
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier: LqVgg+HlUsrgb0yX29pXKGf2Vqb6NGY2+oHudZZ5GZk=
Subject key identifier: C0:EF:DB:2F:3C:07:20:93:80:D1:CE:F4:E2:87:0F:0C:F2:DA:39:23
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial: 0199FB45BE69BECDD3F6DD1FAC2A7D3A47DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number: 0100
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: QfinyWO2uvVF5DcFv9t89z/PX10wtvi46zOdVwKb6dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:be:69:be:cd:d3:f6:dd:1f:ac:2a:7d:3a:47:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=c0efdb2f3c07209380d1cef4e2870f0cf2da3923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:77:a7:7f:14:84:42:f2:13:1d:da:85:a5:
8a:66:4b:0d:ce:76:57:e7:a5:18:ee:1b:e4:fe:4f:
ec:96:24:ea:48:23:23:6b:75:76:21:e6:19:5a:0a:
8a:da:f4:74:9c:94:84:76:cf:21:e1:a2:35:27:56:
bc:0b:5e:82:35:03:70:68:75:2b:0b:5d:11:a0:17:
e3:dd:5c:60:fd:20:a2:c7:2e:a6:cd:78:f5:b4:79:
aa:42:f6:a5:d6:77:59:a3:36:7f:55:af:0d:03:d7:
bf:af:ff:f9:fa:ae:86:9b:0f:37:fe:aa:5f:97:ef:
3b:4d:7f:c5:13:28:a8:dd:cc:d9:3a:6b:ad:85:f5:
b0:a0:a7:35:29:cf:ed:14:b0:b9:72:6e:59:6a:cd:
1a:c1:5f:bf:f2:68:d3:9e:cc:07:db:f6:48:31:6a:
9d:92:00:d1:9b:a4:ed:b7:e2:58:ce:d8:54:f7:51:
12:1e:ce:b0:ab:bc:fe:0c:31:f1:b5:95:6c:3c:de:
c1:30:f2:b4:3d:51:14:b9:b9:4a:a4:d7:56:fe:1b:
f4:c9:e9:9c:2b:06:3f:02:81:d2:db:7e:a3:b6:0d:
29:fa:51:e7:20:26:a7:95:0f:39:55:31:00:80:22:
67:60:9e:9c:27:96:8d:55:10:26:ea:d6:c9:55:3a:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:DB:2F:3C:07:20:93:80:D1:CE:F4:E2:87:0F:0C:F2:DA:39:23
X509v3 Authority Key Identifier:
keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:92:a5:3b:7c:c0:7e:5b:c3:9b:fa:d8:2c:0d:ef:c0:aa:7f:
18:7f:1c:8a:74:90:9f:df:3e:92:e2:eb:b7:ad:6a:a0:16:91:
8f:79:63:f5:37:9f:41:20:33:a8:13:b0:8f:3c:9a:f0:96:e8:
39:ef:fe:d4:e4:64:0f:c5:9c:26:5c:0f:33:2c:42:b3:cc:26:
6a:e1:b7:e4:cf:d3:15:0c:ce:1a:de:01:90:ce:3a:db:1c:ca:
23:fb:4a:0d:2b:35:14:81:f0:5d:57:f1:a6:8d:a3:4a:77:ae:
5c:47:d9:e1:e9:10:a9:35:44:06:1e:21:b9:0a:31:cd:df:a5:
5a:12:7a:79:12:25:aa:d2:12:1f:f2:70:67:5c:f1:d6:10:bb:
69:bc:ae:0c:62:74:69:ac:ec:d4:fa:70:5f:3e:ec:76:5a:b2:
29:84:a9:9f:80:0c:d9:61:cc:15:82:f3:7f:d8:a5:2d:d8:19:
5b:f1:41:44:c3:2c:6b:1c:a9:b5:c5:83:fc:83:c1:a1:0c:c5:
46:cc:ba:b4:6f:86:c7:ab:ec:44:c6:b0:ca:35:da:a8:8d:3f:
e4:fe:a8:89:1e:a8:44:fc:25:c3:12:77:98:1f:95:32:cd:b4:
66:7b:7b:14:fd:79:f9:68:74:b6:89:14:bc:aa:b9:6d:31:76:
15:3b:0f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rb5pvs3T9t0frCp9OkfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNWIwZDM2YTM3NGFiMzVjNDM2ZWUwMGMyZWNhZWZiYjJh
MzU0NDgwHhcNMjUxMDE5MDcwMTE1WhcNMjUxMDIwMDcwMTE1WjAzMTEwLwYDVQQD
EyhjMGVmZGIyZjNjMDcyMDkzODBkMWNlZjRlMjg3MGYwY2YyZGEzOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGl3p38UhELyEx3ahaWKZksNznZX
56UY7hvk/k/sliTqSCMja3V2IeYZWgqK2vR0nJSEds8h4aI1J1a8C16CNQNwaHUr
C10RoBfj3Vxg/SCixy6mzXj1tHmqQval1ndZozZ/Va8NA9e/r//5+q6Gmw83/qpf
l+87TX/FEyio3czZOmuthfWwoKc1Kc/tFLC5cm5Zas0awV+/8mjTnswH2/ZIMWqd
kgDRm6Ttt+JYzthU91ESHs6wq7z+DDHxtZVsPN7BMPK0PVEUublKpNdW/hv0yemc
KwY/AoHS236jtg0p+lHnICanlQ85VTEAgCJnYJ6cJ5aNVRAm6tbJVTrWfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDv2y88ByCTgNHO9OKHDwzy2jkjMB8GA1UdIwQY
MBaAFO5bDTajdKs1xDbuAMLsrvuyo1RIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMmYxNWUtYzg5Yy00MzUyLTg3MjIt
NjlhMjM4Zjk4ODlhLzEvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMmYxNWUtYzg5Yy00MzUyLTg3MjItNjlhMjM4Zjk4ODlh
LzEvN2xzTk5xTjBxelhFTnU0QXd1eXUtN0tqVkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJKlO3zA
flvDm/rYLA3vwKp/GH8cinSQn98+kuLrt61qoBaRj3lj9TefQSAzqBOwjzya8Jbo
Oe/+1ORkD8WcJlwPMyxCs8wmauG35M/TFQzOGt4BkM462xzKI/tKDSs1FIHwXVfx
po2jSneuXEfZ4ekQqTVEBh4huQoxzd+lWhJ6eRIlqtISH/JwZ1zx1hC7abyuDGJ0
aazs1PpwXz7sdlqyKYSpn4AM2WHMFYLzf9ilLdgZW/FBRMMsaxyptcWD/IPBoQzF
Rsy6tG+Gx6vsRMawyjXaqI0/5P6oiR6oRPwlwxJ3mB+VMs20Znt7FP15+Wh0tokU
vKq5bTF2FTsP/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:12 2025 by rpki-client