:9a:28:7a:c7:53:e0:dd:bc:c3:8a:c6:8c:
e9:cc:d0:67:df:42:28:be:88:00:1e:59:1e:74:e2:
fb:c6:ed:52:6f:9c:9f:c8:08:0a:22:6b:e3:5f:ca:
0f:35:68:34:32:00:25:d0:72:f6:e3:ea:9a:87:82:
2c:01:a9:b6:a9:1b:7d:56:5e:1d:72:32:d9:cc:42:
16:e1:a7:10:54:94:16:db:d7:b9:69:e6:d0:f1:ff:
8c:61:30:e5:69:2d:08:ff:5c:e5:13:d8:e6:6f:43:
64:eb:9a:6a:a1:0a:0d:f2:eb:b2:38:17:e1:71:e2:
a8:bb:7b:c3:00:c4:cc:db:54:15:c4:9a:b4:da:12:
a9:3f:bb:7d:37:f3:c5:b8:12:d0:6c:25:bc:ac:54:
b5:a1:64:53:2d:e9:07:a4:79:2c:40:97:a4:56:40:
0b:7b:97:d0:c1:a0:90:28:5f:96:bf:eb:22:a3:1a:
3d:f4:67:43:66:55:22:47:98:6e:28:ad:db:66:14:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:B3:21:A7:9D:59:C8:40:C7:DF:00:F5:5E:71:50:DA:1E:62:04
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:77:6c:0e:c2:d2:b9:72:b8:61:96:d9:80:c4:51:2c:33:fd:
75:84:fd:db:98:40:b4:78:43:76:a9:d8:c3:95:f6:99:58:43:
aa:b4:23:96:27:12:1d:14:6d:1f:fd:cf:4e:db:73:3c:c3:98:
8c:5a:c8:f3:87:a9:8e:b7:b2:71:fd:25:a1:e5:59:09:8d:4d:
f7:26:7e:6b:3b:d9:e3:2e:fb:6a:80:56:78:92:24:f9:51:f3:
d6:cf:9f:8f:10:03:e5:50:a2:9c:79:23:f8:b7:45:6f:1d:ff:
61:8b:37:bd:0f:de:23:ee:36:99:40:4d:c5:df:4a:94:1a:a5:
ff:0b:30:c9:3a:5b:15:0b:6d:a3:ee:a8:41:43:f7:bb:9e:ec:
ed:ca:a8:09:59:9f:1c:02:4d:14:41:ed:f6:7f:1f:cf:99:4d:
72:70:4e:0e:2c:29:7c:d7:ca:8a:08:50:cc:49:4e:80:70:cd:
a1:e0:c6:db:fc:c7:c3:92:1f:48:6e:9a:2d:77:37:bf:53:ab:
88:90:3c:3b:a8:58:75:67:82:96:0e:3a:ac:1e:d4:d3:c1:18:
4a:e4:5d:ea:f4:83:a5:2d:64:e8:30:c6:5f:45:cc:a8:00:d6:
66:a4:a7:77:71:96:d4:49:83:a6:cd:f8:5e:46:bf:cd:40:51:
99:aa:b8:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2JdECmEQUiAWWO1qG1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1
MzY5ZjYwHhcNMjUxMDE5MDkwMTAxWhcNMjUxMDIwMDkwMTAxWjAzMTEwLwYDVQQD
EyhhODlmYjMyMWE3OWQ1OWM4NDBjN2RmMDBmNTVlNzE1MGRhMWU2MjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwz4Lq7lrO0MRLwt4/7lyjLlHiNO
hahvdOTxtiXY8d2es7lSSRwSyLd45qCS9mpJDKpDlB2zbm7tjKJvfxGaKHrHU+Dd
vMOKxozpzNBn30IovogAHlkedOL7xu1Sb5yfyAgKImvjX8oPNWg0MgAl0HL24+qa
h4IsAam2qRt9Vl4dcjLZzEIW4acQVJQW29e5aebQ8f+MYTDlaS0I/1zlE9jmb0Nk
65pqoQoN8uuyOBfhceKou3vDAMTM21QVxJq02hKpP7t9N/PFuBLQbCW8rFS1oWRT
LekHpHksQJekVkALe5fQwaCQKF+Wv+sioxo99GdDZlUiR5huKK3bZhRDcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKifsyGnnVnIQMffAPVecVDaHmIEMB8GA1UdIwQY
MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt
MmY5MDU5YzRmM2E1LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1
LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXdsDsLS
uXK4YZbZgMRRLDP9dYT925hAtHhDdqnYw5X2mVhDqrQjlicSHRRtH/3PTttzPMOY
jFrI84epjreycf0loeVZCY1N9yZ+azvZ4y77aoBWeJIk+VHz1s+fjxAD5VCinHkj
+LdFbx3/YYs3vQ/eI+42mUBNxd9KlBql/wswyTpbFQtto+6oQUP3u57s7cqoCVmf
HAJNFEHt9n8fz5lNcnBODiwpfNfKighQzElOgHDNoeDG2/zHw5IfSG6aLXc3v1Or
iJA8O6hYdWeClg46rB7U08EYSuRd6vSDpS1k6DDGX0XMqADWZqSnd3GW1EmDps34
Xka/zUBRmaq48g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:12 2025 by rpki-client