Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: QbtY5opxTq23meV8BpO/hEdPaafwJIQYm82WnBha9nc=
Subject key identifier: F0:AC:6F:1B:E4:FD:3B:49:DA:C2:C1:06:F3:EE:9F:17:B7:D9:A5:43
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019A00A34DFD9C4E105AE0AFBC25461BCEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 08:01:33 +0000
Manifest this update: Mon 20 Oct 2025 08:01:33 +0000
Manifest next update: Tue 21 Oct 2025 08:01:33 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: LOlrIGdZeofMAn8eVVPdJpOKXg6tRnTv7ibDcaT2iAw=)
2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:4d:fd:9c:4e:10:5a:e0:af:bc:25:46:1b:ce:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Oct 20 08:01:33 2025 GMT
Not After : Oct 21 08:01:33 2025 GMT
Subject: CN=f0ac6f1be4fd3b49dac2c106f3ee9f17b7d9a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:ee:1a:1d:1d:ac:99:02:c2:df:82:2b:d8:
b7:76:cb:a0:97:e2:4f:64:5e:ba:90:ee:4a:13:ee:
a7:7f:b0:e8:21:a5:b2:db:7b:49:0e:36:09:a4:cf:
a7:df:c8:f1:b4:b1:f9:15:55:85:80:73:86:cf:65:
49:45:39:7e:4e:85:ef:45:7f:c9:94:a9:2d:b5:0b:
49:c6:a4:57:bc:0f:9d:df:ed:0f:9c:7b:49:9a:66:
bc:a3:4b:c0:35:a5:6b:a4:8b:a3:c8:af:f6:b0:32:
10:99:78:f1:ec:b7:4d:f8:37:a2:6c:40:06:37:97:
67:dc:98:80:9a:c7:83:6b:03:f8:b4:32:33:95:ce:
cc:99:40:4c:8a:de:94:71:c6:67:b3:08:fc:38:d7:
50:1a:57:6c:90:a5:25:be:ed:a4:7c:d7:a9:4b:58:
d9:76:ce:15:59:92:3b:36:c0:09:67:ae:b5:60:dd:
a1:ea:c2:20:d1:37:45:c6:97:68:f0:cd:89:7e:1f:
40:37:12:62:de:73:d4:b6:a4:d1:5f:54:8f:57:da:
2a:a8:7c:82:3a:e8:28:d4:3e:d6:c3:1c:5d:fd:50:
15:9e:fc:07:80:fd:06:15:be:65:54:f9:f8:0e:17:
06:cf:9c:7f:cc:3d:92:95:3c:85:52:4e:5b:c5:f4:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:6F:1B:E4:FD:3B:49:DA:C2:C1:06:F3:EE:9F:17:B7:D9:A5:43
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e9:87:59:cb:ca:4f:1d:58:92:71:6b:35:38:b4:08:2f:a3:
73:6d:e1:17:70:a1:48:d4:54:d8:93:43:dd:ce:60:13:16:bf:
48:6e:3c:24:ce:fd:a7:d4:e4:aa:3c:4e:49:fe:84:c5:42:b9:
11:04:2d:59:91:c9:fd:2d:87:f7:0e:fa:2d:f7:bc:da:5b:92:
4b:5a:ef:44:36:ad:a1:3b:db:f0:e5:91:9b:61:da:16:d3:33:
95:c1:92:b4:14:76:37:de:75:78:df:04:47:f6:96:76:51:be:
d2:1c:41:35:24:00:06:69:6d:ec:fc:56:e1:4a:0e:2b:87:c3:
97:2f:04:05:d7:3f:bd:91:e1:22:9f:8e:7a:74:fc:73:7b:26:
91:dc:ae:35:8a:e7:08:56:b4:cc:7e:99:cd:c8:c7:ba:f2:b0:
81:08:07:d9:67:f5:86:6e:e1:b5:8e:08:7a:49:fd:0a:c6:90:
4a:fc:78:c8:9e:b6:69:ba:26:c6:4e:eb:f7:c2:47:49:6c:00:
07:8c:a1:5e:42:79:f8:6a:df:c9:3e:1c:92:d8:f8:4b:d8:b2:
89:3a:6b:ad:56:63:a8:39:7c:24:6f:43:f0:11:61:f7:c9:13:
63:db:f0:4d:c2:ec:b7:ac:07:52:51:4e:24:9a:33:7c:3e:f6:
59:db:5c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo039nE4QWuCvvCVGG87vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk
NjEyMjAwHhcNMjUxMDIwMDgwMTMzWhcNMjUxMDIxMDgwMTMzWjAzMTEwLwYDVQQD
EyhmMGFjNmYxYmU0ZmQzYjQ5ZGFjMmMxMDZmM2VlOWYxN2I3ZDlhNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FnuGh0drJkCwt+CK9i3dsugl+JP
ZF66kO5KE+6nf7DoIaWy23tJDjYJpM+n38jxtLH5FVWFgHOGz2VJRTl+ToXvRX/J
lKkttQtJxqRXvA+d3+0PnHtJmma8o0vANaVrpIujyK/2sDIQmXjx7LdN+DeibEAG
N5dn3JiAmseDawP4tDIzlc7MmUBMit6UccZnswj8ONdQGldskKUlvu2kfNepS1jZ
ds4VWZI7NsAJZ661YN2h6sIg0TdFxpdo8M2Jfh9ANxJi3nPUtqTRX1SPV9oqqHyC
Ougo1D7Wwxxd/VAVnvwHgP0GFb5lVPn4DhcGz5x/zD2SlTyFUk5bxfSPHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCsbxvk/TtJ2sLBBvPunxe32aVDMB8GA1UdIwQY
MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt
NDNlOTFlNWVmMTQ1LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1
LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0+mHWcvK
Tx1YknFrNTi0CC+jc23hF3ChSNRU2JND3c5gExa/SG48JM79p9TkqjxOSf6ExUK5
EQQtWZHJ/S2H9w76Lfe82luSS1rvRDatoTvb8OWRm2HaFtMzlcGStBR2N951eN8E
R/aWdlG+0hxBNSQABmlt7PxW4UoOK4fDly8EBdc/vZHhIp+OenT8c3smkdyuNYrn
CFa0zH6ZzcjHuvKwgQgH2Wf1hm7htY4Iekn9CsaQSvx4yJ62abomxk7r98JHSWwA
B4yhXkJ5+GrfyT4cktj4S9iyiTprrVZjqDl8JG9D8BFh98kTY9vwTcLst6wHUlFO
JJozfD72Wdtczg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:28:25 2025 by rpki-client