Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: rDIHQBbewpl90IEC/hiyfDNhK8T4l/RQkugxN6OA7L0=
Subject key identifier: C1:4E:FA:29:73:C3:D6:5A:3E:7D:C5:4B:58:80:D8:03:25:D1:30:FC
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 0199FBEBC2F9FC3EBC3E7BC18D7DB2D343CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: +QDDHFsynCHqiS0hD80wzClh5qI/g3p1KaCvo16vpes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c2:f9:fc:3e:bc:3e:7b:c1:8d:7d:b2:d3:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=c14efa2973c3d65a3e7dc54b5880d80325d130fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:b2:03:45:9e:b8:ca:33:5a:13:34:dc:b1:
71:a6:77:af:31:f2:1d:ca:8c:06:1e:18:95:0a:e1:
56:bd:58:21:24:e4:7c:61:a6:1a:0a:7f:d9:be:90:
9e:2a:d5:d2:b8:23:a7:ff:fb:1a:52:90:11:8b:aa:
1c:79:9a:8d:bf:f6:f6:f4:f8:d3:99:2a:ba:55:5e:
68:c1:4e:e6:d7:03:59:ef:2a:be:98:3b:93:b5:6b:
39:da:b0:2a:a6:35:c3:37:52:ef:10:ef:22:ee:58:
0d:bd:4f:6e:da:a3:9c:6e:52:40:75:c0:85:cb:96:
b6:ef:04:7e:8c:6b:5a:31:33:81:ff:ef:a4:65:10:
db:04:41:0d:4a:82:23:d3:d7:6b:39:f8:b7:ff:cc:
1b:d6:38:21:7d:e5:27:f9:35:e5:5d:40:bc:bd:73:
ab:59:36:69:04:64:08:9f:ff:4d:2a:76:94:f2:07:
b7:a0:84:b1:c3:97:4d:ef:ff:71:18:c1:11:ed:da:
9a:8f:d1:08:d9:5e:ab:96:78:c9:1c:64:8b:94:2c:
d7:af:6c:ab:b8:83:94:02:3f:5d:f0:67:2d:09:b1:
dd:f2:ec:cd:0e:5d:be:46:11:3b:20:72:32:e3:b5:
f7:c1:be:c8:a1:bc:cd:bf:a9:2d:43:c2:5b:b5:86:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:FA:29:73:C3:D6:5A:3E:7D:C5:4B:58:80:D8:03:25:D1:30:FC
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:91:94:c5:12:f2:c1:d5:59:52:ed:7c:ba:3d:17:47:8b:bb:
96:37:95:be:24:33:c6:ac:31:83:1e:69:c7:c3:9b:d2:5b:36:
82:73:fe:f7:37:ba:75:54:ca:c4:76:7a:c8:75:08:ca:61:1d:
38:96:e3:86:61:0d:c0:3a:9c:66:ae:50:ee:61:e2:e7:7a:f5:
b0:ed:94:4f:11:b9:53:f8:b0:4f:4f:1d:ee:98:bf:74:d3:32:
7c:6f:46:1d:a5:c4:57:3a:c1:b8:70:fc:71:ad:49:bd:55:4e:
2b:4a:1a:1f:11:55:d8:b1:bb:85:8d:84:b1:1e:72:63:ac:e6:
e4:0b:cc:8c:33:90:9f:1a:73:0a:ef:bc:98:9c:c6:f0:68:7b:
c7:34:a9:45:33:74:3f:5c:72:9f:b3:26:a6:25:01:e1:19:81:
91:a8:d6:6c:a7:04:41:79:bc:cc:34:b2:92:93:96:62:c1:13:
6e:8c:40:8a:ef:20:70:3c:d4:0e:6b:43:dd:71:f2:e5:3a:e9:
41:f4:24:2d:87:b6:d1:87:94:0e:06:8d:a8:52:a3:3f:85:73:
0a:6a:35:34:ab:ed:e9:cd:47:42:42:04:c1:5b:5a:93:d3:84:
a5:7e:c4:47:1f:22:37:73:dd:c3:34:ea:2d:64:9c:08:ce:06:
2a:6b:01:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768L5/D68PnvBjX2y00POMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGQ3NDZlODE3NDc2ZDU1NzhmYmNiZWQ1NzRkN2MxYWQy
NjQxZjEwHhcNMjUxMDE5MTAwMjM2WhcNMjUxMDIwMTAwMjM2WjAzMTEwLwYDVQQD
EyhjMTRlZmEyOTczYzNkNjVhM2U3ZGM1NGI1ODgwZDgwMzI1ZDEzMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpiyA0WeuMozWhM03LFxpnevMfId
yowGHhiVCuFWvVghJOR8YaYaCn/ZvpCeKtXSuCOn//saUpARi6oceZqNv/b29PjT
mSq6VV5owU7m1wNZ7yq+mDuTtWs52rAqpjXDN1LvEO8i7lgNvU9u2qOcblJAdcCF
y5a27wR+jGtaMTOB/++kZRDbBEENSoIj09drOfi3/8wb1jghfeUn+TXlXUC8vXOr
WTZpBGQIn/9NKnaU8ge3oISxw5dN7/9xGMER7dqaj9EI2V6rlnjJHGSLlCzXr2yr
uIOUAj9d8GctCbHd8uzNDl2+RhE7IHIy47X3wb7IobzNv6ktQ8JbtYa8/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFO+ilzw9ZaPn3FS1iA2AMl0TD8MB8GA1UdIwQY
MBaAFOzddG6BdHbVV4+8vtV018GtJkHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEt
MjM4MzNmZTAwOWFhLzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEtMjM4MzNmZTAwOWFh
LzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopGUxRLy
wdVZUu18uj0XR4u7ljeVviQzxqwxgx5px8Ob0ls2gnP+9ze6dVTKxHZ6yHUIymEd
OJbjhmENwDqcZq5Q7mHi53r1sO2UTxG5U/iwT08d7pi/dNMyfG9GHaXEVzrBuHD8
ca1JvVVOK0oaHxFV2LG7hY2EsR5yY6zm5AvMjDOQnxpzCu+8mJzG8Gh7xzSpRTN0
P1xyn7MmpiUB4RmBkajWbKcEQXm8zDSykpOWYsETboxAiu8gcDzUDmtD3XHy5Trp
QfQkLYe20YeUDgaNqFKjP4VzCmo1NKvt6c1HQkIEwVtak9OEpX7ERx8iN3PdwzTq
LWScCM4GKmsB6A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:34 2025 by rpki-client