Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: cHV3pAD6fMlf/r7sGtPzk6/2benQ+21mHepnkbldeb0=
Subject key identifier: A2:AE:20:17:48:72:3C:CE:27:CA:37:C9:DB:5E:BD:11:35:A7:FD:2E
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 0199FCC62CE16D5C4E1A3448323678314ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0B48
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: zo/cwdpAPpAtxMLsdsu2CZkBznbAuGaxdCLamlqZLXM=)
2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2c:e1:6d:5c:4e:1a:34:48:32:36:78:31:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=a2ae201748723cce27ca37c9db5ebd1135a7fd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:50:44:ac:00:ad:f2:0a:65:e1:9a:f0:2f:
b8:fb:4b:56:09:12:50:69:77:c0:2a:41:99:8a:51:
97:ef:b8:5d:61:ec:c4:a2:ae:fc:87:da:62:9b:28:
0d:aa:f9:33:6f:0c:b0:28:fb:ae:b3:a7:61:7d:39:
6f:66:e4:96:b8:80:e7:3f:d6:06:d8:5b:ea:34:bd:
10:38:f9:b5:48:8b:ff:e6:2b:ae:e8:73:63:e2:ac:
d5:16:1a:0f:2a:5f:e4:fe:54:57:64:f2:d1:b4:1f:
ac:29:5c:ac:32:2d:bb:3c:08:40:4c:a2:af:7a:58:
54:cd:55:75:47:35:bd:da:b1:61:c3:0a:9b:a3:92:
ac:6d:44:1b:05:e2:42:82:df:e2:85:18:a4:ee:7f:
b8:ce:e2:ca:bc:fd:75:f0:3c:44:24:64:76:5f:f8:
7d:32:04:7c:ea:04:52:3c:84:8e:76:b3:df:8f:d1:
95:a6:e5:52:52:ae:1b:15:33:07:77:15:ff:03:3b:
98:a1:29:b1:d9:e2:82:52:18:a9:32:6f:10:df:32:
07:72:60:9c:66:ed:08:d9:a1:92:90:ea:45:b9:4e:
3f:7f:e4:c1:2c:f4:3f:44:e2:2a:db:d7:cc:4a:f1:
af:95:87:c8:90:02:6b:42:77:18:b4:f1:0a:5c:63:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:20:17:48:72:3C:CE:27:CA:37:C9:DB:5E:BD:11:35:A7:FD:2E
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f6:ba:de:a7:8a:6b:ac:d4:8e:df:1c:d9:84:00:f4:cd:db:
01:fa:fa:8f:e2:36:28:6b:13:ba:a1:df:13:fe:18:f3:d5:0f:
ac:c4:6d:01:26:bd:b0:74:de:a6:53:92:6e:19:39:91:d6:75:
15:bd:4b:90:d6:b9:96:7f:3b:93:e1:40:8d:5b:e0:7d:d8:07:
7a:f1:e2:f7:9e:cb:fe:73:21:96:0f:0f:4a:7e:36:1c:43:c1:
e5:b8:60:af:ef:10:17:7f:3a:59:9e:8d:94:16:83:59:ae:a0:
7e:56:5b:be:e0:fd:25:01:3f:16:af:28:f8:e8:a6:e9:99:1a:
b6:8f:6b:61:ce:e2:de:ff:92:a0:da:4b:6f:39:5d:4b:a6:3d:
45:1c:ed:1f:40:50:98:d1:cc:8f:1e:4d:9d:30:8a:cb:d3:85:
19:8d:0e:1c:ca:7c:31:0b:0c:b7:b3:ea:c8:0a:be:19:3c:79:
a3:f6:e9:2e:6c:e1:2e:6a:4a:e7:68:e4:17:fb:1e:58:41:9e:
2f:9e:be:91:66:98:79:90:80:1c:75:8c:13:ff:76:4e:5f:ce:
5b:ff:3e:0e:2f:8b:74:ca:58:f0:8a:9a:e5:b0:bb:a2:f8:f1:
94:00:5d:6e:ff:40:c0:3d:ab:24:35:78:13:70:46:58:21:c0:
fc:0e:0a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xizhbVxOGjRIMjZ4MU7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWRhYTYzMzkxMDNiZGI1NTY2ZDgzMjcxZDNjNDdjMDA1
YzI1MGQwHhcNMjUxMDE5MTQwMTEwWhcNMjUxMDIwMTQwMTEwWjAzMTEwLwYDVQQD
EyhhMmFlMjAxNzQ4NzIzY2NlMjdjYTM3YzlkYjVlYmQxMTM1YTdmZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4RQRKwArfIKZeGa8C+4+0tWCRJQ
aXfAKkGZilGX77hdYezEoq78h9pimygNqvkzbwywKPuus6dhfTlvZuSWuIDnP9YG
2FvqNL0QOPm1SIv/5iuu6HNj4qzVFhoPKl/k/lRXZPLRtB+sKVysMi27PAhATKKv
elhUzVV1RzW92rFhwwqbo5KsbUQbBeJCgt/ihRik7n+4zuLKvP118DxEJGR2X/h9
MgR86gRSPISOdrPfj9GVpuVSUq4bFTMHdxX/AzuYoSmx2eKCUhipMm8Q3zIHcmCc
Zu0I2aGSkOpFuU4/f+TBLPQ/ROIq29fMSvGvlYfIkAJrQncYtPEKXGOxsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKuIBdIcjzOJ8o3ydtevRE1p/0uMB8GA1UdIwQY
MBaAFO6tqmM5EDvbVWbYMnHTxHwAXCUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMt
MjE0MmMwYzQzODVmLzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMtMjE0MmMwYzQzODVm
LzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfa63qeK
a6zUjt8c2YQA9M3bAfr6j+I2KGsTuqHfE/4Y89UPrMRtASa9sHTeplOSbhk5kdZ1
Fb1LkNa5ln87k+FAjVvgfdgHevHi957L/nMhlg8PSn42HEPB5bhgr+8QF386WZ6N
lBaDWa6gflZbvuD9JQE/Fq8o+Oim6Zkato9rYc7i3v+SoNpLbzldS6Y9RRztH0BQ
mNHMjx5NnTCKy9OFGY0OHMp8MQsMt7PqyAq+GTx5o/bpLmzhLmpK52jkF/seWEGe
L56+kWaYeZCAHHWME/92Tl/OW/8+Di+LdMpY8Iqa5bC7ovjxlABdbv9AwD2rJDV4
E3BGWCHA/A4KiA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:46 2025 by rpki-client