Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: h7ljDVlFH73+Qyul5wYqKq5XVUevtdRr1f2myhLNGuI=
Subject key identifier: D4:49:FC:C9:68:C5:91:18:85:57:8D:9F:CF:50:1C:B8:B6:58:8E:CC
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 0199FDD9753F367F3D26C8CBB7C98151606C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 0459
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: 8xnH2EyFugJWapFt0CpHPblFsPY.roa (hash: XrkRQTN/1NhwGqzw1tcTB1Z4+v0pWU4DY/KepWXR+ho=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: pDqWeivFMtr2X5RPWPu35CkXUQhhIDWoca3fULEtrHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:75:3f:36:7f:3d:26:c8:cb:b7:c9:81:51:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=d449fcc968c5911885578d9fcf501cb8b6588ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:85:74:1a:08:1c:18:70:0f:d7:e0:4e:bd:
d6:9b:d5:b8:1e:88:03:75:cc:bf:9a:58:fe:91:9b:
9a:05:0e:27:2f:f4:31:5a:3b:f6:7a:7d:2f:d0:5f:
8f:5b:05:37:f7:8a:a9:a0:f4:47:2c:fc:a3:fb:c0:
8d:82:8d:6a:96:2f:96:e8:a7:d9:9c:ac:34:d5:73:
56:94:bc:2c:56:ff:02:ba:2d:ba:0d:e2:5b:3c:ca:
69:24:cb:8e:07:a3:92:f0:b8:15:db:46:0d:ba:0d:
88:b1:ad:f3:9a:06:84:0c:1e:8a:b4:90:b4:6d:c7:
9b:b6:27:80:8d:ed:75:41:f5:00:bf:87:5c:05:35:
81:a6:af:f0:34:51:e6:51:62:62:df:31:c8:49:c7:
b6:38:7e:5f:23:01:93:64:25:a8:ad:ae:f1:e3:47:
ea:46:f5:2f:1e:53:64:fb:e4:57:26:3d:ed:40:1a:
32:76:b0:33:cf:a5:63:c2:ef:e6:37:35:b0:69:34:
63:55:b6:97:3b:a9:dd:8b:31:dd:b1:20:64:03:72:
fc:94:cd:c5:ec:37:fc:68:bb:0b:8a:c1:99:ca:2d:
18:78:78:42:db:23:c7:ab:e8:2d:45:ea:5b:2f:13:
6a:42:76:62:84:66:cf:dc:d0:d7:92:52:f3:42:3a:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:FC:C9:68:C5:91:18:85:57:8D:9F:CF:50:1C:B8:B6:58:8E:CC
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:65:7b:59:23:48:b2:5e:de:dc:ee:54:86:f9:63:70:c8:e6:
c4:7d:e5:b1:68:d0:94:02:58:5d:e1:89:64:8e:71:ab:64:e6:
97:7d:3b:6f:55:6c:5d:3e:b7:a4:82:97:f2:20:a3:90:8e:47:
7e:06:c5:c9:60:bd:7a:55:99:a5:76:0d:24:61:75:6d:bb:4b:
0f:0c:1a:da:ee:56:aa:aa:eb:05:ca:73:e8:35:97:fe:25:71:
6a:74:1b:0d:53:e5:6d:56:16:a1:d8:c5:6e:d9:e5:b2:12:38:
02:73:27:7c:f5:fb:74:e4:b5:fd:0d:1f:09:82:1c:2f:e5:29:
6e:17:19:62:64:70:a5:16:0c:a0:e9:f4:6f:ac:61:51:bb:c0:
3b:a7:d2:89:df:6b:9c:cd:16:b8:77:16:ea:28:44:66:d5:49:
d7:20:2f:20:99:c6:2c:a6:96:66:ef:2a:d8:5a:17:fe:e6:17:
eb:b5:a2:a5:17:42:5b:02:d3:18:8c:68:19:0c:79:d4:c1:e8:
32:d8:ce:fb:4b:72:4a:2e:2f:e7:bf:42:8f:d1:26:e5:c4:11:
cf:62:c9:60:79:9f:c9:11:98:86:5f:9d:52:41:49:8a:74:1c:
a6:ef:2b:8c:ea:fe:e5:fc:39:0d:59:59:33:35:96:e9:eb:83:
9f:b7:7e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92XU/Nn89JsjLt8mBUWBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1
NTQ2Y2MwHhcNMjUxMDE5MTkwMTUwWhcNMjUxMDIwMTkwMTUwWjAzMTEwLwYDVQQD
EyhkNDQ5ZmNjOTY4YzU5MTE4ODU1NzhkOWZjZjUwMWNiOGI2NTg4ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TSFdBoIHBhwD9fgTr3Wm9W4HogD
dcy/mlj+kZuaBQ4nL/QxWjv2en0v0F+PWwU394qpoPRHLPyj+8CNgo1qli+W6KfZ
nKw01XNWlLwsVv8Cui26DeJbPMppJMuOB6OS8LgV20YNug2Isa3zmgaEDB6KtJC0
bcebtieAje11QfUAv4dcBTWBpq/wNFHmUWJi3zHISce2OH5fIwGTZCWora7x40fq
RvUvHlNk++RXJj3tQBoydrAzz6Vjwu/mNzWwaTRjVbaXO6ndizHdsSBkA3L8lM3F
7Df8aLsLisGZyi0YeHhC2yPHq+gtRepbLxNqQnZihGbP3NDXklLzQjp+iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRJ/MloxZEYhVeNn89QHLi2WI7MMB8GA1UdIwQY
MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt
NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1
LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2V7WSNI
sl7e3O5UhvljcMjmxH3lsWjQlAJYXeGJZI5xq2Tml307b1VsXT63pIKX8iCjkI5H
fgbFyWC9elWZpXYNJGF1bbtLDwwa2u5WqqrrBcpz6DWX/iVxanQbDVPlbVYWodjF
btnlshI4AnMnfPX7dOS1/Q0fCYIcL+UpbhcZYmRwpRYMoOn0b6xhUbvAO6fSid9r
nM0WuHcW6ihEZtVJ1yAvIJnGLKaWZu8q2FoX/uYX67WipRdCWwLTGIxoGQx51MHo
MtjO+0tySi4v579Cj9Em5cQRz2LJYHmfyRGYhl+dUkFJinQcpu8rjOr+5fw5DVlZ
MzWW6euDn7d+NQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:42 2025 by rpki-client