Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: tnQa0u/ItGfIjFiGY0VVfoI6eYBPXW7fQtAyCWS0QaA=
Subject key identifier: FF:EA:6A:72:0E:3A:4A:76:3B:81:32:D6:01:2A:2B:4C:9F:D5:0B:F9
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 0199FB7CEC8DFDB76A9FA421C2E1910BCC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 7C
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: 5vCA00XGCHYDg8C7OJPXZv7RJ4rADsBNW8jTCDI8T2E=)
2: FoUBO1CLvHv9IUZgMqlXSTP27UE.roa (hash: UWDESR9+S/CWXTmG2rrRD+fM1FniiIp0n2rFP03so88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ec:8d:fd:b7:6a:9f:a4:21:c2:e1:91:0b:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=ffea6a720e3a4a763b8132d6012a2b4c9fd50bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:81:99:6c:53:e4:c8:15:73:67:f2:d5:ec:
68:34:2b:50:16:dc:89:44:ce:36:32:63:fb:1e:32:
23:1c:6f:ad:94:cf:a1:b9:fd:dc:c1:c9:27:02:25:
14:44:62:bc:2c:ca:e3:47:3e:8c:61:55:70:00:fe:
37:cf:ab:72:b9:11:b8:80:79:6c:bd:98:74:ee:0a:
cd:cd:74:ed:22:6e:91:16:b0:5c:c5:ce:65:2f:c6:
8d:4f:83:da:3a:2f:04:0a:e7:a4:22:9a:b1:3c:fd:
1a:8c:e8:94:6e:2f:f1:3a:cc:5f:34:e1:3d:bd:b6:
ac:99:62:fa:c2:9c:45:2d:5b:e5:48:d7:6d:ed:7f:
10:6f:79:e9:64:ca:cf:bb:bf:87:80:9e:32:30:a5:
bb:9d:a6:35:dc:84:45:98:52:32:bb:1c:23:a5:54:
7d:e1:b5:98:51:65:ee:b4:08:08:22:f5:25:59:69:
6a:0a:de:23:00:88:b7:2c:64:cb:35:71:d4:f5:c6:
77:f3:3e:26:08:cc:df:49:f6:65:35:33:78:ea:6c:
ca:f3:6e:42:08:83:a4:a7:75:99:f5:5d:d8:07:38:
d8:81:04:9c:b8:e1:de:27:e1:3b:79:e4:72:ca:e4:
15:80:1e:45:23:88:f0:ea:f3:d9:6e:6a:76:9b:11:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:6A:72:0E:3A:4A:76:3B:81:32:D6:01:2A:2B:4C:9F:D5:0B:F9
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bb:2d:de:3c:d2:b7:af:1b:f2:a7:d9:b6:ba:3a:1e:f9:d3:
40:ec:0d:b8:e2:e1:8a:af:42:a2:dd:b9:93:b1:2e:7b:f1:13:
c2:f3:d3:77:d5:e6:ef:69:a8:7f:13:33:1f:b2:8d:b1:6d:36:
27:83:b8:aa:81:ac:a9:ec:bc:cc:31:35:66:05:f5:aa:e8:00:
a6:ac:f8:a0:90:84:bb:b9:22:3a:f0:10:d0:43:50:d3:99:4d:
a8:1c:7c:d9:f2:92:cc:66:d6:47:e9:c8:2e:2c:25:00:14:6f:
7c:33:47:16:9e:28:63:43:71:70:2d:0d:58:de:dd:86:40:ba:
40:a9:39:15:01:db:14:a5:ed:3d:c2:28:f4:18:be:30:65:c6:
2e:d2:b9:b9:73:b3:e1:d5:0f:31:64:6c:07:eb:50:51:86:3e:
21:5e:dc:12:03:04:2f:75:c8:41:6a:1c:44:5a:97:e8:80:f7:
c7:8b:e0:55:33:78:a2:26:ce:dd:36:0b:68:b6:ee:83:54:5b:
04:f7:50:d9:7f:2e:99:e0:ce:fb:a3:b5:3e:d1:c1:cc:11:17:
71:e3:b1:65:45:0c:a0:76:6a:b1:29:96:d8:13:46:8c:e5:77:
62:b2:c6:a9:5f:01:73:2e:10:d0:85:04:f4:cd:f1:28:74:b2:
46:9c:90:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOyN/bdqn6QhwuGRC8wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjRmNjRiNTEwYTQxYjA3YzlkNTAwMDRiMzUyNTY5NGNj
NDIyMzMwHhcNMjUxMDE5MDgwMTMyWhcNMjUxMDIwMDgwMTMyWjAzMTEwLwYDVQQD
EyhmZmVhNmE3MjBlM2E0YTc2M2I4MTMyZDYwMTJhMmI0YzlmZDUwYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuBmWxT5MgVc2fy1exoNCtQFtyJ
RM42MmP7HjIjHG+tlM+huf3cwcknAiUURGK8LMrjRz6MYVVwAP43z6tyuRG4gHls
vZh07grNzXTtIm6RFrBcxc5lL8aNT4PaOi8ECuekIpqxPP0ajOiUbi/xOsxfNOE9
vbasmWL6wpxFLVvlSNdt7X8Qb3npZMrPu7+HgJ4yMKW7naY13IRFmFIyuxwjpVR9
4bWYUWXutAgIIvUlWWlqCt4jAIi3LGTLNXHU9cZ38z4mCMzfSfZlNTN46mzK825C
CIOkp3WZ9V3YBzjYgQScuOHeJ+E7eeRyyuQVgB5FI4jw6vPZbmp2mxF0rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/qanIOOkp2O4Ey1gEqK0yf1Qv5MB8GA1UdIwQY
MBaAFNf09ktRCkGwfJ1QAEs1JWlMxCIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2Ut
ZDU0NTYyZjUyZTkzLzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2UtZDU0NTYyZjUyZTkz
LzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbst3jzS
t68b8qfZtro6HvnTQOwNuOLhiq9Cot25k7Eue/ETwvPTd9Xm72mofxMzH7KNsW02
J4O4qoGsqey8zDE1ZgX1qugApqz4oJCEu7kiOvAQ0ENQ05lNqBx82fKSzGbWR+nI
LiwlABRvfDNHFp4oY0NxcC0NWN7dhkC6QKk5FQHbFKXtPcIo9Bi+MGXGLtK5uXOz
4dUPMWRsB+tQUYY+IV7cEgMEL3XIQWocRFqX6ID3x4vgVTN4oibO3TYLaLbug1Rb
BPdQ2X8umeDO+6O1PtHBzBEXceOxZUUMoHZqsSmW2BNGjOV3YrLGqV8Bcy4Q0IUE
9M3xKHSyRpyQUQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:06 2025 by rpki-client