Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier: twGIQMraajzWl1oJKTQ/XW0/qK1D10Y6pRMDG80P0Zc=
Subject key identifier: 10:D1:EC:99:B9:71:05:4B:4D:26:B4:D7:F5:47:39:3C:89:E5:02:22
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 0199FB0EC381778EABB1097AAFCA81054F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:12 +0000
Manifest this update: Sun 19 Oct 2025 06:01:12 +0000
Manifest next update: Mon 20 Oct 2025 06:01:12 +0000
Files and hashes: 1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: Se707CiZpi6t80XuxxDMXPa2WlohVqEW+k9yGLUSiyU=)
2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c3:81:77:8e:ab:b1:09:7a:af:ca:81:05:4f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Oct 19 06:01:12 2025 GMT
Not After : Oct 20 06:01:12 2025 GMT
Subject: CN=10d1ec99b971054b4d26b4d7f547393c89e50222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:19:f0:75:c2:18:02:25:76:83:25:15:4c:
8d:48:53:ee:c8:55:c5:83:bd:3e:6c:25:fd:74:1e:
5f:25:cc:bd:3e:2e:aa:fb:ba:15:4a:11:db:97:9d:
a7:2d:eb:60:93:02:8c:a4:fd:96:a1:d0:62:1e:34:
c5:19:94:45:0d:c8:f1:ad:43:90:4b:ae:b1:f5:45:
ad:d6:ff:4d:70:17:35:b4:6e:2f:5e:84:db:65:00:
fc:a3:57:70:5d:5b:6e:63:6a:80:fd:36:df:02:38:
9c:e7:25:14:7b:d6:df:00:f1:c6:98:72:04:1b:26:
7c:e1:5c:38:7a:f9:57:48:f5:31:c5:fb:85:f5:a7:
57:99:bd:15:ed:27:66:0d:2c:26:cf:92:60:f7:18:
9d:ef:f9:ac:30:8c:f2:55:4e:fe:f1:72:5e:16:d1:
c0:b9:63:38:05:29:d6:e9:6c:88:cd:3b:a6:ee:a3:
07:a9:85:b6:56:17:81:39:49:9e:8f:e5:32:21:c4:
1e:2d:61:33:a0:d7:48:1c:f4:68:75:23:f4:d7:f0:
b2:28:b9:76:08:0b:c9:a5:59:dc:d9:c4:19:30:f1:
48:80:86:a7:d8:7b:9c:49:54:12:e6:85:93:28:43:
fa:cb:50:7f:cd:6d:bc:6c:cc:75:97:13:db:b3:84:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:EC:99:B9:71:05:4B:4D:26:B4:D7:F5:47:39:3C:89:E5:02:22
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:ff:d8:9c:79:85:8d:63:eb:44:bd:63:b2:71:ce:34:fa:
43:e5:38:55:23:0d:f2:3f:1c:d9:33:aa:53:d6:a0:37:20:38:
5f:6c:a4:7b:64:19:98:0d:dc:61:42:8f:90:34:87:cd:85:55:
ce:1a:01:bf:a6:1d:ac:e0:ac:dc:76:8a:d3:4e:37:4a:a7:dd:
16:27:b4:39:23:01:eb:f7:27:06:42:e7:9f:ce:12:88:60:f0:
05:fd:e3:50:e9:14:d8:96:f4:53:c2:87:3a:e6:8d:1c:f1:36:
fc:12:44:eb:e2:4a:4a:4a:3a:3d:44:bd:c9:7c:aa:49:74:d0:
82:ca:15:7f:f1:66:a2:e7:29:7e:9c:e2:80:07:9f:92:d3:dd:
08:82:3f:76:93:32:09:80:48:47:69:38:f9:ba:84:ca:1c:2f:
62:1d:46:b6:20:b1:5f:55:00:ab:ea:9c:bb:ca:2d:e5:75:9a:
f1:7d:01:4e:b4:c3:56:4d:37:8b:40:13:13:23:d4:74:40:4b:
73:19:8e:c5:50:02:04:8b:5a:dd:f4:8c:bc:cb:8c:2a:0f:88:
87:05:83:4e:a9:41:b9:f5:2a:ce:86:91:ea:fc:80:eb:1e:34:
dd:3c:e8:e6:21:9a:b6:b7:16:2f:f9:a3:bc:e8:e3:e2:87:7d:
bf:b5:4f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DsOBd46rsQl6r8qBBU8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODIzOTUwMDFiMDNjNjYzNTA5OTA5OTc5ZGZiNzg0NDVi
M2Q5YzQwHhcNMjUxMDE5MDYwMTEyWhcNMjUxMDIwMDYwMTEyWjAzMTEwLwYDVQQD
EygxMGQxZWM5OWI5NzEwNTRiNGQyNmI0ZDdmNTQ3MzkzYzg5ZTUwMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g4Z8HXCGAIldoMlFUyNSFPuyFXF
g70+bCX9dB5fJcy9Pi6q+7oVShHbl52nLetgkwKMpP2WodBiHjTFGZRFDcjxrUOQ
S66x9UWt1v9NcBc1tG4vXoTbZQD8o1dwXVtuY2qA/TbfAjic5yUUe9bfAPHGmHIE
GyZ84Vw4evlXSPUxxfuF9adXmb0V7SdmDSwmz5Jg9xid7/msMIzyVU7+8XJeFtHA
uWM4BSnW6WyIzTum7qMHqYW2VheBOUmej+UyIcQeLWEzoNdIHPRodSP01/CyKLl2
CAvJpVnc2cQZMPFIgIan2HucSVQS5oWTKEP6y1B/zW28bMx1lxPbs4Sn5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDR7Jm5cQVLTSa01/VHOTyJ5QIiMB8GA1UdIwQY
MBaAFO6COVABsDxmNQmQmXnft4RFs9nEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZjJhMDEtZDhjYS00Yjk0LThmNjct
NzhlYTgzZDIxMjQ5LzEvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZjJhMDEtZDhjYS00Yjk0LThmNjctNzhlYTgzZDIxMjQ5
LzEvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAr/2Jx5
hY1j60S9Y7JxzjT6Q+U4VSMN8j8c2TOqU9agNyA4X2yke2QZmA3cYUKPkDSHzYVV
zhoBv6YdrOCs3HaK0043SqfdFie0OSMB6/cnBkLnn84SiGDwBf3jUOkU2Jb0U8KH
OuaNHPE2/BJE6+JKSko6PUS9yXyqSXTQgsoVf/FmoucpfpzigAefktPdCII/dpMy
CYBIR2k4+bqEyhwvYh1GtiCxX1UAq+qcu8ot5XWa8X0BTrTDVk03i0ATEyPUdEBL
cxmOxVACBIta3fSMvMuMKg+IhwWDTqlBufUqzoaR6vyA6x403Tzo5iGatrcWL/mj
vOjj4od9v7VPDw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:58 2025 by rpki-client