Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: 8m3iLSD3nlpPULLu3fZTwtJH/4VB2oNBmea6QOyrzSk=
Subject key identifier: D5:43:E8:90:21:30:C9:79:2D:01:EB:14:3F:9E:B2:29:6A:C5:60:70
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 0199FBEB3160337108D8843BF054704609E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 0811
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: ivbHtr+7P1S+t5H0UAw0TiZLsOkcyhHmRdG71l+M0L4=)
2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:31:60:33:71:08:d8:84:3b:f0:54:70:46:09:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=d543e8902130c9792d01eb143f9eb2296ac56070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:2e:96:e8:92:dd:b8:dd:e6:b9:53:76:39:
05:dc:82:34:ad:a8:fd:4a:bc:2c:bc:a9:39:18:05:
b0:a3:3c:a9:c4:29:6b:2d:1f:25:65:a9:ce:4f:a3:
de:94:bd:a4:34:49:87:c0:5f:bf:f0:15:8d:aa:84:
6e:80:51:f2:48:69:fc:ac:04:98:bf:fd:ed:ef:b5:
43:bd:38:7f:9d:8e:de:c3:13:9b:5f:de:1a:45:14:
ea:fb:e1:c4:f6:82:55:19:8e:d7:a2:b9:ce:7a:b2:
5c:b2:75:08:82:ce:00:56:d3:ce:29:68:56:64:ae:
f0:2c:57:ab:7b:35:15:f4:b4:ef:b3:12:f7:32:9c:
bb:c4:f0:f2:d5:b9:f4:41:5a:8b:55:5a:b9:da:26:
67:90:b9:e7:d9:c4:f3:77:9e:d8:ce:f7:8d:d4:81:
9b:80:10:c2:a7:88:2d:5f:fe:da:e1:be:16:5f:ad:
0b:70:33:da:69:ed:27:ce:88:87:cb:3b:f7:75:6f:
ce:dc:20:b6:fb:36:db:c3:42:16:58:ed:78:3e:8c:
e3:86:e8:ea:b1:22:78:c9:89:19:d5:ad:61:51:07:
17:53:e6:29:d0:18:5b:03:93:08:ce:39:9b:bb:7c:
5f:0b:22:98:92:2b:aa:6d:4b:c8:8b:41:e7:60:ad:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:43:E8:90:21:30:C9:79:2D:01:EB:14:3F:9E:B2:29:6A:C5:60:70
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:10:19:a1:90:50:01:94:73:53:7b:86:92:95:f4:19:47:71:
84:59:7b:9c:91:c6:b3:9a:e6:11:6d:6f:07:6d:66:23:e2:22:
1e:91:56:ce:fa:af:0b:f5:53:19:81:78:8e:a9:e0:6e:d7:33:
3d:6b:eb:31:17:d1:3b:ab:69:84:05:6a:b7:f3:56:89:1c:ff:
5c:82:3e:42:b2:c8:2e:ef:91:a7:c7:64:1f:6c:4d:11:72:15:
8b:18:50:08:6a:f8:93:b3:b4:2a:6a:12:63:5a:ca:ba:94:c9:
20:6a:03:47:1b:1e:0e:25:84:82:71:f1:ae:a8:e9:8e:5a:3e:
bd:15:af:8c:53:ad:12:b1:c7:21:85:2e:a3:51:61:69:a6:bc:
cf:cd:30:18:1b:19:53:ba:95:42:1b:4d:ee:cc:59:cb:67:11:
22:56:70:25:a2:94:07:35:06:03:f0:02:0f:3f:6e:91:88:8f:
b4:3b:04:c1:db:5c:28:d3:ab:3b:81:14:01:3f:ca:fb:b5:53:
23:ce:ed:c0:83:a0:f4:62:e6:8e:e2:49:c4:39:aa:96:0d:b9:
08:5e:81:4a:33:6b:f9:26:66:ea:f9:8e:e8:02:25:09:00:82:
8c:a6:08:73:08:c1:c0:9e:53:d6:6e:0d:5a:47:fc:1c:11:0e:
fb:1b:9b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zFgM3EI2IQ78FRwRgngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOWM2ODVjZjY2NzFjYzY1NmY5MmU3NjQ1NTdhMzgzNzhm
MjgyN2MwHhcNMjUxMDE5MTAwMTU4WhcNMjUxMDIwMTAwMTU4WjAzMTEwLwYDVQQD
EyhkNTQzZTg5MDIxMzBjOTc5MmQwMWViMTQzZjllYjIyOTZhYzU2MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8kuluiS3bjd5rlTdjkF3II0raj9
SrwsvKk5GAWwozypxClrLR8lZanOT6PelL2kNEmHwF+/8BWNqoRugFHySGn8rASY
v/3t77VDvTh/nY7ewxObX94aRRTq++HE9oJVGY7XornOerJcsnUIgs4AVtPOKWhW
ZK7wLFerezUV9LTvsxL3Mpy7xPDy1bn0QVqLVVq52iZnkLnn2cTzd57YzveN1IGb
gBDCp4gtX/7a4b4WX60LcDPaae0nzoiHyzv3dW/O3CC2+zbbw0IWWO14Pozjhujq
sSJ4yYkZ1a1hUQcXU+Yp0BhbA5MIzjmbu3xfCyKYkiuqbUvIi0HnYK3OVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVD6JAhMMl5LQHrFD+esilqxWBwMB8GA1UdIwQY
MBaAFOycaFz2ZxzGVvkudkVXo4N48oJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUt
YmFiNDhkYWI0Y2Q2LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lOWI1NmUtM2I1Yi00M2IxLThiYjUtYmFiNDhkYWI0Y2Q2
LzEvN0p4b1hQWm5ITVpXLVM1MlJWZWpnM2p5Z253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRAZoZBQ
AZRzU3uGkpX0GUdxhFl7nJHGs5rmEW1vB21mI+IiHpFWzvqvC/VTGYF4jqngbtcz
PWvrMRfRO6tphAVqt/NWiRz/XII+QrLILu+Rp8dkH2xNEXIVixhQCGr4k7O0KmoS
Y1rKupTJIGoDRxseDiWEgnHxrqjpjlo+vRWvjFOtErHHIYUuo1Fhaaa8z80wGBsZ
U7qVQhtN7sxZy2cRIlZwJaKUBzUGA/ACDz9ukYiPtDsEwdtcKNOrO4EUAT/K+7VT
I87twIOg9GLmjuJJxDmqlg25CF6BSjNr+SZm6vmO6AIlCQCCjKYIcwjBwJ5T1m4N
Wkf8HBEO+xubtg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:30 2025 by rpki-client