Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: gVqpk+N4aTuu5vK4IncLo1uvrPKf7p+fhJvBPbMHB/Y=
Subject key identifier: 5A:5E:AF:BE:0C:AC:4C:A1:16:EB:89:E4:F2:87:02:2A:A6:CC:7F:0C
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 0199FBEA7C3BFB87F0195EEC388BE52619FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: sjcF7/IlLvDEa8S2rtKE2sKOlWMpla94nWC+28s6Pao=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7c:3b:fb:87:f0:19:5e:ec:38:8b:e5:26:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=5a5eafbe0cac4ca116eb89e4f287022aa6cc7f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:e7:75:e6:28:26:db:dc:ee:fc:f3:ce:7a:
76:b1:d0:14:db:de:a3:13:1f:40:de:4c:45:2f:b0:
fb:47:ae:3b:e5:27:d9:dc:93:08:76:a0:1a:df:ee:
7d:64:f3:1e:b6:0d:4a:06:bb:0c:98:ef:3a:94:fa:
4b:cc:10:40:ed:4b:4f:b1:5d:5b:19:d6:a7:43:e7:
02:48:31:66:c5:e7:24:a6:73:00:8c:02:f5:a3:5f:
9a:4c:02:0b:36:52:5f:62:2d:6c:51:19:2a:72:ab:
a4:13:88:57:af:ce:d3:5f:aa:92:34:38:8c:36:26:
e3:41:78:7b:f6:7c:b9:49:61:74:30:6f:7c:6a:d2:
06:53:9d:1d:5d:a6:f1:f8:db:db:09:c0:81:c6:77:
76:6e:cb:41:ff:5f:3e:8a:92:57:c6:66:4d:d1:cc:
9f:41:46:1b:a8:89:f9:76:f0:74:02:84:07:b9:67:
5f:ce:d9:4c:6e:cf:84:69:73:18:6c:58:4f:ad:42:
9b:b0:b8:2c:b8:08:ad:99:38:a8:a2:bc:7d:33:a4:
2c:ea:7a:44:b1:1d:f0:c1:9c:ff:bc:1e:bb:17:c6:
2a:32:0b:db:26:01:0a:3d:5a:b2:96:dd:22:f7:c4:
38:49:b8:48:1d:80:65:73:66:e2:c8:c0:b6:9f:1c:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:AF:BE:0C:AC:4C:A1:16:EB:89:E4:F2:87:02:2A:A6:CC:7F:0C
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:fd:b6:2a:d0:f2:27:5e:ed:c9:e8:23:ec:54:98:4e:aa:
9a:a9:05:16:b1:ab:a8:0c:ef:31:00:9a:d9:75:0a:41:69:47:
90:47:ce:40:73:41:9c:55:b5:0e:2c:a3:91:28:15:a2:cd:07:
de:0a:36:88:be:5a:a9:12:30:cf:76:0f:0d:37:88:3e:9f:29:
17:48:b5:08:cb:71:12:80:6a:2f:17:16:70:8d:ed:4f:33:7a:
c3:26:02:ca:3b:92:eb:d8:57:71:2c:5b:28:b9:5c:89:b6:86:
59:2a:81:30:ec:b5:22:1a:f6:f5:b5:9b:9d:a6:34:11:6c:a7:
87:d6:dd:7c:e0:d0:e9:dc:df:58:a2:74:81:d4:ea:80:3c:a0:
1e:ac:cb:5b:d8:1b:1a:21:3a:07:3d:f0:fa:20:4b:1f:12:a0:
fc:d9:6f:f3:2a:9c:f1:4a:8b:4f:29:8e:68:9b:b1:15:76:28:
b6:6f:90:ef:f2:6c:c3:57:4b:4b:a9:bd:10:ac:c9:fb:09:59:
93:ae:28:ff:32:8b:db:4f:41:df:fe:c3:51:3d:92:fb:7b:60:
33:c6:ba:45:e1:b5:b5:b6:1a:6d:c0:a2:95:fd:38:d4:e3:d5:
e4:b4:72:1b:01:bd:b5:91:8b:ce:ee:e4:f1:ef:bd:c1:f1:ab:
28:a2:ed:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76nw7+4fwGV7sOIvlJhn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzIyMTM4YzBhZjgxYzVjYmY0M2E0ZjhkZGQ3YzhkZTEz
YzcyMzAwHhcNMjUxMDE5MTAwMTEyWhcNMjUxMDIwMTAwMTEyWjAzMTEwLwYDVQQD
Eyg1YTVlYWZiZTBjYWM0Y2ExMTZlYjg5ZTRmMjg3MDIyYWE2Y2M3ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXvndeYoJtvc7vzzznp2sdAU296j
Ex9A3kxFL7D7R6475SfZ3JMIdqAa3+59ZPMetg1KBrsMmO86lPpLzBBA7UtPsV1b
GdanQ+cCSDFmxeckpnMAjAL1o1+aTAILNlJfYi1sURkqcqukE4hXr87TX6qSNDiM
NibjQXh79ny5SWF0MG98atIGU50dXabx+NvbCcCBxnd2bstB/18+ipJXxmZN0cyf
QUYbqIn5dvB0AoQHuWdfztlMbs+EaXMYbFhPrUKbsLgsuAitmTioorx9M6Qs6npE
sR3wwZz/vB67F8YqMgvbJgEKPVqylt0i98Q4SbhIHYBlc2biyMC2nxyNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFper74MrEyhFuuJ5PKHAiqmzH8MMB8GA1UdIwQY
MBaAFO3CITjAr4HFy/Q6T43dfI3hPHIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYt
NTUzOGRjMGJiMDk5LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYtNTUzOGRjMGJiMDk5
LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6b9tirQ
8ide7cnoI+xUmE6qmqkFFrGrqAzvMQCa2XUKQWlHkEfOQHNBnFW1DiyjkSgVos0H
3go2iL5aqRIwz3YPDTeIPp8pF0i1CMtxEoBqLxcWcI3tTzN6wyYCyjuS69hXcSxb
KLlcibaGWSqBMOy1Ihr29bWbnaY0EWynh9bdfODQ6dzfWKJ0gdTqgDygHqzLW9gb
GiE6Bz3w+iBLHxKg/Nlv8yqc8UqLTymOaJuxFXYotm+Q7/Jsw1dLS6m9EKzJ+wlZ
k64o/zKL209B3/7DUT2S+3tgM8a6ReG1tbYabcCilf041OPV5LRyGwG9tZGLzu7k
8e+9wfGrKKLtww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:40 2025 by rpki-client