Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: 7nH7yX3gAHnCSWUiY+VszqdbXO+6GqHqWSuYVPw6ZWc=
Subject key identifier: 2A:E1:2D:1F:F5:5E:BC:A3:3B:E1:F2:63:40:38:61:5E:77:FB:28:01
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 0199FBEB96CAFEBCC72DE67560DADCD5CD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0955
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: wVV1TLEAyHduVkv9Y+/TupfSIKCltqm/yQjTN64++GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:96:ca:fe:bc:c7:2d:e6:75:60:da:dc:d5:cd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=2ae12d1ff55ebca33be1f2634038615e77fb2801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:ca:e6:88:01:9b:b0:b8:94:c8:7d:d7:40:
06:6e:96:7a:88:fd:8b:e1:ad:3c:9e:05:f6:88:98:
d6:d1:58:6b:67:44:9f:d7:c8:e9:8d:b8:c8:65:61:
fb:5f:dd:5f:71:fb:d0:7d:fc:78:de:8d:22:3a:a1:
fe:fc:9c:d5:bb:2b:fe:f5:af:b4:33:48:fe:e0:0b:
fb:c0:02:50:76:6a:f0:1a:30:07:a0:82:01:b6:85:
d3:52:b7:f8:7a:da:92:91:4d:4b:5f:50:20:f9:51:
da:2a:10:f1:45:f1:a1:d7:9b:63:db:14:b4:63:8d:
1a:e6:b5:b2:95:e8:29:24:09:c8:69:bd:0b:c7:74:
65:1a:1b:88:08:c8:3d:68:39:da:08:a7:74:e6:d9:
5e:f4:9e:7a:b9:04:a7:04:37:49:11:9d:8f:81:85:
94:e5:34:2a:f1:b7:1f:e0:c7:95:b2:f4:d2:60:7c:
72:2a:0e:35:3e:fe:27:c8:0d:63:54:34:a9:f5:0e:
cf:16:68:b7:01:99:bc:84:1e:44:0f:a5:1f:7c:5e:
77:76:37:a7:0f:be:e7:0d:93:e5:48:ff:66:39:85:
74:7a:7e:4e:81:dc:25:62:27:0e:8e:91:8f:59:56:
ad:06:e7:f6:20:29:d7:2c:1e:74:e2:f3:14:2e:96:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:2D:1F:F5:5E:BC:A3:3B:E1:F2:63:40:38:61:5E:77:FB:28:01
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a1:bc:b8:17:50:a0:9e:0d:49:6e:46:c6:6a:c1:05:c2:27:
7b:f8:2d:d4:99:5a:c4:a6:d8:44:0d:e3:a1:96:e0:2b:fc:6f:
7c:81:d2:a3:d1:ee:ec:6b:8e:de:ef:f0:be:8b:6d:12:db:44:
6b:1a:f7:2b:f9:86:6d:29:fb:af:fb:4b:5e:5f:6d:b2:4b:7f:
4b:a2:dd:62:17:2d:54:ef:5d:9f:10:01:af:f7:9c:2f:9f:a5:
ef:80:10:21:ee:89:f4:82:f6:fd:d9:7a:50:4d:83:67:56:ec:
aa:be:3a:be:84:ff:5c:7d:78:2d:8b:60:6c:a3:71:7f:79:59:
be:ef:cf:8a:66:21:57:c7:15:2a:07:2a:59:17:7e:b3:ab:8d:
7d:ff:d4:b9:c5:dd:14:db:cd:ae:72:5f:e6:5d:5a:24:e8:de:
30:12:eb:01:35:a7:3f:93:f0:0f:2c:00:9a:1d:dd:48:27:25:
e5:29:37:70:b0:e8:f4:38:76:1c:3b:36:0f:a0:a0:41:20:b2:
64:63:dd:6f:90:4d:96:26:da:8e:7a:a0:20:12:da:c7:8c:9e:
87:be:fd:21:77:ee:2e:20:e2:fe:d3:bc:2c:21:a6:d9:79:e5:
6d:6a:d7:a6:49:c6:f4:9e:de:f2:ed:38:56:4e:b4:f9:6b:2e:
d1:28:fc:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn765bK/rzHLeZ1YNrc1c0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjUxMDE5MTAwMjI0WhcNMjUxMDIwMTAwMjI0WjAzMTEwLwYDVQQD
EygyYWUxMmQxZmY1NWViY2EzM2JlMWYyNjM0MDM4NjE1ZTc3ZmIyODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHDK5ogBm7C4lMh910AGbpZ6iP2L
4a08ngX2iJjW0VhrZ0Sf18jpjbjIZWH7X91fcfvQffx43o0iOqH+/JzVuyv+9a+0
M0j+4Av7wAJQdmrwGjAHoIIBtoXTUrf4etqSkU1LX1Ag+VHaKhDxRfGh15tj2xS0
Y40a5rWylegpJAnIab0Lx3RlGhuICMg9aDnaCKd05tle9J56uQSnBDdJEZ2PgYWU
5TQq8bcf4MeVsvTSYHxyKg41Pv4nyA1jVDSp9Q7PFmi3AZm8hB5ED6UffF53djen
D77nDZPlSP9mOYV0en5OgdwlYicOjpGPWVatBuf2ICnXLB504vMULpbFNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrhLR/1XryjO+HyY0A4YV53+ygBMB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1KG8uBdQ
oJ4NSW5GxmrBBcIne/gt1JlaxKbYRA3joZbgK/xvfIHSo9Hu7GuO3u/wvottEttE
axr3K/mGbSn7r/tLXl9tskt/S6LdYhctVO9dnxABr/ecL5+l74AQIe6J9IL2/dl6
UE2DZ1bsqr46voT/XH14LYtgbKNxf3lZvu/PimYhV8cVKgcqWRd+s6uNff/UucXd
FNvNrnJf5l1aJOjeMBLrATWnP5PwDywAmh3dSCcl5Sk3cLDo9Dh2HDs2D6CgQSCy
ZGPdb5BNlibajnqgIBLax4yeh779IXfuLiDi/tO8LCGm2XnlbWrXpknG9J7e8u04
Vk60+Wsu0Sj8zw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:22 2025 by rpki-client