Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: PRoZavbpVbV2zrvmrN7UqYBJzSSOM/IVbqN0oGK/7Dw=
Subject key identifier: D5:8C:D8:35:AC:34:96:2D:7B:62:F9:DD:2A:C4:1A:77:6A:AF:EA:EC
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 0199FC5846D3EC4AB2063AA2EDFCE209D3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: Pko0BllILw9Pu8R6swpXZy0ioekjRdyUQgwlH3TYsmc=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:46:d3:ec:4a:b2:06:3a:a2:ed:fc:e2:09:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=d58cd835ac34962d7b62f9dd2ac41a776aafeaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:8a:66:c5:c5:5b:05:9a:fd:41:47:59:10:
08:35:54:47:25:5d:cf:43:3d:5c:87:40:5c:7e:24:
70:57:93:19:ae:90:a5:86:be:07:4f:bd:bc:5e:d5:
4b:d4:26:2c:20:00:f4:65:5e:ae:85:b6:4c:3c:9b:
d4:a1:dc:0b:12:e4:cf:03:4d:70:ee:e0:2b:26:62:
6e:ee:6b:a2:13:b8:0e:88:e7:bd:b6:ba:63:d9:ea:
e3:ab:df:d8:83:7c:9a:13:e1:42:fc:c7:9e:f6:7d:
78:b5:ca:09:25:b5:7d:7d:d1:6c:8b:70:85:b4:87:
72:6c:f9:95:11:7e:d6:1b:5a:82:36:fd:a6:94:19:
1e:35:35:38:91:04:0c:7a:7e:fb:98:95:58:b0:64:
56:ad:6f:55:bf:74:d0:af:62:d2:c8:d3:06:30:c6:
f0:8f:7a:4b:a1:87:72:e7:90:17:83:5a:41:fe:11:
12:45:95:db:26:d1:31:7d:70:1b:14:29:f4:6f:fb:
27:22:2d:78:3e:93:44:cb:df:51:44:a1:39:8f:f8:
57:4e:9f:34:13:33:f8:77:fc:bd:a3:24:bd:5e:09:
03:e6:0c:e2:c2:59:7d:34:5d:9c:5e:a3:08:27:be:
6f:6e:07:78:e2:b2:77:98:76:d5:a1:cf:91:d9:1f:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8C:D8:35:AC:34:96:2D:7B:62:F9:DD:2A:C4:1A:77:6A:AF:EA:EC
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:87:ba:8b:a5:da:1e:ca:21:b1:10:b4:54:f4:9c:7f:ab:7b:
c6:fa:35:1b:37:31:d6:54:07:9a:16:fd:d9:0d:f8:77:c0:6a:
ef:d9:1c:93:61:55:c2:a3:8b:1d:58:85:69:dd:b1:d6:d3:c4:
9c:af:ac:84:b8:89:00:ca:10:7f:41:99:02:65:58:b5:36:2b:
13:51:ff:46:6f:82:e8:2d:13:89:c6:b9:6a:06:00:6c:41:79:
86:0d:8f:ef:fa:fc:27:a1:0f:2b:dc:59:33:58:46:74:04:79:
ad:92:ef:79:2b:87:a3:c9:e4:87:fe:0a:0a:14:b8:9e:dd:b1:
d6:1c:a5:eb:5e:74:19:ff:ea:60:1d:74:28:62:c8:f8:93:e2:
fd:b1:8a:ca:b0:bf:2c:ae:56:cf:3c:bd:45:b0:22:c1:d7:b6:
db:21:de:f0:50:63:5a:0d:ea:48:e5:ae:14:3b:a3:e7:be:6b:
b6:67:65:ba:30:78:87:a6:41:bc:d3:a7:14:a0:a3:5b:6b:66:
49:09:72:13:5d:b7:23:80:3f:8c:19:88:46:21:9f:72:fa:79:
eb:b5:dc:53:75:ac:73:28:6b:bf:77:ed:4c:92:c7:53:07:1c:
37:f9:6b:39:06:8f:50:3a:67:8c:1f:14:71:68:21:19:c3:33:
f6:48:87:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEbT7EqyBjqi7fziCdOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz
ZGU5NDgwHhcNMjUxMDE5MTIwMTA3WhcNMjUxMDIwMTIwMTA3WjAzMTEwLwYDVQQD
EyhkNThjZDgzNWFjMzQ5NjJkN2I2MmY5ZGQyYWM0MWE3NzZhYWZlYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4uKZsXFWwWa/UFHWRAINVRHJV3P
Qz1ch0BcfiRwV5MZrpClhr4HT728XtVL1CYsIAD0ZV6uhbZMPJvUodwLEuTPA01w
7uArJmJu7muiE7gOiOe9trpj2erjq9/Yg3yaE+FC/Mee9n14tcoJJbV9fdFsi3CF
tIdybPmVEX7WG1qCNv2mlBkeNTU4kQQMen77mJVYsGRWrW9Vv3TQr2LSyNMGMMbw
j3pLoYdy55AXg1pB/hESRZXbJtExfXAbFCn0b/snIi14PpNEy99RRKE5j/hXTp80
EzP4d/y9oyS9XgkD5gziwll9NF2cXqMIJ75vbgd44rJ3mHbVoc+R2R/1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWM2DWsNJYte2L53SrEGndqr+rsMB8GA1UdIwQY
MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt
MzViNTZjY2NhODQ5LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5
LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoe6i6Xa
HsohsRC0VPScf6t7xvo1Gzcx1lQHmhb92Q34d8Bq79kck2FVwqOLHViFad2x1tPE
nK+shLiJAMoQf0GZAmVYtTYrE1H/Rm+C6C0Tica5agYAbEF5hg2P7/r8J6EPK9xZ
M1hGdAR5rZLveSuHo8nkh/4KChS4nt2x1hyl6150Gf/qYB10KGLI+JPi/bGKyrC/
LK5Wzzy9RbAiwde22yHe8FBjWg3qSOWuFDuj575rtmdlujB4h6ZBvNOnFKCjW2tm
SQlyE123I4A/jBmIRiGfcvp567XcU3Wscyhrv3ftTJLHUwccN/lrOQaPUDpnjB8U
cWghGcMz9kiHHg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:31 2025 by rpki-client