Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: QI/hy5g7XffOK94EUXzfdkzGPGREB4S4psBlPf1/Pa0=
Subject key identifier: 8E:F1:5F:86:31:D3:4E:3F:F2:6C:A5:E1:86:29:2E:71:BC:4E:56:D2
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 0199FBEAF4CA6DF46A3207BC65EE45338DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 099B
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: oNQROHTAVFSc2SJ+EI5qT8sCBv82z6Sb8jX7+F+jWQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f4:ca:6d:f4:6a:32:07:bc:65:ee:45:33:8d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=8ef15f8631d34e3ff26ca5e186292e71bc4e56d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:99:6e:7d:40:bc:13:af:cb:12:50:95:1e:
1c:40:38:49:4f:a9:37:4b:de:f9:83:a8:f6:7b:d5:
cb:c2:ca:50:30:c0:96:2a:66:cf:73:88:ff:f1:e7:
55:b8:c7:fa:cb:7a:7a:b6:dd:50:7b:3c:4e:c2:28:
93:3b:da:5a:b4:88:54:85:e7:9e:2e:55:0c:07:3e:
70:32:02:db:04:99:75:6d:bf:21:5e:79:db:79:da:
84:00:f4:ae:34:96:54:95:8e:8b:cd:f9:eb:af:7b:
3e:08:92:10:fd:3c:b0:58:b6:56:7f:63:23:63:46:
5c:41:a1:a5:5a:64:df:88:c2:0f:6f:fe:85:8c:43:
85:b8:9c:32:1c:33:b0:d4:e5:4e:da:cd:a5:4a:32:
53:4e:a5:72:f3:63:b2:3b:4b:de:4f:c7:2b:a1:16:
c6:3a:71:25:81:db:a6:80:73:b0:81:8c:c7:52:44:
74:29:3d:ce:ef:78:ed:23:bf:b8:90:09:b1:5b:2c:
f6:b3:85:aa:d6:9a:d4:40:4c:6c:47:0b:2f:b7:47:
fa:98:a4:99:1b:4f:43:0f:6b:7a:8c:7f:84:cd:ab:
9a:20:f7:34:9b:1d:24:c1:78:f6:8c:9a:71:51:a1:
72:35:17:62:31:03:c2:0a:e0:a7:37:93:26:96:de:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F1:5F:86:31:D3:4E:3F:F2:6C:A5:E1:86:29:2E:71:BC:4E:56:D2
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:39:33:65:11:f3:5c:e1:0b:04:ef:7b:c2:29:61:3c:86:
43:5b:4e:e5:a7:70:b5:e3:9c:65:e9:f2:00:54:4c:5f:e2:4b:
d2:07:4f:72:38:41:0a:7b:1b:fa:f3:dd:fb:fb:f5:a6:70:ef:
af:6d:f5:76:9d:e1:f3:7c:a7:f5:b2:51:52:d9:a7:0a:80:f3:
6a:5d:c8:83:77:c4:37:4b:cf:7c:8e:16:5c:ca:4c:d4:f6:84:
32:5e:4e:d5:e5:67:e0:af:93:5b:59:f7:5e:aa:18:ee:8f:88:
28:d4:35:ae:73:8c:fc:d8:bf:52:39:82:33:7f:4b:a1:78:c0:
aa:7d:3e:48:c1:e2:68:d6:84:f6:86:5f:46:3c:1a:66:19:d1:
e9:a3:93:e8:59:e6:cb:d9:e7:1c:30:89:21:71:27:c6:e7:80:
1e:55:43:28:79:e5:12:e2:31:f5:f9:6e:6a:ab:f4:a7:b8:14:
d1:11:14:7a:01:54:e5:f5:0b:5e:63:01:a8:9f:43:60:df:0e:
75:8d:ae:ca:65:30:07:43:22:bd:c5:4e:72:31:71:df:b0:76:
c5:8e:0b:dd:88:2b:92:e8:8d:32:22:2a:5d:50:7f:09:57:79:
3b:5a:2c:70:dd:15:cd:14:10:d7:6a:ce:15:c5:0d:54:bb:99:
56:95:b6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vTKbfRqMge8Ze5FM433MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjFkMGYyYzNkMjFlNTRjNGQxODEyNzYwNDQzNWE5MGYy
NGRiNTEwHhcNMjUxMDE5MTAwMTQzWhcNMjUxMDIwMTAwMTQzWjAzMTEwLwYDVQQD
Eyg4ZWYxNWY4NjMxZDM0ZTNmZjI2Y2E1ZTE4NjI5MmU3MWJjNGU1NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOGZbn1AvBOvyxJQlR4cQDhJT6k3
S975g6j2e9XLwspQMMCWKmbPc4j/8edVuMf6y3p6tt1QezxOwiiTO9patIhUheee
LlUMBz5wMgLbBJl1bb8hXnnbedqEAPSuNJZUlY6Lzfnrr3s+CJIQ/TywWLZWf2Mj
Y0ZcQaGlWmTfiMIPb/6FjEOFuJwyHDOw1OVO2s2lSjJTTqVy82OyO0veT8croRbG
OnElgdumgHOwgYzHUkR0KT3O73jtI7+4kAmxWyz2s4Wq1prUQExsRwsvt0f6mKSZ
G09DD2t6jH+EzauaIPc0mx0kwXj2jJpxUaFyNRdiMQPCCuCnN5Mmlt4u9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7xX4Yx004/8myl4YYpLnG8TlbSMB8GA1UdIwQY
MBaAFAux0PLD0h5UxNGBJ2BENakPJNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQt
Nzk5ZjdmNDU2MTYwLzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQtNzk5ZjdmNDU2MTYw
LzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI745M2UR
81zhCwTve8IpYTyGQ1tO5adwteOcZenyAFRMX+JL0gdPcjhBCnsb+vPd+/v1pnDv
r231dp3h83yn9bJRUtmnCoDzal3Ig3fEN0vPfI4WXMpM1PaEMl5O1eVn4K+TW1n3
XqoY7o+IKNQ1rnOM/Ni/UjmCM39LoXjAqn0+SMHiaNaE9oZfRjwaZhnR6aOT6Fnm
y9nnHDCJIXEnxueAHlVDKHnlEuIx9fluaqv0p7gU0REUegFU5fULXmMBqJ9DYN8O
dY2uymUwB0MivcVOcjFx37B2xY4L3YgrkuiNMiIqXVB/CVd5O1oscN0VzRQQ12rO
FcUNVLuZVpW2fg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:56 2025 by rpki-client