
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File: c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier: dP4SSClvWOf8nprGaZBcg7SpQ7pH/m1oQVVG8RJUPbk=
Subject key identifier: D1:F6:7C:67:84:A4:80:B9:D9:73:C8:97:3A:48:0C:A6:03:CE:0C:82
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial: 0199FD6B34468FAE8B3D66E722D2EFEE1895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number: 0ACA
Signing time: Sun 19 Oct 2025 17:01:25 +0000
Manifest this update: Sun 19 Oct 2025 17:01:25 +0000
Manifest next update: Mon 20 Oct 2025 17:01:25 +0000
Files and hashes: 1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: fnYid9AkjqAgTKrCCqJ53EU1kaTv+bPrxRNiQHSv/Jg=)
2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:34:46:8f:ae:8b:3d:66:e7:22:d2:ef:ee:18:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Validity
Not Before: Oct 19 17:01:25 2025 GMT
Not After : Oct 20 17:01:25 2025 GMT
Subject: CN=d1f67c6784a480b9d973c8973a480ca603ce0c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:6f:a8:91:2f:ed:7c:77:0f:32:06:f5:90:
f6:c7:83:0f:b9:91:b8:26:e6:d6:eb:78:32:75:fc:
e1:99:ae:1a:be:30:f1:c3:ef:19:3c:9e:8d:62:c2:
97:7c:21:15:c2:c2:90:ce:8b:cf:15:db:8f:8b:b2:
77:f4:28:1b:b1:1d:1e:3f:dc:71:83:cc:96:be:60:
3e:74:dc:20:9b:53:6b:89:ea:4d:56:88:30:fb:32:
93:92:03:e7:a5:ba:19:91:32:4f:7b:16:3a:fa:ae:
09:c7:fd:b6:2e:57:43:14:e6:d5:ed:94:34:c7:bc:
5a:e2:91:a5:8d:18:6d:11:70:14:f4:61:7f:5b:b8:
79:52:b4:2d:53:6b:65:e3:6d:90:0d:a1:d6:a4:26:
e1:b2:a5:ab:d1:1a:16:22:fd:d3:2f:42:d2:4d:26:
88:b1:10:4b:a1:3d:46:d9:cf:76:88:66:84:e3:e1:
a7:aa:ef:e2:45:8e:ef:f7:29:78:ad:b3:28:c2:e3:
40:93:13:6d:15:c3:ad:6a:a6:7c:9f:f3:4f:f9:29:
45:02:69:e1:38:95:e7:04:d6:ac:ae:fe:ea:f0:df:
51:5c:24:ba:41:f9:e4:94:5c:61:6f:6f:29:0f:f3:
fb:9c:50:3c:a6:8f:a6:5a:d4:8b:9b:6c:d8:6b:8f:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:7C:67:84:A4:80:B9:D9:73:C8:97:3A:48:0C:A6:03:CE:0C:82
X509v3 Authority Key Identifier:
keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c1:ae:cb:1d:ca:cf:3b:e3:71:63:e4:07:a0:87:48:d2:fb:
50:ec:98:33:60:a2:f6:95:9e:cf:79:71:c5:06:47:e6:1d:ca:
32:7a:bb:00:b9:72:13:81:91:4f:c1:58:4a:a1:cf:4e:b2:1f:
b7:c9:04:30:2b:9d:2c:2f:41:93:db:94:1e:ac:b0:96:34:44:
78:35:fb:af:ac:05:f9:c1:2b:86:44:3d:74:bc:a4:b9:8c:3d:
7e:d6:0e:8f:48:06:f7:c7:95:64:2d:8f:50:11:5b:b3:4b:61:
ef:93:31:8b:14:0b:f0:07:59:f7:50:37:9f:63:d2:ce:59:4a:
49:7a:70:6d:dc:dd:8f:ec:6a:50:2e:f2:50:6a:87:94:b4:45:
91:16:7e:c1:9a:64:2d:73:d8:ad:4e:88:7b:49:4a:94:09:82:
18:d7:34:7c:e5:5d:66:a8:40:1a:5c:24:13:df:7a:6f:e4:2b:
ea:96:c4:c3:23:f2:c1:f0:76:64:79:bc:8c:19:13:a8:3b:6a:
5c:13:cd:86:c0:b1:53:cb:13:96:aa:a4:77:54:09:60:7d:37:
a5:bc:86:88:eb:14:ab:6d:b3:fa:ad:3b:cf:3e:3f:f5:3c:9b:
8d:08:ee:15:c0:4d:5b:9a:b0:0b:0b:5a:fa:65:1d:f7:14:51:
38:80:15:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9azRGj66LPWbnItLv7hiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk4MWNiNmVlNzlkMmRmOGM4OWQ2YTM0YzU1NGJkZTNm
Y2M3NWYwHhcNMjUxMDE5MTcwMTI1WhcNMjUxMDIwMTcwMTI1WjAzMTEwLwYDVQQD
EyhkMWY2N2M2Nzg0YTQ4MGI5ZDk3M2M4OTczYTQ4MGNhNjAzY2UwYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3JvqJEv7Xx3DzIG9ZD2x4MPuZG4
JubW63gydfzhma4avjDxw+8ZPJ6NYsKXfCEVwsKQzovPFduPi7J39CgbsR0eP9xx
g8yWvmA+dNwgm1NriepNVogw+zKTkgPnpboZkTJPexY6+q4Jx/22LldDFObV7ZQ0
x7xa4pGljRhtEXAU9GF/W7h5UrQtU2tl422QDaHWpCbhsqWr0RoWIv3TL0LSTSaI
sRBLoT1G2c92iGaE4+Gnqu/iRY7v9yl4rbMowuNAkxNtFcOtaqZ8n/NP+SlFAmnh
OJXnBNasrv7q8N9RXCS6QfnklFxhb28pD/P7nFA8po+mWtSLm2zYa4/ImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH2fGeEpIC52XPIlzpIDKYDzgyCMB8GA1UdIwQY
MBaAFHO5gctu550t+MidajTFVL3j/MdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUt
YWE1ODFkMzc4YTdjLzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUtYWE1ODFkMzc4YTdj
LzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsGuyx3K
zzvjcWPkB6CHSNL7UOyYM2Ci9pWez3lxxQZH5h3KMnq7ALlyE4GRT8FYSqHPTrIf
t8kEMCudLC9Bk9uUHqywljREeDX7r6wF+cErhkQ9dLykuYw9ftYOj0gG98eVZC2P
UBFbs0th75MxixQL8AdZ91A3n2PSzllKSXpwbdzdj+xqUC7yUGqHlLRFkRZ+wZpk
LXPYrU6Ie0lKlAmCGNc0fOVdZqhAGlwkE996b+Qr6pbEwyPywfB2ZHm8jBkTqDtq
XBPNhsCxU8sTlqqkd1QJYH03pbyGiOsUq22z+q07zz4/9TybjQjuFcBNW5qwCwta
+mUd9xRROIAVgw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:35 2025 by rpki-client