Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: hcRvoHW3wVji4TIZnULBc/zVmbk844a1COgoT1tOCDc=
Subject key identifier: F8:23:CB:BC:66:B8:94:FB:23:06:C4:DA:1C:39:9B:55:20:46:86:2D
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 0199FB7CD569A2680AA657C9E717A5499E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: GD+ke5fK7PfHqknJ0ouIRsASgAMW7pkuB+B+A2SjWmQ=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d5:69:a2:68:0a:a6:57:c9:e7:17:a5:49:9e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=f823cbbc66b894fb2306c4da1c399b552046862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:00:15:1a:a5:6f:06:c6:e8:98:e5:6d:55:
a0:0d:4e:06:7d:55:3c:2d:4d:8f:02:de:c6:c0:f3:
59:ef:ba:17:1b:da:23:0a:a7:7f:9c:1c:72:5d:16:
fc:9b:a6:e1:c8:53:ce:79:d8:92:9e:93:76:62:a5:
10:ef:bf:78:4f:43:53:7c:37:5f:84:e8:62:b5:cd:
83:2e:aa:09:0c:12:f8:b3:c1:20:2f:1f:11:f6:a9:
0c:3a:34:e4:6a:12:b4:2a:62:a9:a3:15:b9:75:ac:
e7:e6:54:ac:50:02:f6:e0:07:9f:d5:52:64:28:fb:
5c:76:33:fe:64:66:e4:c2:e7:83:9e:d7:47:89:94:
8d:82:21:f9:ae:df:0d:e8:31:92:ff:4a:58:eb:d5:
15:ef:c0:b7:2d:ec:00:42:52:58:3f:0b:74:5e:24:
4e:eb:94:cf:e4:ce:ca:66:16:6f:1a:86:a9:96:46:
38:1f:5e:9f:cd:f0:84:36:d1:73:85:36:24:f6:bc:
b3:33:c9:fe:c1:9c:c2:62:9c:1b:8b:ea:8c:4b:e6:
9f:76:74:d9:83:e0:44:62:d4:15:52:63:f7:3c:4f:
73:de:f6:ef:0d:94:a2:d2:aa:57:e4:5d:33:62:44:
f9:0c:aa:a9:2d:91:cb:ce:83:f3:c5:fd:de:0c:ec:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:CB:BC:66:B8:94:FB:23:06:C4:DA:1C:39:9B:55:20:46:86:2D
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9d:36:38:1c:72:1c:94:63:0a:b9:dd:33:90:a0:c5:29:6b:
54:28:16:68:cb:a7:14:10:60:3d:b1:f1:cd:26:60:24:8c:57:
1c:06:c5:3e:5c:34:49:df:c9:84:a2:4c:8c:cd:a5:c1:27:73:
6c:8c:4d:f4:11:d2:5a:31:2c:10:59:4e:33:3d:a0:7f:d4:2e:
32:6b:cb:b8:6f:2b:7c:ed:c7:80:c4:66:48:87:25:5c:2a:1a:
d1:6c:01:1a:f2:c5:68:01:8b:eb:1d:cd:4d:51:48:d4:7c:b0:
63:e7:28:e3:cc:a2:93:6a:71:49:1e:92:7e:1a:78:6e:86:e7:
e0:74:fb:e1:ca:a6:e4:dd:1a:c5:be:62:bf:63:cb:71:80:88:
41:5e:82:70:00:64:15:0d:f6:41:59:a5:4a:ac:ec:b2:e3:b5:
c3:ac:26:5c:db:f1:f4:c3:af:d2:a0:61:56:12:ae:8c:f2:98:
5c:18:2f:fb:80:c7:e2:59:4b:39:d4:98:09:be:18:c3:24:65:
e9:7c:ab:e9:ed:8f:d3:68:a2:50:1b:af:2d:9f:3a:5d:73:34:
6b:83:0d:eb:a3:08:11:92:d6:e4:7f:e7:95:0b:87:88:76:d1:
ed:f7:60:89:44:69:41:85:0f:21:9f:51:72:56:83:8c:0c:45:
b4:09:10:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNVpomgKplfJ5xelSZ50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjUxMDE5MDgwMTI2WhcNMjUxMDIwMDgwMTI2WjAzMTEwLwYDVQQD
EyhmODIzY2JiYzY2Yjg5NGZiMjMwNmM0ZGExYzM5OWI1NTIwNDY4NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4YAFRqlbwbG6JjlbVWgDU4GfVU8
LU2PAt7GwPNZ77oXG9ojCqd/nBxyXRb8m6bhyFPOediSnpN2YqUQ7794T0NTfDdf
hOhitc2DLqoJDBL4s8EgLx8R9qkMOjTkahK0KmKpoxW5dazn5lSsUAL24Aef1VJk
KPtcdjP+ZGbkwueDntdHiZSNgiH5rt8N6DGS/0pY69UV78C3LewAQlJYPwt0XiRO
65TP5M7KZhZvGoaplkY4H16fzfCENtFzhTYk9ryzM8n+wZzCYpwbi+qMS+afdnTZ
g+BEYtQVUmP3PE9z3vbvDZSi0qpX5F0zYkT5DKqpLZHLzoPzxf3eDOxqnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgjy7xmuJT7IwbE2hw5m1UgRoYtMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ02OBxy
HJRjCrndM5CgxSlrVCgWaMunFBBgPbHxzSZgJIxXHAbFPlw0Sd/JhKJMjM2lwSdz
bIxN9BHSWjEsEFlOMz2gf9QuMmvLuG8rfO3HgMRmSIclXCoa0WwBGvLFaAGL6x3N
TVFI1HywY+co48yik2pxSR6Sfhp4bobn4HT74cqm5N0axb5iv2PLcYCIQV6CcABk
FQ32QVmlSqzssuO1w6wmXNvx9MOv0qBhVhKujPKYXBgv+4DH4llLOdSYCb4YwyRl
6Xyr6e2P02iiUBuvLZ86XXM0a4MN66MIEZLW5H/nlQuHiHbR7fdgiURpQYUPIZ9R
claDjAxFtAkQEw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:31 2025 by rpki-client