Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
File: 7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json)
Hash identifier: qae2AR2IUGz3ka5cEn32biZ0Bb7se+ez2e58PGXovb0=
Subject key identifier: D4:64:F5:07:3E:21:0F:2E:0B:5E:3B:62:D4:FD:42:55:AD:32:23:B8
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 019A01EBF618D83D4B2B1BBE6801BEC436F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
Manifest number: 0DCD
Signing time: Mon 20 Oct 2025 14:00:32 +0000
Manifest this update: Mon 20 Oct 2025 14:00:32 +0000
Manifest next update: Tue 21 Oct 2025 14:00:32 +0000
Files and hashes: 1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: pkQ4d2IOpdRU0EVWO3O3kbDAYPS8nbk++J6I4P3+6Qc=)
2: Lob4QDIP2dfLNefIfHCH-elGr6w.roa (hash: gcr1vfLV1uOvIBLUDtdkrAdiHkI7eAoGXpU8ShFCIEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:f6:18:d8:3d:4b:2b:1b:be:68:01:be:c4:36:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Oct 20 14:00:32 2025 GMT
Not After : Oct 21 14:00:32 2025 GMT
Subject: CN=d464f5073e210f2e0b5e3b62d4fd4255ad3223b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:f4:f9:dd:07:e6:a2:bb:4f:da:65:bc:92:
6f:64:ad:28:88:61:06:c4:62:e9:03:1d:76:b0:9c:
17:64:9c:77:24:f4:ae:03:d0:42:fc:76:d6:b1:05:
98:a6:32:6a:23:15:52:3d:86:db:f2:c6:d3:74:de:
23:73:28:52:83:5d:77:0d:ee:71:45:b4:67:30:24:
98:92:e1:9b:fb:5f:ff:81:dd:70:14:6e:00:6a:4b:
92:d3:ba:83:ba:5d:79:df:26:2c:11:aa:6d:2c:be:
34:c6:2c:d3:81:ee:fc:2e:20:83:b1:3d:cd:12:98:
f3:79:e1:ae:4c:64:5a:e8:4a:4a:02:e0:d3:51:85:
bd:64:a9:97:7d:86:2d:2c:97:13:0d:e6:a5:1c:84:
50:66:50:6a:68:37:34:32:54:8d:e4:3b:45:ca:ec:
30:bd:e7:87:3b:64:08:cf:aa:c3:8b:70:e1:f3:82:
52:d5:14:c3:3a:37:91:32:ef:00:3d:67:8d:7a:83:
1a:26:31:e0:15:83:dc:53:e1:5c:63:aa:f3:82:34:
71:c1:0f:50:52:dd:db:c0:cc:91:a6:df:c3:21:61:
ed:c6:70:80:27:7e:dc:88:58:3f:96:c6:fc:4a:c7:
ce:d9:3f:2c:52:7e:5f:d7:49:c8:91:20:9a:de:31:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:64:F5:07:3E:21:0F:2E:0B:5E:3B:62:D4:FD:42:55:AD:32:23:B8
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:9d:36:ce:ea:1e:0e:66:d3:16:70:af:2d:48:c1:d2:71:
dc:b1:2a:d4:ae:36:11:28:66:0a:f5:88:e2:68:4b:31:57:60:
df:96:d9:29:cb:99:c3:61:cd:7f:3c:bf:ee:c9:21:40:d9:2b:
64:a6:27:18:5e:5b:ae:97:3f:5a:29:bd:67:a4:b0:40:59:10:
83:3c:16:3f:ea:c0:44:7e:be:b1:be:f1:ef:55:7f:fa:a3:83:
fe:d6:4d:d9:0e:21:53:94:d9:e2:98:7d:42:d4:f9:ef:59:fd:
5c:20:89:fc:d2:29:30:f3:23:02:28:5c:b3:6d:20:13:0d:f8:
c4:26:51:45:6b:e9:3b:92:ea:76:c5:7f:c2:06:03:d0:72:15:
db:a9:c9:a9:94:5f:dc:a3:db:fa:89:38:03:d0:a8:e1:0f:e1:
e3:cb:92:3e:04:0e:44:c4:5c:38:b2:4d:c7:d0:be:08:53:c6:
d8:2e:0c:a9:25:ed:ac:cd:71:fe:b7:1c:83:81:28:d5:fe:1f:
64:eb:03:dc:cc:df:2f:49:b6:a2:df:d1:46:75:49:ef:7c:fb:
ad:5d:fc:c3:51:c4:f9:be:f8:b4:bc:ec:1f:cd:e9:fb:8d:65:
3a:75:de:55:28:fe:73:ad:b1:44:7f:7e:c1:f4:1b:9a:90:d2:
1a:b2:32:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB6/YY2D1LKxu+aAG+xDbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZmJlODM2OWE3YmJjMDNhODZmYmU2MzliN2VmYWEwMmI3
MTcyODcwHhcNMjUxMDIwMTQwMDMyWhcNMjUxMDIxMTQwMDMyWjAzMTEwLwYDVQQD
EyhkNDY0ZjUwNzNlMjEwZjJlMGI1ZTNiNjJkNGZkNDI1NWFkMzIyM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssr0+d0H5qK7T9plvJJvZK0oiGEG
xGLpAx12sJwXZJx3JPSuA9BC/HbWsQWYpjJqIxVSPYbb8sbTdN4jcyhSg113De5x
RbRnMCSYkuGb+1//gd1wFG4AakuS07qDul153yYsEaptLL40xizTge78LiCDsT3N
EpjzeeGuTGRa6EpKAuDTUYW9ZKmXfYYtLJcTDealHIRQZlBqaDc0MlSN5DtFyuww
veeHO2QIz6rDi3Dh84JS1RTDOjeRMu8APWeNeoMaJjHgFYPcU+FcY6rzgjRxwQ9Q
Ut3bwMyRpt/DIWHtxnCAJ37ciFg/lsb8SsfO2T8sUn5f10nIkSCa3jHmuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRk9Qc+IQ8uC147YtT9QlWtMiO4MB8GA1UdIwQY
MBaAFO776Daae7wDqG++Y5t++qArcXKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3Z2b05wcDd2QU9vYjc1am0zNzZvQ3R4Y29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xYmU5OTktNWE1OS00YzEwLTkyZmYt
ZGExYjU4NjE4ODQxLzEvN3Z2b05wcDd2QU9vYjc1am0zNzZvQ3R4Y29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xYmU5OTktNWE1OS00YzEwLTkyZmYtZGExYjU4NjE4ODQx
LzEvN3Z2b05wcDd2QU9vYjc1am0zNzZvQ3R4Y29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoGdNs7q
Hg5m0xZwry1IwdJx3LEq1K42EShmCvWI4mhLMVdg35bZKcuZw2HNfzy/7skhQNkr
ZKYnGF5brpc/Wim9Z6SwQFkQgzwWP+rARH6+sb7x71V/+qOD/tZN2Q4hU5TZ4ph9
QtT571n9XCCJ/NIpMPMjAihcs20gEw34xCZRRWvpO5LqdsV/wgYD0HIV26nJqZRf
3KPb+ok4A9Co4Q/h48uSPgQORMRcOLJNx9C+CFPG2C4MqSXtrM1x/rccg4Eo1f4f
ZOsD3MzfL0m2ot/RRnVJ73z7rV38w1HE+b74tLzsH83p+41lOnXeVSj+c62xRH9+
wfQbmpDSGrIy8g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:05:14 2025 by rpki-client