Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: 4nNseVXcQSZ06sK9zWYThYHbOFsr7/5PI3ZJs+B3CuU=
Subject key identifier: 9B:A7:AC:FE:AD:D6:FE:D3:79:C2:0F:1E:C7:7E:F8:BB:C0:81:0A:90
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 0199FDD930835A74F755BEE209D013B68AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 12E9
Signing time: Sun 19 Oct 2025 19:01:33 +0000
Manifest this update: Sun 19 Oct 2025 19:01:33 +0000
Manifest next update: Mon 20 Oct 2025 19:01:33 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: wrz49OWZwG9fZV9paI+HVRPW+BAvZwlNaLU/sV2pyz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:30:83:5a:74:f7:55:be:e2:09:d0:13:b6:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Oct 19 19:01:33 2025 GMT
Not After : Oct 20 19:01:33 2025 GMT
Subject: CN=9ba7acfeadd6fed379c20f1ec77ef8bbc0810a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:41:58:59:39:c3:09:b5:52:3c:c6:05:2e:
d4:5e:58:98:c5:0a:e3:95:a5:b6:75:81:2f:18:b8:
b8:ee:be:2a:cd:20:4d:e2:8d:74:84:94:4e:b6:cc:
55:dc:92:6c:b0:7f:89:b2:a6:71:4c:ef:b2:a2:ca:
4e:3b:e8:03:42:ff:bd:b8:51:f0:5e:2e:d9:e7:b8:
34:8d:77:c6:c5:97:f7:d6:d9:98:b3:f6:98:a8:30:
7b:03:43:5d:1b:7a:f7:f2:c4:6c:11:fa:5e:8f:dd:
a7:39:f1:77:19:3d:dd:8d:47:8a:3b:00:34:6e:ae:
59:b3:8a:4a:b8:f8:a4:57:5e:78:ec:ca:2f:4d:f1:
a1:4b:c9:44:f1:21:5c:95:52:a5:1f:4e:78:30:91:
f0:f7:71:c0:f0:01:bf:1c:89:8e:cb:e6:24:3b:59:
d8:38:ca:9f:16:6f:e3:b4:b8:9a:42:13:0e:4e:c6:
2d:4c:ed:29:39:31:db:3c:2a:57:01:08:d7:de:95:
da:16:8e:74:b2:7c:42:4c:65:be:d2:08:4d:6f:54:
29:98:bf:23:18:57:03:05:71:02:10:59:35:e5:78:
f2:46:48:b4:7b:a1:12:f6:f3:01:1f:47:ad:be:8e:
b7:77:2c:07:13:c0:3c:18:1f:2b:43:40:5f:6e:ed:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:AC:FE:AD:D6:FE:D3:79:C2:0F:1E:C7:7E:F8:BB:C0:81:0A:90
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2d:72:1c:49:25:13:56:d0:78:11:6c:91:dd:15:d3:7e:61:
7a:4e:82:88:fc:d8:d2:84:02:2a:59:1e:c6:d4:45:17:c2:9b:
a1:85:35:6d:dd:46:5d:ce:af:26:37:4d:1f:05:55:97:5c:6c:
85:0b:72:2b:35:4f:65:fe:b5:ce:22:68:37:f3:57:b1:1d:76:
66:ad:e5:10:09:cb:ee:bc:05:84:53:5c:a7:34:de:72:ba:34:
37:a4:8f:ff:79:0f:4f:4f:5d:33:e0:01:29:4c:62:ac:e1:ea:
a2:44:6e:af:ec:dc:77:27:72:97:54:36:1a:bc:d7:b7:71:97:
4f:43:01:fb:0d:d8:63:6c:84:b3:11:25:7c:a4:4a:70:ed:bc:
cd:22:31:c4:e0:cb:03:fd:77:9b:c4:ab:95:2c:6d:89:4c:e8:
b4:73:99:cb:41:11:c7:75:90:8f:f1:ce:87:74:8b:45:e4:39:
2a:f2:1d:4c:b0:82:73:d4:21:b5:21:e5:96:03:2c:07:ab:77:
7d:4c:52:39:ea:6a:89:d6:89:c2:4d:5d:fd:9d:a9:12:09:7b:
d7:ec:5b:40:61:78:e6:a8:1a:91:e8:a9:5a:30:98:33:5d:f4:
cb:72:a8:c9:53:61:22:b5:02:e9:0b:0b:ae:12:21:a0:cb:3c:
59:71:0c:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92TCDWnT3Vb7iCdATtoqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZThiYmY4NjQzYWJkNjJmZjNmNDJiZWM0YzBiMmRiOTc3
NTk2ZDcwHhcNMjUxMDE5MTkwMTMzWhcNMjUxMDIwMTkwMTMzWjAzMTEwLwYDVQQD
Eyg5YmE3YWNmZWFkZDZmZWQzNzljMjBmMWVjNzdlZjhiYmMwODEwYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcVBWFk5wwm1UjzGBS7UXliYxQrj
laW2dYEvGLi47r4qzSBN4o10hJROtsxV3JJssH+JsqZxTO+yospOO+gDQv+9uFHw
Xi7Z57g0jXfGxZf31tmYs/aYqDB7A0NdG3r38sRsEfpej92nOfF3GT3djUeKOwA0
bq5Zs4pKuPikV1547MovTfGhS8lE8SFclVKlH054MJHw93HA8AG/HImOy+YkO1nY
OMqfFm/jtLiaQhMOTsYtTO0pOTHbPCpXAQjX3pXaFo50snxCTGW+0ghNb1QpmL8j
GFcDBXECEFk15XjyRki0e6ES9vMBH0etvo63dywHE8A8GB8rQ0Bfbu0iwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJunrP6t1v7TecIPHsd++LvAgQqQMB8GA1UdIwQY
MBaAFHfou/hkOr1i/z9CvsTAstuXdZbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjkt
NDRjY2QxYjUxZjEwLzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjktNDRjY2QxYjUxZjEw
LzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAry1yHEkl
E1bQeBFskd0V035hek6CiPzY0oQCKlkextRFF8KboYU1bd1GXc6vJjdNHwVVl1xs
hQtyKzVPZf61ziJoN/NXsR12Zq3lEAnL7rwFhFNcpzTecro0N6SP/3kPT09dM+AB
KUxirOHqokRur+zcdydyl1Q2GrzXt3GXT0MB+w3YY2yEsxElfKRKcO28zSIxxODL
A/13m8SrlSxtiUzotHOZy0ERx3WQj/HOh3SLReQ5KvIdTLCCc9QhtSHllgMsB6t3
fUxSOepqidaJwk1d/Z2pEgl71+xbQGF45qgakeipWjCYM130y3KoyVNhIrUC6QsL
rhIhoMs8WXEMMg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:36 2025 by rpki-client