
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: pBULb4yG1i52LpF9ydA6l8rVUZFolj0UEqwnM2CBwio=
Subject key identifier: 93:79:33:88:25:D1:3D:64:E3:E7:31:16:16:ED:F3:6F:65:D0:41:8F
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 0199FC58A85A2377543BBCE448522D723007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 0375
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: UR6b8V0EdTuwn9TVGx5ah4IFMZY1zh2IFyncrAT4zSY=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a8:5a:23:77:54:3b:bc:e4:48:52:2d:72:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=9379338825d13d64e3e7311616edf36f65d0418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:cb:b0:ca:61:bd:f8:4c:a2:14:b8:a6:de:
72:4c:70:57:d6:32:54:e6:58:73:f0:8d:70:fe:bd:
a8:8f:a7:fc:d3:6b:2e:4d:91:13:f1:86:74:1b:05:
76:6a:3a:37:35:dd:84:7c:5f:10:2e:ed:59:a9:47:
2f:4e:c3:63:91:50:48:9d:d6:e3:95:41:ea:e2:c0:
9a:4e:56:f5:66:16:59:c3:76:0c:83:c1:80:b4:17:
c5:60:c2:82:95:23:20:9f:91:9f:73:21:15:f8:09:
8a:f9:86:bf:5b:f2:a5:9a:a1:c1:81:70:73:78:8f:
6a:71:58:94:6d:0c:39:95:14:dc:35:a1:d5:63:93:
7f:1f:1a:0d:a2:2a:78:21:a5:a2:69:72:a6:a8:fd:
e3:f6:99:bd:80:b7:0d:54:0e:ab:64:2e:fa:f0:18:
b6:4c:31:3c:2b:a2:15:3f:99:b0:14:d7:85:15:4b:
3d:24:e3:f5:0d:88:9d:18:fd:b2:e5:fa:be:f0:25:
fc:47:81:34:c8:a2:4f:db:6c:96:9a:c2:88:31:fd:
62:27:12:c9:63:2d:6a:dd:68:53:06:87:91:82:41:
b2:9d:18:22:d4:38:e3:2b:e3:d3:83:94:7a:cc:72:
17:e1:16:e0:cc:c6:28:c8:1d:87:77:2d:c0:3d:e3:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:33:88:25:D1:3D:64:E3:E7:31:16:16:ED:F3:6F:65:D0:41:8F
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:78:9d:08:a9:7c:e4:f7:a1:3c:38:e3:76:28:19:38:0b:7b:
9f:0b:de:00:02:e4:bd:5b:13:20:4b:49:97:d1:26:89:a2:92:
f5:d7:9a:87:89:b8:88:a3:72:1d:ad:eb:75:de:9f:b2:e3:db:
36:91:77:ca:96:c2:6c:57:8a:4b:8d:bb:9d:6f:ad:c1:64:ef:
e1:d1:eb:fb:31:6c:5e:10:42:85:e2:bd:d7:2c:22:14:0f:ce:
8b:5d:82:27:89:ee:7c:ba:54:65:f7:3b:31:6a:b3:42:f6:6e:
43:c6:38:d0:f8:26:3b:c3:bb:5d:13:44:22:a4:c6:c6:1c:e4:
26:cb:2a:1f:86:be:3b:fb:9b:d6:f5:3f:cc:6c:d0:b6:28:4e:
bf:71:63:ee:98:91:3c:70:a8:e5:85:af:61:e2:4c:77:1a:f5:
6b:66:92:4d:f3:1e:4a:cb:85:5f:70:5d:82:a4:db:80:91:c3:
85:c0:45:7f:f9:76:10:2e:58:28:22:89:5d:b8:f7:d2:11:13:
12:49:1c:93:15:a5:f7:1b:e1:01:ca:f9:a5:44:a3:b4:02:07:
a7:ac:15:e5:1f:7b:c7:a3:a4:e9:e8:3d:5e:41:1f:94:90:e7:
82:b3:49:17:d4:19:e4:a3:f6:f1:b8:76:bf:69:ae:d1:89:07:
af:95:63:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKhaI3dUO7zkSFItcjAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk
NTQyMTIwHhcNMjUxMDE5MTIwMTMyWhcNMjUxMDIwMTIwMTMyWjAzMTEwLwYDVQQD
Eyg5Mzc5MzM4ODI1ZDEzZDY0ZTNlNzMxMTYxNmVkZjM2ZjY1ZDA0MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRHLsMphvfhMohS4pt5yTHBX1jJU
5lhz8I1w/r2oj6f802suTZET8YZ0GwV2ajo3Nd2EfF8QLu1ZqUcvTsNjkVBIndbj
lUHq4sCaTlb1ZhZZw3YMg8GAtBfFYMKClSMgn5GfcyEV+AmK+Ya/W/KlmqHBgXBz
eI9qcViUbQw5lRTcNaHVY5N/HxoNoip4IaWiaXKmqP3j9pm9gLcNVA6rZC768Bi2
TDE8K6IVP5mwFNeFFUs9JOP1DYidGP2y5fq+8CX8R4E0yKJP22yWmsKIMf1iJxLJ
Yy1q3WhTBoeRgkGynRgi1DjjK+PTg5R6zHIX4RbgzMYoyB2Hdy3APePt7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN5M4gl0T1k4+cxFhbt829l0EGPMB8GA1UdIwQY
MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt
MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw
LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXidCKl8
5PehPDjjdigZOAt7nwveAALkvVsTIEtJl9EmiaKS9deah4m4iKNyHa3rdd6fsuPb
NpF3ypbCbFeKS427nW+twWTv4dHr+zFsXhBCheK91ywiFA/Oi12CJ4nufLpUZfc7
MWqzQvZuQ8Y40PgmO8O7XRNEIqTGxhzkJssqH4a+O/ub1vU/zGzQtihOv3Fj7piR
PHCo5YWvYeJMdxr1a2aSTfMeSsuFX3BdgqTbgJHDhcBFf/l2EC5YKCKJXbj30hET
EkkckxWl9xvhAcr5pUSjtAIHp6wV5R97x6Ok6eg9XkEflJDngrNJF9QZ5KP28bh2
v2mu0YkHr5Vj8Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:39 2025 by rpki-client