Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
File: 7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json)
Hash identifier: mvxRsbfc9wo6wYBMNHBh8fG7d4W3zEiOIz6kqSHE6zY=
Subject key identifier: 75:54:45:FB:0A:92:23:41:92:9C:4C:B8:06:8E:47:34:9F:82:F3:CB
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 0199FAD84D2B2CFF183475D15E153D4D729B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
Manifest number: 11E0
Signing time: Sun 19 Oct 2025 05:01:43 +0000
Manifest this update: Sun 19 Oct 2025 05:01:43 +0000
Manifest next update: Mon 20 Oct 2025 05:01:43 +0000
Files and hashes: 1: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: /EfOnn6u1yP+1+7K5Y9fEJvysxXaacZ864yoSSvHJ7U=)
2: j-wumpm8bgZz2aXq3WW1uyM7CGA.roa (hash: sbRRHDlTVstpRJS8Rp0RxMYJ2O6mjuNLI+lW12IAgE4=)
3: rxB_SKD05flXCVb5a9Y1L-kYSOM.roa (hash: xxBSeAniUfhkRNjna0RuKk7EzeOrdkzGj8pWxibPVsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:4d:2b:2c:ff:18:34:75:d1:5e:15:3d:4d:72:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Oct 19 05:01:43 2025 GMT
Not After : Oct 20 05:01:43 2025 GMT
Subject: CN=755445fb0a922341929c4cb8068e47349f82f3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:1c:e7:8d:a3:7d:29:8b:26:bb:83:53:ac:
6e:c2:9e:2f:f2:f4:17:f0:ac:7f:8f:ad:d0:8f:d9:
34:a9:23:78:23:43:1e:64:e4:9d:f7:c4:7f:63:0d:
0a:bb:47:c3:b6:ab:de:55:8d:a3:b6:bf:cd:b6:47:
5a:80:36:0d:0a:73:2c:8a:fe:70:22:d0:6e:aa:68:
35:e1:41:f6:8c:8e:79:12:28:bc:39:64:67:49:8b:
88:82:e2:2d:0a:8e:90:53:ab:59:d5:cb:81:bc:6e:
31:c7:a2:00:93:1c:db:eb:43:b3:f2:b0:f6:fb:0f:
69:36:55:1a:5f:04:f6:44:d4:42:1c:a7:92:d1:82:
fc:0d:15:5e:9a:b1:1c:56:b3:eb:64:ad:8e:8c:3c:
18:5f:49:11:62:7a:7a:98:ad:5b:43:c1:0d:a0:8c:
c5:31:1b:13:ac:a7:66:27:29:9d:e7:cd:81:a7:85:
8f:9f:d0:35:1b:20:bd:30:90:2f:fd:8d:e1:6a:10:
e8:b8:41:e2:c1:19:47:1c:c2:69:ac:58:1f:2c:45:
95:53:6e:39:29:5f:6b:13:4d:dd:11:72:87:1b:36:
4a:7c:19:12:2e:e5:8b:29:cc:02:db:49:b3:4a:05:
3c:9f:cd:03:17:c3:b9:c0:f9:be:a1:9d:a8:e8:a0:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:45:FB:0A:92:23:41:92:9C:4C:B8:06:8E:47:34:9F:82:F3:CB
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:26:5b:1e:c4:f4:6e:a2:af:dc:f8:09:6f:5a:2a:7b:31:b5:
b3:c8:bc:af:82:41:d4:66:12:85:2a:e2:20:2c:bf:c2:b1:0b:
39:bf:c6:d8:34:9b:36:e0:d7:7d:e0:5b:e8:cb:26:b5:82:20:
c9:cc:89:f9:71:31:1e:a6:6e:e5:e5:e4:63:a5:4d:0f:07:5d:
b3:bd:04:0e:fc:45:98:e6:69:b8:d4:2d:61:68:10:af:41:49:
05:fb:2e:c6:17:1e:7d:48:d0:13:b1:72:23:01:8d:62:b0:46:
02:60:07:78:6f:b7:08:26:0d:6e:e7:1b:69:da:03:8d:2e:4c:
21:9e:fd:9a:db:b5:ba:7c:4b:9e:62:0e:c1:f3:a1:93:4b:d5:
70:51:7f:57:a1:69:66:47:10:2a:0e:f7:19:e0:c3:0a:59:3b:
59:9c:7f:ab:2e:73:1e:05:5e:b1:19:76:1d:47:06:41:a5:b2:
a5:b7:48:b0:13:72:6e:56:45:20:96:e3:fd:91:11:ce:b1:89:
4f:69:a1:69:d0:7b:c5:09:79:61:a1:91:83:69:21:d2:cb:9f:
20:5c:be:0d:f1:99:26:fe:3b:5c:30:47:1c:34:20:8c:55:68:
b7:f5:b0:02:44:2c:87:2a:ce:13:72:d2:24:0e:48:d7:c4:ee:
f0:80:a0:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62E0rLP8YNHXRXhU9TXKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjdjYTlmZmFmZTcyYTMwOTY2ZjdlNDNkOTJiNThlNzc0
Y2U3NDEwHhcNMjUxMDE5MDUwMTQzWhcNMjUxMDIwMDUwMTQzWjAzMTEwLwYDVQQD
Eyg3NTU0NDVmYjBhOTIyMzQxOTI5YzRjYjgwNjhlNDczNDlmODJmM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunEc542jfSmLJruDU6xuwp4v8vQX
8Kx/j63Qj9k0qSN4I0MeZOSd98R/Yw0Ku0fDtqveVY2jtr/NtkdagDYNCnMsiv5w
ItBuqmg14UH2jI55Eii8OWRnSYuIguItCo6QU6tZ1cuBvG4xx6IAkxzb60Oz8rD2
+w9pNlUaXwT2RNRCHKeS0YL8DRVemrEcVrPrZK2OjDwYX0kRYnp6mK1bQ8ENoIzF
MRsTrKdmJymd582Bp4WPn9A1GyC9MJAv/Y3hahDouEHiwRlHHMJprFgfLEWVU245
KV9rE03dEXKHGzZKfBkSLuWLKcwC20mzSgU8n80DF8O5wPm+oZ2o6KDRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVURfsKkiNBkpxMuAaORzSfgvPLMB8GA1UdIwQY
MBaAFOz3yp/6/nKjCWb35D2StY53TOdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUt
OTgxZmJiMzQ0MmRkLzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUtOTgxZmJiMzQ0MmRk
LzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSZbHsT0
bqKv3PgJb1oqezG1s8i8r4JB1GYShSriICy/wrELOb/G2DSbNuDXfeBb6MsmtYIg
ycyJ+XExHqZu5eXkY6VNDwdds70EDvxFmOZpuNQtYWgQr0FJBfsuxhcefUjQE7Fy
IwGNYrBGAmAHeG+3CCYNbucbadoDjS5MIZ79mtu1unxLnmIOwfOhk0vVcFF/V6Fp
ZkcQKg73GeDDClk7WZx/qy5zHgVesRl2HUcGQaWypbdIsBNyblZFIJbj/ZERzrGJ
T2mhadB7xQl5YaGRg2kh0sufIFy+DfGZJv47XDBHHDQgjFVot/WwAkQshyrOE3LS
JA5I18Tu8ICgog==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:32 2025 by rpki-client