
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: r9w6iilMODsmpiqm7s/ihcPXmLY+p9h7+qJNed4cQO0=
Subject key identifier: 09:94:94:CE:C9:B6:CA:71:49:37:64:E5:9F:1E:85:D6:8E:32:2F:4B
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 0199FC21492AB45085C7B8ACD796955BC730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 0713
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: 4vPJJPspC/+8porxqf89wooe/QhiMFyI12ti5RKGfeQ=)
2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=)
3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:49:2a:b4:50:85:c7:b8:ac:d7:96:95:5b:c7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=099494cec9b6ca71493764e59f1e85d68e322f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:38:61:b3:82:56:bf:15:bb:93:0d:3d:16:
6d:5e:bf:50:5d:5e:7c:a5:53:ea:54:ed:e2:58:34:
5d:69:ac:89:c6:27:f7:0e:69:ac:f0:eb:da:90:c6:
ff:49:4b:aa:d2:2b:31:7f:c0:65:34:4b:ab:4f:dc:
69:b6:1e:a6:3f:e2:07:1d:88:ee:cd:8a:3d:23:df:
fa:d2:5a:11:a5:42:ed:71:d9:fe:6d:f2:fe:b1:6a:
ba:cf:1e:34:ae:4b:0c:2f:dc:33:89:87:9d:5a:28:
fd:4b:bb:f2:85:0a:a7:94:ac:26:90:8a:e8:38:f5:
68:ce:da:b6:77:a1:cb:60:f5:0f:ff:6c:20:ca:35:
3c:df:87:a5:57:40:93:3b:63:79:1c:fe:3c:05:09:
d4:b5:3a:a4:3c:95:7f:e0:21:ec:92:fd:2f:c8:23:
72:6c:c9:0b:73:58:76:0d:1f:d7:fb:fe:93:99:ae:
3c:f9:6f:be:23:f3:f2:78:a5:43:a8:70:8a:2c:7a:
e1:fe:b9:b4:ac:32:3a:91:44:3f:e7:a3:2c:0c:59:
2e:b5:89:b4:a7:ac:ce:46:ca:0d:4f:ab:67:cc:72:
69:02:87:83:ec:da:c0:1e:ba:b4:ad:5d:eb:dc:2d:
6b:f3:63:6f:cb:dc:8c:03:e1:f8:01:0b:65:f7:71:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:94:CE:C9:B6:CA:71:49:37:64:E5:9F:1E:85:D6:8E:32:2F:4B
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fb:dc:a3:3c:b9:52:fe:5e:07:0a:59:8d:44:01:c2:a9:44:
74:40:05:86:dd:63:23:7f:29:f1:14:59:54:a7:52:c0:28:94:
94:a2:5d:b9:84:87:8c:be:0f:8a:1f:69:bf:a2:3f:ef:4a:4e:
46:7d:63:8d:3a:c3:76:fa:3f:b3:0d:a9:34:22:bd:e1:3f:65:
ce:c8:a5:e0:61:dd:8b:e2:8a:7d:f0:ec:0b:44:a7:57:fc:05:
9c:49:d7:59:d6:db:91:f1:b5:bb:80:e8:9d:76:1d:38:7c:ab:
25:aa:f8:10:51:4c:8e:cf:b8:86:20:12:45:2d:dd:30:89:6c:
bb:74:83:19:0e:61:6e:5c:03:5a:43:9e:55:73:26:e1:99:04:
01:7b:f5:00:30:43:40:7d:c9:de:b3:6c:54:a0:d6:21:96:ba:
d0:b2:d4:8b:ab:f8:61:94:31:30:bd:b9:49:ce:57:cf:8b:df:
8a:10:ca:45:ad:53:5c:44:15:d7:a7:dd:1b:4f:00:43:98:f7:
85:6b:ea:32:c7:d3:cd:e5:c8:f8:15:dd:ce:c2:ce:32:80:a9:
fa:ad:35:8a:32:28:c0:81:d6:09:d1:11:3b:fe:8d:58:3e:9e:
3b:12:ab:09:a3:84:e2:47:09:3b:6b:f6:89:45:be:d8:c8:bb:
28:24:c7:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUkqtFCFx7is15aVW8cwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2
NzcyYjAwHhcNMjUxMDE5MTEwMTAzWhcNMjUxMDIwMTEwMTAzWjAzMTEwLwYDVQQD
EygwOTk0OTRjZWM5YjZjYTcxNDkzNzY0ZTU5ZjFlODVkNjhlMzIyZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG44YbOCVr8Vu5MNPRZtXr9QXV58
pVPqVO3iWDRdaayJxif3Dmms8OvakMb/SUuq0isxf8BlNEurT9xpth6mP+IHHYju
zYo9I9/60loRpULtcdn+bfL+sWq6zx40rksML9wziYedWij9S7vyhQqnlKwmkIro
OPVoztq2d6HLYPUP/2wgyjU834elV0CTO2N5HP48BQnUtTqkPJV/4CHskv0vyCNy
bMkLc1h2DR/X+/6Tma48+W++I/PyeKVDqHCKLHrh/rm0rDI6kUQ/56MsDFkutYm0
p6zORsoNT6tnzHJpAoeD7NrAHrq0rV3r3C1r82Nvy9yMA+H4AQtl93FJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmUlM7JtspxSTdk5Z8ehdaOMi9LMB8GA1UdIwQY
MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt
MjZjZGM1NTY0NGQ0LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0
LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/vcozy5
Uv5eBwpZjUQBwqlEdEAFht1jI38p8RRZVKdSwCiUlKJduYSHjL4Pih9pv6I/70pO
Rn1jjTrDdvo/sw2pNCK94T9lzsil4GHdi+KKffDsC0SnV/wFnEnXWdbbkfG1u4Do
nXYdOHyrJar4EFFMjs+4hiASRS3dMIlsu3SDGQ5hblwDWkOeVXMm4ZkEAXv1ADBD
QH3J3rNsVKDWIZa60LLUi6v4YZQxML25Sc5Xz4vfihDKRa1TXEQV16fdG08AQ5j3
hWvqMsfTzeXI+BXdzsLOMoCp+q01ijIowIHWCdERO/6NWD6eOxKrCaOE4kcJO2v2
iUW+2Mi7KCTHbQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:12 2025 by rpki-client